Skip to content

Replace request with @cypress/request to address deprecated package#42

Merged
Lucaber merged 1 commit into
masterfrom
replace-request
Jul 25, 2025
Merged

Replace request with @cypress/request to address deprecated package#42
Lucaber merged 1 commit into
masterfrom
replace-request

Conversation

@Henning3110
Copy link
Copy Markdown
Contributor

The request package is deprecated by the authors since 2020: https://www.npmjs.com/package/request

This should be addressed because it has a dependency on an old version of form-data which contains secruity issues: https://nvd.nist.gov/vuln/detail/CVE-2025-7783

While switiching to an entirely new package to manage the requests is advisable in regards to code quality, the switch to the recently updated and maintained fork https://github.com/cypress-io/request is much easier and does not change the typings of the responses the user receives.

@Lucaber Lucaber merged commit e8eab8f into master Jul 25, 2025
1 check passed
@Henning3110 Henning3110 deleted the replace-request branch July 25, 2025 08:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants