Skip to content
This repository was archived by the owner on Jan 27, 2026. It is now read-only.

fix(deps): update debug to 4.4.1#171

Merged
AtofStryker merged 1 commit intocypress-io:masterfrom
MikeMcC399:update/debug
Sep 8, 2025
Merged

fix(deps): update debug to 4.4.1#171
AtofStryker merged 1 commit intocypress-io:masterfrom
MikeMcC399:update/debug

Conversation

@MikeMcC399
Copy link
Copy Markdown
Contributor

Situation

debug@4.3.4 is pinned to this fixed version in dependencies. Compare this to cypress@15.1.0 which is configured to use the semver range "debug": "^4.3.4" and thus ships with debug@4.4.1

Change

Update

From To (latest)
debug@4.3.4 debug@4.4.1

Verification

Ubuntu 24.04.3 LTS, Noded.js 22.19.0 LTS

git clean -xfd
npm ci
npm test

Confirm that tests are successful.

DEBUG=commit-info npm test

Confirm that debug logs are output.

@MikeMcC399 MikeMcC399 marked this pull request as ready for review September 5, 2025 05:58
@MikeMcC399
Copy link
Copy Markdown
Contributor Author

MikeMcC399 commented Sep 5, 2025

@AtofStryker

  • This is the only version update I propose to make to production dependencies. After this PR is merged, then PR ci: enable semantic-release #172 can be made available for review, followed by a release.
  • Please review and merge, like for the previous PRs you've processed.

@MikeMcC399 MikeMcC399 marked this pull request as draft September 8, 2025 15:28
@MikeMcC399

This comment was marked as outdated.

@MikeMcC399
Copy link
Copy Markdown
Contributor Author

@AtofStryker

The security advisory GHSA-8mgj-vmr8-frr6 for debug, which originally targeted all versions, is now limited to the compromised and yanked debug@4.4.2 version.

Since this PR never used the compromised version, I'm comfortable with releasing it again for review, so if you would be so kind to review and merge, that would be awesome!

@MikeMcC399 MikeMcC399 marked this pull request as ready for review September 8, 2025 18:39
@AtofStryker AtofStryker merged commit c3af028 into cypress-io:master Sep 8, 2025
1 check passed
@MikeMcC399 MikeMcC399 deleted the update/debug branch September 9, 2025 04:16
@github-actions
Copy link
Copy Markdown

🎉 This PR is included in version 2.2.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants