[CVE-2024-29180] Bump `webpack-dev-server` to v4 - Githubissues

opensearch-project / oui

OpenSearch UI Framework

Apache License 2.0

31 stars 65 forks source link

[CVE-2024-29180] Bump `webpack-dev-server` to v4 #1269

Open AMoo-Miki opened 2 months ago

AMoo-Miki commented 2 months ago

Description

[CVE-2024-29180] Bump webpack-dev-server to v4.6.0. Anything above this throws TS errors with @types/ws.

Check List

[ ] New functionality includes testing.
[ ] New functionality has been documented.
[ ] All tests pass
- [ ] yarn lint
- [ ] yarn test-unit
[x] Update CHANGELOG.md
[X] Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

For more information on following Developer Certificate of Origin and signing off your commits, please check here.

AMoo-Miki commented 2 months ago

Bumping webpack-dev-server requires a new webpack-cli which breaks compile-charts.