webpack / webpack-dev-server

Serves a webpack app. Updates the browser on changes. Documentation https://webpack.js.org/configuration/dev-server/.
MIT License
7.78k stars 1.43k forks source link

Update package.json (change ws dependency to pull ^8.18.0) #5241

Closed KanoYugoro closed 1 month ago

KanoYugoro commented 1 month ago

For Bugs and Features; did you add new tests?

Motivation / Use-Case

This PR addresses this package advisory: https://github.com/advisories/GHSA-3h5v-q93c-6h6q Theoretically, just a rebuild of the project is necessary to fix this, but explicitly pulling this dependency helps.

Breaking Changes

Additional Info

While this advisory is theoretically a minor bug (this being a development tool), and a mitigatable one at that, it's nice to have this dependency updated to prevent consumers of this package from having to take mitigation steps other than pulling a minor/patch version.

linux-foundation-easycla[bot] commented 1 month ago

CLA Signed


The committers listed above are authorized under a signed CLA.

codecov[bot] commented 1 month ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 85.53%. Comparing base (af6bd68) to head (7764534). Report is 67 commits behind head on master.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #5241 +/- ## ========================================== - Coverage 90.29% 85.53% -4.77% ========================================== Files 15 16 +1 Lines 1577 1680 +103 Branches 601 628 +27 ========================================== + Hits 1424 1437 +13 - Misses 140 217 +77 - Partials 13 26 +13 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.