Bump the npm_and_yarn group with 36 updates #6

dependabot · 2025-02-10T17:22:01Z

Bumps the npm_and_yarn group with 38 updates:

Package	From	To
webpack-dev-server	`3.1.9`	`3.1.11`
ajv	`6.5.4`	`6.12.6`
ajv	`5.5.2`	`6.12.6`
har-validator	`5.1.0`	`5.1.5`
body-parser	`1.18.3`	`1.20.3`
express	`4.16.4`	`4.21.2`
braces	`2.3.2`	`3.0.3`
webpack	`4.20.2`	`5.97.1`
webpack-cli	`3.1.2`	`6.0.1`
webpack-dev-server	`3.1.11`	`5.2.0`
chownr	`1.0.1`	`1.1.1`
cookie	`0.3.1`	`0.7.1`
dns-packet	`1.3.1`	`5.6.1`
elliptic	`6.4.1`	`6.6.1`
follow-redirects	`1.5.9`	`1.15.9`
fsevents	`1.2.4`	`2.3.3`
minimist	`0.0.8`	`1.2.8`
mkdirp	`0.5.1`	`0.5.6`
loader-utils	`1.1.0`	`1.4.2`
html-webpack-plugin	`3.2.0`	`5.6.3`
http-proxy	`1.17.0`	`1.18.1`
node-fetch	`1.7.3`	`2.7.0`
solid-auth-client	`2.2.6`	`2.5.6`
json-schema	`0.2.3`	`0.4.0`
jsprim	`1.4.1`	`1.4.2`
xmldom	`0.1.19`	`removed`
rdflib	`0.19.0`	`2.2.36`
lodash	`4.17.11`	`4.17.21`
node-forge	`0.7.5`	`1.3.1`
qs	`6.5.2`	`6.13.0`
send	`0.16.2`	`0.19.0`
serialize-javascript	`1.5.0`	`6.0.2`
copy-webpack-plugin	`4.5.3`	`12.0.2`
serve-static	`1.13.2`	`1.16.2`
sockjs	`0.3.19`	`0.3.24`
webpack-dev-middleware	`3.4.0`	`7.4.2`
y18n	`4.0.0`	`5.0.8`
yargs-parser	`10.1.0`	`21.1.1`

Updates webpack-dev-server from 3.1.9 to 3.1.11

Release notes

Sourced from webpack-dev-server's releases.

v3.1.11

3.1.11 (2018-12-21)

Bug Fixes

bin/options: correct check for color support (options.color) (#1555) (55398b5)

package: update spdy v3.4.1...4.0.0 (assertion error) (#1491) (#1563) (7a3a257)

Server: correct node version checks (#1543) (927a2b3)

Server: mime type for wasm in contentBase directory (#1575) (#1580) (fadae5d)

add url for compatibility with webpack@5 (#1598) (#1599) (68dd49a)

check origin header for websocket connection (#1603) (b3217ca)

v3.1.10

2018-10-23

Bug Fixes

options: add writeToDisk option to schema (#1520) (d2f4902)

package: update sockjs-client v1.1.5...1.3.0 (url-parse vulnerability) (#1537) (e719959)

Server: set tls.DEFAULT_ECDH_CURVE to 'auto' (#1531) (c12def3)

Changelog

Sourced from webpack-dev-server's changelog.

3.1.11 (2018-12-21)

Bug Fixes

bin/options: correct check for color support (options.color) (#1555) (55398b5)

package: update spdy v3.4.1...4.0.0 (assertion error) (#1491) (#1563) (7a3a257)

Server: correct node version checks (#1543) (927a2b3)

Server: mime type for wasm in contentBase directory (#1575) (#1580) (fadae5d)

add url for compatibility with webpack@5 (#1598) (#1599) (68dd49a)

check origin header for websocket connection (#1603) (b3217ca)

3.1.10 (2018-10-23)

Bug Fixes

options: add writeToDisk option to schema (#1520) (d2f4902)

package: update sockjs-client v1.1.5...1.3.0 (url-parse vulnerability) (#1537) (e719959)

Server: set tls.DEFAULT_ECDH_CURVE to 'auto' (#1531) (c12def3)

Commits

ff2874f chore(release): 3.1.11
b3217ca fix: check origin header for websocket connection (#1603)
68dd49a fix: add url for compatibility with webpack@5 (#1598) (#1599)
fadae5d fix(Server): mime type for wasm in contentBase directory (#1575) (#1580)
7a3a257 fix(package): update spdy v3.4.1...4.0.0 (assertion error) (#1491) (#1563)
1fe82de ci(travis): Node 11 (on OS X) crashes, use 10 for now (#1588)
55398b5 fix(bin/options): correct check for color support (options.color) (#1555)
927a2b3 fix(Server): correct node version checks (#1543)
fa96a76 chore(PULL_REQUEST_TEMPLATE): allow features (#1539)
fe3219f chore(release): 3.1.10
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for webpack-dev-server since your current version.

Updates ajv from 6.5.4 to 6.12.6

Release notes

Sourced from ajv's releases.

v6.12.6

Fix performance issue of "url" format.

v6.12.5

Fix uri scheme validation (@ChALkeR). Fix boolean schemas with strictKeywords option (#1270)

v6.12.4

Fix: coercion of one-item arrays to scalar that should fail validation (failing example).

v6.12.3

Pass schema object to processCode function Option for strictNumbers (@issacgerges, #1128) Fixed vulnerability related to untrusted schemas (CVE-2020-15366)

v6.12.2

Removed post-install script

v6.12.1

Docs and dependency updates

v6.12.0

Improved hostname validation (@sambauers, #1143) Option keywords to add custom keywords (@franciscomorais, #1137) Types fixes (@boenrobot, @MattiAstedrone) Docs:

error logging example (@RadiationSickness)

TypeScript usage notes (@thetric)

v6.11.0

Time formats support two digit and colon-less variants of timezone offset (#1061 , @cjpillsbury) Docs: RegExp related security considerations Tests: Disabled failing typescript test

v6.10.2

Fix: the unknown keywords were ignored with the option strictKeywords: true (instead of failing compilation) in some sub-schemas (e.g. anyOf), when the sub-schema didn't have known keywords.

v6.10.1

Fix types Fix addSchema (#1001) Update dependencies

v6.10.0

Option strictDefaults to report ignored defaults (#957, @not-an-aardvark) Option strictKeywords to report unknown keywords (#781)

v6.9.0

OpenAPI keyword nullable can be any boolean (and not only true). Custom keyword definition changes:

dependencies option in to require the presence of keywords in the same schema.

... (truncated)

Commits

fe59143 6.12.6
d580d3e Merge pull request #1298 from ajv-validator/fix-url
fd36389 fix: regular expression for "url" format
490e34c docs: link to v7-beta branch
9cd93a1 docs: note about v7 in readme
877d286 Merge pull request #1262 from b4h0-c4t/refactor-opt-object-type
f1c8e45 6.12.5
764035e Merge branch 'ChALkeR-chalker/fix-comma'
3798160 Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...
a3c7eba Merge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...
Additional commits viewable in compare view

Updates ajv from 5.5.2 to 6.12.6

Release notes

Sourced from ajv's releases.

v6.12.6

Fix performance issue of "url" format.

v6.12.5

Fix uri scheme validation (@ChALkeR). Fix boolean schemas with strictKeywords option (#1270)

v6.12.4

Fix: coercion of one-item arrays to scalar that should fail validation (failing example).

v6.12.3

Pass schema object to processCode function Option for strictNumbers (@issacgerges, #1128) Fixed vulnerability related to untrusted schemas (CVE-2020-15366)

v6.12.2

Removed post-install script

v6.12.1

Docs and dependency updates

v6.12.0

Improved hostname validation (@sambauers, #1143) Option keywords to add custom keywords (@franciscomorais, #1137) Types fixes (@boenrobot, @MattiAstedrone) Docs:

error logging example (@RadiationSickness)

TypeScript usage notes (@thetric)

v6.11.0

Time formats support two digit and colon-less variants of timezone offset (#1061 , @cjpillsbury) Docs: RegExp related security considerations Tests: Disabled failing typescript test

v6.10.2

Fix: the unknown keywords were ignored with the option strictKeywords: true (instead of failing compilation) in some sub-schemas (e.g. anyOf), when the sub-schema didn't have known keywords.

v6.10.1

Fix types Fix addSchema (#1001) Update dependencies

v6.10.0

Option strictDefaults to report ignored defaults (#957, @not-an-aardvark) Option strictKeywords to report unknown keywords (#781)

v6.9.0

OpenAPI keyword nullable can be any boolean (and not only true). Custom keyword definition changes:

dependencies option in to require the presence of keywords in the same schema.

... (truncated)

Commits

fe59143 6.12.6
d580d3e Merge pull request #1298 from ajv-validator/fix-url
fd36389 fix: regular expression for "url" format
490e34c docs: link to v7-beta branch
9cd93a1 docs: note about v7 in readme
877d286 Merge pull request #1262 from b4h0-c4t/refactor-opt-object-type
f1c8e45 6.12.5
764035e Merge branch 'ChALkeR-chalker/fix-comma'
3798160 Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...
a3c7eba Merge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...
Additional commits viewable in compare view

Updates har-validator from 5.1.0 to 5.1.5

Release notes

Sourced from har-validator's releases.

v5.1.5

5.1.5 (2020-07-30)

v5.1.4

5.1.4 (2020-07-30)

v5.1.2

5.1.2 (2018-11-07)

Bug Fixes

docs: update badge links (1764b7c)

v5.1.1

5.1.1 (2018-11-07)

Bug Fixes

scaffold: update project scaffold template (fd01aff)

Commits

b77cdcb build(semantic-release): should release when docs are updated
3a4d4f3 docs(readme): correct badge
01c5f2a style(lint): correct lint errors
ab43db4 build(semantic-release): correct .releaserc file name
bab9612 build(deps): update dependencies
6742cb5 test(docker-compose): docker-compose for unified testing
fd48174 ci(actions): replace old ci setup with new github actions workflows
5c53c92 build(deps): [security] bump handlebars from 4.0.11 to 4.7.1 (#160)
ea53334 chore(deps): lock file maintenance (#114)
a38c067 5.1.3
Additional commits viewable in compare view

Updates body-parser from 1.18.3 to 1.20.3

Release notes

Sourced from body-parser's releases.

1.20.3

What's Changed

Important

deps: qs@6.13.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/body-parser#522

ci: fix errors in ci github action for node 8 and 9 by @inigomarquinez in expressjs/body-parser#523

fix: pin to node@22.4.1 by @wesleytodd in expressjs/body-parser#527

deps: qs@6.12.3 by @melikhov-dev in expressjs/body-parser#521

Add OSSF Scorecard badge by @bjohansebas in expressjs/body-parser#531

Linter by @UlisesGascon in expressjs/body-parser#534

Release: 1.20.3 by @UlisesGascon in expressjs/body-parser#535

New Contributors

@inigomarquinez made their first contribution in expressjs/body-parser#522

@melikhov-dev made their first contribution in expressjs/body-parser#521

@bjohansebas made their first contribution in expressjs/body-parser#531

@UlisesGascon made their first contribution in expressjs/body-parser#534

Full Changelog: expressjs/body-parser@1.20.2...1.20.3

1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

perf: skip value escaping when unnecessary

deps: raw-body@2.5.2

1.20.1

deps: qs@6.11.0

perf: remove unnecessary object clone

1.20.0

Fix error message for json parse whitespace in strict

Fix internal error when inflated body exceeds limit

Prevent loss of async hooks context

Prevent hanging when request already read

deps: depd@2.0.0

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: http-errors@2.0.0

deps: depd@2.0.0

deps: statuses@2.0.1

deps: on-finished@2.4.1

deps: qs@6.10.3

... (truncated)

Changelog

Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

deps: qs@6.13.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

1.20.2 / 2023-02-21

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

perf: skip value escaping when unnecessary

deps: raw-body@2.5.2

1.20.1 / 2022-10-06

deps: qs@6.11.0

perf: remove unnecessary object clone

1.20.0 / 2022-04-02

Fix error message for json parse whitespace in strict

Fix internal error when inflated body exceeds limit

Prevent loss of async hooks context

Prevent hanging when request already read

deps: depd@2.0.0

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: http-errors@2.0.0

deps: depd@2.0.0

deps: statuses@2.0.1

deps: on-finished@2.4.1

deps: qs@6.10.3

deps: raw-body@2.5.1

deps: http-errors@2.0.0

1.19.2 / 2022-02-15

deps: bytes@3.1.2

deps: qs@6.9.7

Fix handling of __proto__ keys

deps: raw-body@2.4.3

deps: bytes@3.1.2

1.19.1 / 2021-12-10

... (truncated)

Commits

1752951 1.20.3
39744cf chore: linter (#534)
b2695c4 Merge commit from fork
ade0f3f add scorecard to readme (#531)
99a1bd6 deps: qs@6.12.3 (#521)
9478591 fix: pin to node@22.4.1
83db46a ci: fix errors in ci github action for node 8 and 9 (#523)
9d4e212 chore: add support for OSSF scorecard reporting (#522)
ee91374 1.20.2
368a93a Fix strict json error message on Node.js 19+
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.

Updates express from 4.16.4 to 4.21.2

Release notes

Sourced from express's releases.

4.21.2

What's Changed

Add funding field (v4) by @bjohansebas in expressjs/express#6065

deps: path-to-regexp@0.1.11 by @blakeembrey in expressjs/express#5956

deps: bump path-to-regexp@0.1.12 by @jonchurch in expressjs/express#6209

Release: 4.21.2 by @UlisesGascon in expressjs/express#6094

Full Changelog: expressjs/express@4.21.1...4.21.2

4.21.1

What's Changed

Backport a fix for CVE-2024-47764 to the 4.x branch by @joshbuker in expressjs/express#6029

Release: 4.21.1 by @UlisesGascon in expressjs/express#6031

Full Changelog: expressjs/express@4.21.0...4.21.1

4.21.0

What's Changed

Deprecate "back" magic string in redirects by @blakeembrey in expressjs/express#5935

finalhandler@1.3.1 by @wesleytodd in expressjs/express#5954

fix(deps): serve-static@1.16.2 by @wesleytodd in expressjs/express#5951

Upgraded dependency qs to 6.13.0 to match qs in body-parser by @agadzinski93 in expressjs/express#5946

New Contributors

@agadzinski93 made their first contribution in expressjs/express#5946

Full Changelog: expressjs/express@4.20.0...4.21.0

4.20.0

What's Changed

Important

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

Other Changes

4.19.2 Staging by @wesleytodd in expressjs/express#5561

remove duplicate location test for data uri by @wesleytodd in expressjs/express#5562

feat: document beta releases expectations by @marco-ippolito in expressjs/express#5565

Cut down on duplicated CI runs by @jonchurch in expressjs/express#5564

Add a Threat Model by @UlisesGascon in expressjs/express#5526

Assign captain of encodeurl by @blakeembrey in expressjs/express#5579

Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by @jonchurch in expressjs/express#5587

docs: update Security.md by @inigomarquinez in expressjs/express#5590

docs: update triage nomination policy by @UlisesGascon in expressjs/express#5600

Add CodeQL (SAST) by @UlisesGascon in expressjs/express#5433

docs: add UlisesGascon as triage initiative captain by @UlisesGascon in expressjs/express#5605

... (truncated)

Changelog

Sourced from express's changelog.

4.21.2 / 2024-11-06

deps: path-to-regexp@0.1.12

Fix backtracking protection

deps: path-to-regexp@0.1.11

Throws an error on invalid path values

4.21.1 / 2024-10-08

Backported a fix for CVE-2024-47764

4.21.0 / 2024-09-11

Deprecate res.location("back") and res.redirect("back") magic string

deps: serve-static@1.16.2

includes send@0.19.0

deps: finalhandler@1.3.1

deps: qs@6.13.0

4.20.0 / 2024-09-10

deps: serve-static@0.16.0

Remove link renderization in html while redirecting

deps: send@0.19.0

Remove link renderization in html while redirecting

deps: body-parser@0.6.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

deps: path-to-regexp@0.1.10

Adds support for named matching groups in the routes using a regex

Adds backtracking protection to parameters without regexes defined

deps: encodeurl@~2.0.0

Removes encoding of \, |, and ^ to align better with URL spec

Deprecate passing options.maxAge and options.expires to res.clearCookie

Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

... (truncated)

Commits

1faf228 4.21.2
2e0fb64 deps: bump path-to-regexp@0.1.12 (#6209)
59fc270 deps: path-to-regexp@0.1.11 (#5956)
51fc39c docs: add funding (#6065)
8e229f9 4.21.1
a024c8a fix(deps): cookie@0.7.1
7e562c6 4.21.0
1bcde96 fix(deps): qs@6.13.0 (#5946)
7d36477 fix(deps): serve-static@1.16.2 (#5951)
40d2d8f fix(deps): finalhandler@1.3.1
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jonchurch, a new releaser for express since your current version.

Updates braces from 2.3.2 to 3.0.3

Changelog

Sourced from braces's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Changelogs are for humans, not machines.

There should be an entry for every single version.

The same types of changes should be grouped.

Versions and sections should be linkable.

The latest version comes first.

The release date of each versions is displayed.

Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

Added for new features.

Changed for changes in existing functionality.

Deprecated for soon-to-be removed features.

Removed for now removed features.

Fixed for any bug fixes.

Security in case of vulnerabilities.

[3.0.0] - 2018-04-08

v3.0 is a complete refactor, resulting in a faster, smaller codebase, with fewer deps, and a more accurate parser and compiler.

Breaking Changes

The undocumented .makeRe method was removed

Require Node.js >= 8.3

Non-breaking changes

Caching was removed

Commits

See full diff in compare view

Updates webpack from 4.20.2 to 5.97.1

Release notes

Sourced from webpack's releases.

v5.97.1

Bug Fixes

Performance regression

Sub define key should't be renamed when it's a defined variable

v5.97.0

Bug Fixes

Don't crash with filesystem cache and unknown scheme

Generate a valid code when output.iife is true and output.library.type is umd

Fixed conflict variable name with concatenate modules and runtime code

Merge duplicate chunks before

Collisions in ESM library

Use recursive search for versions of shared dependencies

[WASM] Don't crash WebAssembly with Reference Types (sync and async)

[WASM] Fixed wasm loading for sync and async webassembly

[CSS] Don't add [uniqueName] to localIdentName when it is empty

[CSS] Parsing strings on Windows

[CSS] Fixed CSS local escaping

New Features

Added support for injecting debug IDs

Export the MergeDuplicateChunks plugin

Added universal loading for JS chunks and JS worker chunks (only ES modules)

[WASM] Added universal loading for WebAssembly chunks (only for async WebAssembly)

[CSS] Allow initial CSS chunks to be placed anywhere - the output.cssHeadDataCompression option was deleted

[CSS] Added universal loading for CSS chunks

[CSS] Parse ICSS @value at-rules in CSS modules

[CSS] Parse ICSS :import rules in CSS modules

[CSS] Added the url and import options for CSS

[CSS] Allow to import custom properties in CSS modules

Performance

Faster Queue implementation, also fixed queue iterator state in dequeue method to ensure correct behavior after item removal

v5.96.1

Bug Fixes

[Types] Add @types/eslint-scope to dependencieS

[Types] Fixed regression in validate

v5.96.0

Bug Fixes

Fixed Module Federation should track all referenced chunks

Handle Data URI without base64 word

HotUpdateChunk have correct runtime when modified with new runtime

... (truncated)

Commits

3612d36 chore(release): 5.97.1
eb7ac6f fix: perf regression
554be24 fix: sub define key should't be renamed when it's a defined variable
5e0e780 refactor: issue #19030
58fb035 fix: sub define key should't be renamed when it's a defined variable
af1fd12 perf: regression
34f19cb fix: package.json
0ec7f5d refactor: issue #19030
5e7b8a2 fix: package.json
644f1d1 refactor: no extra work for CSS unescaping
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for webpack since your current version.

