Skip to content

fix(deps): update fast-xml-parser to 5.3.4#1648

Merged
jennifer-shehane merged 1 commit intocypress-io:masterfrom
MikeMcC399:update/fast-xml-parser
Feb 4, 2026
Merged

fix(deps): update fast-xml-parser to 5.3.4#1648
jennifer-shehane merged 1 commit intocypress-io:masterfrom
MikeMcC399:update/fast-xml-parser

Conversation

@MikeMcC399
Copy link
Collaborator

Situation

npm audit reports a high severity vulnerability CVE-2026-25128 (GHSA-37qj-frw5-hhjh) in fast-xml-parser@5.3.3 as a transient dependency of @actions/cache@5.0.5

Change

Execute npm audit fix to update the transient dependency to fast-xml-parser@5.3.4 (current latest)

@cypress-app-bot
Copy link

@MikeMcC399 MikeMcC399 added bug Something isn't working type: dependencies labels Feb 4, 2026
@MikeMcC399 MikeMcC399 self-assigned this Feb 4, 2026
@MikeMcC399 MikeMcC399 force-pushed the update/fast-xml-parser branch from 38b3f75 to 396b1c3 Compare February 4, 2026 07:29
@MikeMcC399
Copy link
Collaborator Author

MikeMcC399 commented Feb 4, 2026

The following error message is unrelated to changes in this PR and should not prevent merger:

  ERROR: 1 dead link found!
  [✖] https://on.cypress.io/environment-variables → Status: 404

@MikeMcC399 MikeMcC399 marked this pull request as ready for review February 4, 2026 07:34
@MikeMcC399
Copy link
Collaborator Author

@jennifer-shehane
Copy link
Member

Hey @MikeMcC399, thanks for the update. Could you also begin tagging @mschile in the PRs that you'd like direct review in moving forward? Thanks!

@jennifer-shehane jennifer-shehane merged commit 9992daa into cypress-io:master Feb 4, 2026
83 of 84 checks passed
@github-actions
Copy link

github-actions bot commented Feb 4, 2026

🎉 This PR is included in version 7.1.2 🎉

The release is available on:

Your semantic-release bot 📦🚀

@MikeMcC399
Copy link
Collaborator Author

@jennifer-shehane

Could you also begin tagging @mschile in the PRs that you'd like direct review in moving forward? Thanks!

Yes, I'll be happy to do that!

@MikeMcC399 MikeMcC399 deleted the update/fast-xml-parser branch February 4, 2026 14:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants