PellegriniPierre · dependabot · Sep 8, 2020 · Sep 8, 2020 · May 11, 2021
diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml
@@ -0,0 +1,29 @@
+# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
+# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions
+
+name: Node.js CI
+
+on:
+  push:
+    branches: [ develop ]
+  pull_request:
+    branches: [ develop ]
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        node-version: [10.x, 12.x, 14.x]
+
+    steps:
+    - uses: actions/checkout@v2
+    - name: Use Node.js ${{ matrix.node-version }}
+      uses: actions/setup-node@v1
+      with:
+        node-version: ${{ matrix.node-version }}
+    - run: npm ci
+    - run: npm run build --if-present
+    - run: npm test
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,21 @@
+# Security Policy
+
+## Supported Versions
+
+Use this section to tell people about which versions of your project are
+currently being supported with security updates.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 5.1.x   | :white_check_mark: |
+| 5.0.x   | :x:                |
+| 4.0.x   | :white_check_mark: |
+| < 4.0   | :x:                |
+
+## Reporting a Vulnerability
+
+Use this section to tell people how to report a vulnerability.
+
+Tell them where to go, how often they can expect to get an update on a
+reported vulnerability, what to expect if the vulnerability is accepted or
+declined, etc.
diff --git a/package.json b/package.json
@@ -156,7 +156,7 @@
     "lerna": "3.20.2",
     "lint-staged": "9.4.1",
     "listr": "0.14.3",
-    "lodash": "4.17.19",
+    "lodash": "4.17.21",
     "make-empty-github.amrom.workers.devmit": "1.2.0",
     "mocha": "3.5.3",
     "mocha-banner": "1.1.2",

diff --git a/packages/desktop-gui/package.json b/packages/desktop-gui/package.json
@@ -30,7 +30,7 @@
     "fira": "cypress-io/fira#fb63362742eea8cdce0d90825ab9264d77719e3d",
     "gravatar": "1.8.0",
     "human-interval": "1.0.0",
-    "lodash": "4.17.19",
+    "lodash": "4.17.21",
     "markdown-it": "11.0.0",
     "mobx": "5.15.4",
     "mobx-react": "6.1.8",

diff --git a/packages/driver/package.json b/packages/driver/package.json
@@ -49,7 +49,7 @@
     "jquery.scrollto": "2.1.2",
     "js-cookie": "2.2.1",
     "jsdom": "14.1.0",
-    "lodash": "4.17.19",
+    "lodash": "4.17.21",
     "lolex": "4.1.0",
     "md5": "2.3.0",
     "method-override": "3.0.0",

diff --git a/packages/electron/package.json b/packages/electron/package.json
@@ -20,7 +20,7 @@
     "debug": "4.1.1",
     "electron-packager": "14.1.1",
     "fs-extra": "8.1.0",
-    "lodash": "4.17.19",
+    "lodash": "4.17.21",
     "minimist": "1.2.5"
   },
   "devDependencies": {

diff --git a/packages/extension/package.json b/packages/extension/package.json
@@ -17,7 +17,7 @@
   },
   "dependencies": {
     "bluebird": "3.5.3",
-    "lodash": "4.17.19"
+    "lodash": "4.17.21"
   },
   "devDependencies": {
     "@cypress/icons": "0.7.0",

diff --git a/packages/https-proxy/package.json b/packages/https-proxy/package.json
@@ -17,7 +17,7 @@
     "bluebird": "3.5.3",
     "debug": "4.1.1",
     "fs-extra": "8.1.0",
-    "lodash": "4.17.19",
+    "lodash": "4.17.21",
     "node-forge": "0.9.0",
     "proxy-from-env": "1.0.0",
     "semaphore": "1.1.0"

diff --git a/packages/launcher/package.json b/packages/launcher/package.json
@@ -17,7 +17,7 @@
     "debug": "4.1.1",
     "execa": "4.0.0",
     "fs-extra": "8.1.0",
-    "lodash": "4.17.19",
+    "lodash": "4.17.21",
     "plist": "3.0.1",
     "ramda": "0.24.1"
   },

diff --git a/packages/net-stubbing/package.json b/packages/net-stubbing/package.json
@@ -11,7 +11,7 @@
   "dependencies": {
     "concat-stream": "^2.0.0",
     "is-html": "^2.0.0",
-    "lodash": "4.17.15",
+    "lodash": "4.17.21",
     "minimatch": "^3.0.4",
     "throttle": "^1.0.3"
   },

