Skip to content

deps: addressed minimatch cve-2026-118764 and updated cypress to 16.2.1 - #401

Merged
Redtigercod4 merged 2 commits into
pulp:mainfrom
Redtigercod4:deps/mismatch-cve
Nov 1, 2026
Merged

Redtigercod4 merged 2 commits into
pulp:mainfrom
Redtigercod4:deps/mismatch-cve

Conversation

@Redtigercod4

@Redtigercod4 Redtigercod4 commented Nov 1, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Adds an minimatch override to update to the latest patched version. Also updates cypress to the latest version fixing the issue raised in dependabot. There are some minor changes to the sarif-upload.yml action and the new implementation for overrides in the package.json.

Changes

  1. Updated minimatch to version 11.0.3.
  2. Updated Cypress to version 16.2.1.
  3. Fixed sarif-upload.yml issue for skipping forked PRs.

Blockers

N/A

Linked Issues & Epics

N/A

Sources

https://github.com/isaacs/minimatch
https://github.com/cypress-io/cypress
https://osv.dev/vulnerability/CVE-2026-118764

@Redtigercod4 Redtigercod4 changed the title deps: addressed minimatch cve and updated cypress with latest version deps: addressed minimatch cve-2026-118764 and updated cypress to 16.2.1 Nov 1, 2026
@Redtigercod4
Redtigercod4 merged commit 530dd44 into pulp:main Nov 1, 2026
@Redtigercod4
Redtigercod4 deleted the deps/mismatch-cve branch November 1, 2026 09:02
@Redtigercod4 Redtigercod4 self-assigned this Nov 1, 2026
@Redtigercod4 Redtigercod4 added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant