Impact Score: 5/10
Cypress v9.5.2 — Release Notes & Engineering Impact
Source available — automated, not human-reviewed
Component: cypress · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
Cypress v9.5.2. Source highlight: _Released 3/14/2022_
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
🔧 Bug Fixes & Patches (2)
- Fixed an issue with `.type()` where click events could be fired on the
- Fixed a regression in 9.5.0 where ANSI
📄 View Raw Release Notes (Original Developer Log)
_Released 3/14/2022_
**Bugfixes:**
- Fixed an issue with `.type()` where click events could be fired on the
incorrect target element because the target focus changed within a key-down
event handler callback. Fixed in
[#20525](https://github.com/cypress-io/cypress/pulls/20525).
- Fixed a regression in [9.5.0](https://docs.cypress.io/guides/references/changelog#9-5-0) where ANSI
colors were not removed from the FireFox warning message about the
`chromeWebSecurity` configuration option having no effect on the Firefox
browser. Fixes [#20496](https://github.com/cypress-io/cypress/issues/20496).
- Updates were made to the pre-release build setup such that Cypress will use a
unique cache folder for each
[pre-release installation](https://docs.cypress.io/guides/getting-started/installing-cypress.md#Install-pre-release-version)
on a machine. This removes the need to run `cypress clear cache` before
installing a new pre-release version of Cypress or before installing a new
released version of Cypress after a pre-release version had been installed.
Addressed in [#20296](https://github.com/cypress-io/cypress/pulls/20296).
**Misc:**
- Updates were made to explicitly disable the `Origin-Agent-Cluster` header for
proxied responses to ensure `document.domain` can continue to be set with
Chrome v106+. This was necessary because Chrome is planning to make
[`document.domain` immutable](https://developer.chrome.com/blog/immutable-document-domain/)
in v106+ to relax the same-origin policy by interpreting the
`Origin-Agent-Cluster` as `true`, whereas it is currently interpreted as
`false`. Addresses
[#20147](https://github.com/cypress-io/cypress/issues/20147).
**Dependency Updates:**
- Upgraded `url-parse` dependency from `1.5.6` to `1.5.9` to address these NVD
security vulnerabilities,
[CVE-2022-0639](https://nvd.nist.gov/vuln/detail/CVE-2022-0639),
[CVE-2022-0686](https://nvd.nist.gov/vuln/detail/CVE-2022-0686) and
[CVE-2022-0691](https://nvd.nist.gov/vuln/detail/CVE-2022-0691). Addressed in
[#20386](https://github.com/cypress-io/cypress/pull/20386) and
[#20439](https://github.com/cypress-io/cypress/issues/20439).