commit-info
commit-info copied to clipboard
cypress-io
Collects Git commit info using git
This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/cypress-io/commit-info). ## Config Migration Needed - [ ]...
![renovate[bot] avatar](https://avatars.githubusercontent.com/in/2740?v=4 "renovate[bot] avatar"){kind=avatar}
This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [lazy-ass](https://redirect.github.com/bahmutov/lazy-ass) | [`1.6.0` -> `2.0.3`](https://renovatebot.com/diffs/npm/lazy-ass/1.6.0/2.0.3) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release...
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [ban-sensitive-files](https://redirect.github.com/bahmutov/ban-sensitive-files) | [`1.10.0` -> `1.10.7`](https://renovatebot.com/diffs/npm/ban-sensitive-files/1.10.0/1.10.7) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/)...
Current version of commit-info package has a dependency of `execa` 1.x, which has a critical security vulnerability (CVSS score 9.8) as reported via Gitlab Security Advisories. Advisory: https://advisories.gitlab.com/pkg/npm/execa/GMS-2020-2/ Recommendation is...
## Why migrate to Trusted Publishing? As part of [npm's security improvements](https://github.blog/changelog/2025-09-29-strengthening-npm-security-important-changes-to-authentication-and-token-management/), Cypress is migrating all GitHub Actions repositories from granular access tokens to npm Trusted Publishing (OIDC). ### Benefits:...
## Current behavior Installing dependencies with `npm ci` logs deprecations and vulnerabilities. These are from `devDependencies` only and do not affect the published npm package `@cypress/commit-info`. ## Desired behavior Installing...
