deps: bump webpack-dev-server and @rspack/cli in /frontend

[dependabot]

Removes webpack-dev-server. It's no longer used after updating ancestor dependency @rspack/cli. These dependencies need to be updated together.

Removes webpack-dev-server

Updates @rspack/cli from 1.7.11 to 2.0.4

Release notes

Sourced from @​rspack/cli's releases.

v2.0.4

Highlights 💡

• Inline const with module declarations (#14032): Previously, Rspack only inlined constant exports from leaf modules in the module graph. Now constant exports from any module can be inlined, even when that module also imports or re-exports other modules. In rare circular-reference cases this can make a TDZ error disappear, but we do not expect real projects to rely on TDZ errors, so Rspack prioritizes the optimization.

  // constants.js
  import './setup';
  export const ENABLE_EXPERIMENT = false;
  // entry.js
  import { ENABLE_EXPERIMENT } from './constants';
  if (ENABLE_EXPERIMENT) {
  runExperiment();
  }
  // Before: constants.js is not a leaf module, so the branch could keep
  // reading the imported binding.
  if (ENABLE_EXPERIMENT) {
  runExperiment();
  }
  // Now: the constant can still be inlined, so dead branches are easier
  // to remove.
  if (false) {
  runExperiment();
  }

• Tree shake namespace default reexport (#13980): Previously, the import * as a from './a'; export default a; pattern did not tree-shake a through the default export. Now Rspack further analyzes the default-exported namespace object and can remove unused exports from the original namespace module.

  // a.js
  export function used() {}
  export function unused() {}
  // bridge.js
  import * as a from './a';
  export default a;
  // app.js
  import a from './bridge';
  a.used();
  // Before: both used and unused could be kept in the bundle.
  // Now: unused can be tree-shaken.

... (truncated)

Commits

• 744af1e chore: release v2.0.4
• c9e86b8 perf(cli): lazy load json stream helpers (#14079)
• c0db17f docs(cli): update cli option descriptions (#14071)
• 361ecde fix(cli): remove process title startup overhead (#14061)
• 9a2ef24 chore(deps): update patch npm dependencies (#14055)
• 3c6700c fix(cli): write logger trace output to file by default (#14022)
• dfcccd6 chore: release version 2.0.3 (#14015)
• ed2742a chore: enable tsgo for dts generation (#13952)
• 3998196 chore(deps): update patch npm dependencies (#13959)
• 45e3a8a chore: enable Rslint for more packages and fix lint issues (#13934)
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
flagsmith-frontend-preview	Error		May 22, 2026 2:08pm
flagsmith-frontend-staging	Error		May 22, 2026 2:08pm

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Ignored	Preview	May 22, 2026 2:08pm

[claude]

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

_{Tip: disable this comment in your organization's Code Review settings.}