Updates webpack-cli from 3.1.2 to 6.0.1

Release notes

Sourced from webpack-cli's releases.

v6.0.1

6.0.1 (2024-12-20)

Bug Fixes

update peer dependencies (#4356) (7a7e5d9)

v6.0.0

6.0.0 (2024-12-19)

BREAKING CHANGES

the minimum required Node.js version is 18.12.0

removed init, loader and plugin commands in favor create-webpack-app

dropped support for webpack-dev-server@v4

minimum supported webpack version is 5.82.0

The --define-process-env-node-env option was renamed to --config-node-env

Bug Fixes

allow to require webpack.config.js in ESM format (#4346) (5106684)

correct the minimum help output (#4057) (c727c4f)

gracefully shutting down (#4145) (90720e2)

improve help output for possible values (#4316) (4cd5aef)

no serve when dev-server is false (#2947) (a93e860)

Features

output pnpm version with info/version command (#3906) (38f3c6f)

v5.1.4

5.1.4 (2023-06-07)

Bug Fixes

multi compiler progress output (f659624)

v5.1.3

5.1.3 (2023-06-04)

Bug Fixes

regression for custom configurations (#3834) (bb4f8eb)

v5.1.2

5.1.2 (2023-06-04)

Bug Fixes

improve check for custom webpack and webpack-dev-server package existance (0931ab6)

... (truncated)

Changelog

Sourced from webpack-cli's changelog.

6.0.1 (2024-12-20)

Bug Fixes

update peer dependencies (#4356) (7a7e5d9)

6.0.0 (2024-12-19)

BREAKING CHANGES

the minimum required Node.js version is 18.12.0

removed init, loader and plugin commands in favor create-webpack-app

dropped support for webpack-dev-server@v4

minimum supported webpack version is 5.82.0

The --define-process-env-node-env option was renamed to --config-node-env

Bug Fixes

allow to require webpack.config.js in ESM format (#4346) (5106684)

correct the minimum help output (#4057) (c727c4f)

gracefully shutting down (#4145) (90720e2)

improve help output for possible values (#4316) (4cd5aef)

no serve when dev-server is false (#2947) (a93e860)

Features

output pnpm version with info/version command (#3906) (38f3c6f)

5.1.4 (2023-06-07)

Bug Fixes

multi compiler progress output (f659624)

5.1.3 (2023-06-04)

Bug Fixes

regression for custom configurations (#3834) (bb4f8eb)

5.1.2 (2023-06-04)

Bug Fixes

improve check for custom webpack and webpack-dev-server package existance (0931ab6)

improve help for some flags (f468614)

improved support for .cts and .mts extensions (a77daf2)

5.1.1 (2023-05-09)

... (truncated)

Commits

480b33d chore(release): publish new version
7a5071b test: fix
8326501 fix: better default values
eab2f39 fix: less dependencies
2db1195 refactor: code
fca8c00 fix: logging
09c7cd7 fix: reduce package size, avoid *.d.ts
7a7e5d9 fix: update peer dependencies (#4356)
5405aed chore(deps-dev): bump readable-stream in the dependencies group (#4355)
270fdc2 chore(release): create-webpack-app
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for webpack-cli since your current version.

Updates webpack-dev-server from 3.1.11 to 5.2.0

Release notes

Sourced from webpack-dev-server's releases.

v3.1.11

3.1.11 (2018-12-21)

Bug Fixes

bin/options: correct check for color support (options.color) (#1555) (55398b5)

package: update spdy v3.4.1...4.0.0 (assertion error) (#1491) (#1563) (

Bumps the npm_and_yarn group with 38 updates: | Package | From | To | | --- | --- | --- | | [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `3.1.9` | `3.1.11` | | [ajv](https://github.com/ajv-validator/ajv) | `6.5.4` | `6.12.6` | | [ajv](https://github.com/ajv-validator/ajv) | `5.5.2` | `6.12.6` | | [har-validator](https://github.com/ahmadnassri/node-har-validator) | `5.1.0` | `5.1.5` | | [body-parser](https://github.com/expressjs/body-parser) | `1.18.3` | `1.20.3` | | [express](https://github.com/expressjs/express) | `4.16.4` | `4.21.2` | | [braces](https://github.com/micromatch/braces) | `2.3.2` | `3.0.3` | | [webpack](https://github.com/webpack/webpack) | `4.20.2` | `5.97.1` | | [webpack-cli](https://github.com/webpack/webpack-cli) | `3.1.2` | `6.0.1` | | [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `3.1.11` | `5.2.0` | | [chownr](https://github.com/isaacs/chownr) | `1.0.1` | `1.1.1` | | [cookie](https://github.com/jshttp/cookie) | `0.3.1` | `0.7.1` | | [dns-packet](https://github.com/mafintosh/dns-packet) | `1.3.1` | `5.6.1` | | [elliptic](https://github.com/indutny/elliptic) | `6.4.1` | `6.6.1` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.5.9` | `1.15.9` | | [fsevents](https://github.com/fsevents/fsevents) | `1.2.4` | `2.3.3` | | [minimist](https://github.com/minimistjs/minimist) | `0.0.8` | `1.2.8` | | [mkdirp](https://github.com/isaacs/node-mkdirp) | `0.5.1` | `0.5.6` | | [loader-utils](https://github.com/webpack/loader-utils) | `1.1.0` | `1.4.2` | | [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `3.2.0` | `5.6.3` | | [http-proxy](https://github.com/http-party/node-http-proxy) | `1.17.0` | `1.18.1` | | [node-fetch](https://github.com/node-fetch/node-fetch) | `1.7.3` | `2.7.0` | | [solid-auth-client](https://github.com/solid/solid-auth-client) | `2.2.6` | `2.5.6` | | [json-schema](https://github.com/kriszyp/json-schema) | `0.2.3` | `0.4.0` | | [jsprim](https://github.com/joyent/node-jsprim) | `1.4.1` | `1.4.2` | | [xmldom](https://github.com/xmldom/xmldom) | `0.1.19` | `removed` | | [rdflib](https://github.com/linkeddata/rdflib.js) | `0.19.0` | `2.2.36` | | [lodash](https://github.com/lodash/lodash) | `4.17.11` | `4.17.21` | | [node-forge](https://github.com/digitalbazaar/forge) | `0.7.5` | `1.3.1` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.13.0` | | [send](https://github.com/pillarjs/send) | `0.16.2` | `0.19.0` | | [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `1.5.0` | `6.0.2` | | [copy-webpack-plugin](https://github.com/webpack-contrib/copy-webpack-plugin) | `4.5.3` | `12.0.2` | | [serve-static](https://github.com/expressjs/serve-static) | `1.13.2` | `1.16.2` | | [sockjs](https://github.com/sockjs/sockjs-node) | `0.3.19` | `0.3.24` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `3.4.0` | `7.4.2` | | [y18n](https://github.com/yargs/y18n) | `4.0.0` | `5.0.8` | | [yargs-parser](https://github.com/yargs/yargs-parser) | `10.1.0` | `21.1.1` | Updates `webpack-dev-server` from 3.1.9 to 3.1.11 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v3.1.9...v3.1.11) Updates `ajv` from 6.5.4 to 6.12.6 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.5.4...v6.12.6) Updates `ajv` from 5.5.2 to 6.12.6 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.5.4...v6.12.6) Updates `har-validator` from 5.1.0 to 5.1.5 - [Release notes](https://github.com/ahmadnassri/node-har-validator/releases) - [Changelog](https://github.com/ahmadnassri/node-har-validator/blob/master/.releaserc) - [Commits](ahmadnassri/node-har-validator@v5.1.0...v5.1.5) Updates `body-parser` from 1.18.3 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.18.3...1.20.3) Updates `express` from 4.16.4 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.16.4...4.21.2) Updates `braces` from 2.3.