Cypress changed older versions to block third-party plugins (ignoring lockfiles) (currents.dev)

As of yesterday Cypress binaries for older versions started blocking third-party plugins, breaking CI for multiple users. It bypasses package.lock and yarn.lock as it downloads a binary from their CDN when installing.

See also:

https://currents.dev/posts/v13-blocking

https://www.cypress.io/blog/2023/11/07/update-defense-intell...

https://github.com/cypress-io/cypress/issues/28269

https://github.com/currents-dev/cypress-cloud/issues/193