diff --git a/packages/network/package.json b/packages/network/package.json
@@ -17,7 +17,7 @@
     "bluebird": "3.5.3",
     "concat-stream": "1.6.2",
     "debug": "4.1.1",
-    "lodash": "4.17.19",
+    "lodash": "4.17.21",
     "proxy-from-env": "1.0.0"
   },
   "devDependencies": {

diff --git a/packages/proxy/package.json b/packages/proxy/package.json
@@ -16,7 +16,7 @@
     "debug": "4.1.1",
     "grapheme-splitter": "1.0.4",
     "iconv-lite": "0.6.2",
-    "lodash": "4.17.19",
+    "lodash": "4.17.21",
     "pumpify": "1.5.1",
     "through": "2.3.8",
     "utf8-stream": "0.0.0"

diff --git a/packages/reporter/package.json b/packages/reporter/package.json
@@ -31,7 +31,7 @@
     "enzyme": "3.11.0",
     "enzyme-adapter-react-16": "1.15.2",
     "jsdom": "14.1.0",
-    "lodash": "4.17.19",
+    "lodash": "4.17.21",
     "markdown-it": "11.0.0",
     "mobx": "5.15.4",
     "mobx-react": "6.1.8",

diff --git a/packages/rewriter/package.json b/packages/rewriter/package.json
@@ -14,7 +14,7 @@
     "bluebird": "3.7.2",
     "chai-as-promised": "7.1.1",
     "debug": "4.1.1",
-    "lodash": "4.17.19",
+    "lodash": "4.17.21",
     "parse5-html-rewriting-stream": "5.1.1",
     "recast": "0.19.1"
   },

diff --git a/packages/runner/package.json b/packages/runner/package.json
@@ -33,7 +33,7 @@
     "enzyme": "3.11.0",
     "enzyme-adapter-react-16": "1.15.2",
     "jsdom": "14.1.0",
-    "lodash": "4.17.19",
+    "lodash": "4.17.21",
     "mobx": "5.15.4",
     "mobx-react": "6.1.8",
     "mocha": "7.0.1",

diff --git a/packages/server/package.json b/packages/server/package.json
@@ -76,7 +76,7 @@
     "launch-editor": "2.2.1",
     "lazy-ass": "1.6.0",
     "lockfile": "1.0.4",
-    "lodash": "4.17.19",
+    "lodash": "4.17.21",
     "log-symbols": "2.2.0",
     "marionette-client": "cypress-io/marionette-client#2cddf7d791cca7be5191d7fe103d58be7283957d",
     "md5": "2.3.0",

diff --git a/packages/ui-components/package.json b/packages/ui-components/package.json
@@ -28,7 +28,7 @@
     "classnames": "2.2.6",
     "cypress-multi-reporters": "1.4.0",
     "file-loader": "4.3.0",
-    "lodash": "4.17.19",
+    "lodash": "4.17.21",
     "mobx": "5.15.4",
     "mobx-react": "6.1.7",
     "prop-types": "15.7.2",

diff --git a/yarn.lock b/yarn.lock
@@ -16967,11 +16967,16 @@ [email protected]:
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.15.tgz#b447f6670a0455bbfeedd11392eff330ea097548"
   integrity sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==
 
-[email protected], lodash@^4.0.0, lodash@^4.13.1, lodash@^4.14.0, lodash@^4.15.0, lodash@^4.16.4, lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.12, lodash@^4.17.13, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.16, lodash@^4.17.19, lodash@^4.17.3, lodash@^4.17.4, lodash@^4.17.5, lodash@^4.2.1, lodash@^4.3.0, lodash@^4.8.0, lodash@~4.17.10, lodash@~4.17.2:
+[email protected]:
   version "4.17.19"
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b"
   integrity sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==
 
+[email protected], lodash@^4.0.0, lodash@^4.13.1, lodash@^4.14.0, lodash@^4.15.0, lodash@^4.16.4, lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.12, lodash@^4.17.13, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.16, lodash@^4.17.19, lodash@^4.17.3, lodash@^4.17.4, lodash@^4.17.5, lodash@^4.2.1, lodash@^4.3.0, lodash@^4.8.0, lodash@~4.17.10, lodash@~4.17.2:
+  version "4.17.21"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
+  integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
+
 lodash@^3.1.0, lodash@^3.10.0, lodash@^3.5.0, lodash@^3.9.3:
   version "3.10.1"
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-3.10.1.tgz#5bf45e8e49ba4189e17d482789dfd15bd140b7b6"