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/commits/3.0.3) Updates `webpack` from 4.20.2 to 5.97.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v4.20.2...v5.97.1) Updates `webpack-cli` from 3.1.2 to 6.0.1 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/master/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/v3.1.2...webpack-cli@6.0.1) Updates `webpack-dev-server` from 3.1.11 to 5.2.0 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v3.1.9...v3.1.11) Updates `chownr` from 1.0.1 to 1.1.1 - [Commits](isaacs/chownr@v1.0.1...v1.1.1) Updates `cookie` from 0.3.1 to 0.7.1 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.3.1...v0.7.1) Updates `dns-packet` from 1.3.1 to 5.6.1 - [Changelog](https://github.com/mafintosh/dns-packet/blob/master/CHANGELOG.md) - [Commits](mafintosh/dns-packet@v1.3.1...v5.6.1) Updates `elliptic` from 6.4.1 to 6.6.1 - [Commits](indutny/elliptic@v6.4.1...v6.6.1) Updates `express` from 4.16.4 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.16.4...4.21.2) Updates `follow-redirects` from 1.5.9 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.5.9...v1.15.9) Updates `fsevents` from 1.2.4 to 2.3.3 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v1.2.4...v2.3.3) Updates `minimist` from 0.0.8 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v0.0.8...v1.2.8) Updates `mkdirp` from 0.5.1 to 0.5.6 - [Changelog](https://github.com/isaacs/node-mkdirp/blob/main/CHANGELOG.md) - [Commits](isaacs/node-mkdirp@0.5.1...v0.5.6) Updates `loader-utils` from 1.1.0 to 1.4.2 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.1.0...v1.4.2) Updates `html-webpack-plugin` from 3.2.0 to 5.6.3 - [Release notes](https://github.com/jantimon/html-webpack-plugin/releases) - [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](jantimon/html-webpack-plugin@v3.2.0...v5.6.3) Updates `http-proxy` from 1.17.0 to 1.18.1 - [Release notes](https://github.com/http-party/node-http-proxy/releases) - [Changelog](https://github.com/http-party/node-http-proxy/blob/master/CHANGELOG.md) - [Commits](http-party/node-http-proxy@1.17.0...1.18.1) Updates `node-fetch` from 1.7.3 to 2.7.0 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@1.7.3...v2.7.0) Updates `solid-auth-client` from 2.2.6 to 2.5.6 - [Release notes](https://github.com/solid/solid-auth-client/releases) - [Commits](nodeSolidServer/solid-auth-client@v2.2.6...v2.5.6) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `jsprim` from 1.4.1 to 1.4.2 - [Changelog](https://github.com/TritonDataCenter/node-jsprim/blob/v1.4.2/CHANGES.md) - [Commits](TritonDataCenter/node-jsprim@v1.4.1...v1.4.2) Removes `xmldom` Updates `rdflib` from 0.19.0 to 2.2.36 - [Release notes](https://github.com/linkeddata/rdflib.js/releases) - [Changelog](https://github.com/linkeddata/rdflib.js/blob/main/changes.txt) - [Commits](linkeddata/rdflib.js@v0.19.0...v2.2.36) Updates `lodash` from 4.17.11 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.11...4.17.21) Updates `node-forge` from 0.7.5 to 1.3.1 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@0.7.5...v1.3.1) Updates `qs` from 6.5.2 to 6.13.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.13.0) Updates `send` from 0.16.2 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.16.2...0.19.0) Updates `serialize-javascript` from 1.5.0 to 6.0.2 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v1.5.0...v6.0.2) Updates `copy-webpack-plugin` from 4.5.3 to 12.0.2 - [Release notes](https://github.com/webpack-contrib/copy-webpack-plugin/releases) - [Changelog](https://github.com/webpack-contrib/copy-webpack-plugin/blob/master/CHANGELOG.md) - [Commits](webpack/copy-webpack-plugin@v4.5.3...v12.0.2) Updates `serve-static` from 1.13.2 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.13.2...v1.16.2) Updates `sockjs` from 0.3.19 to 0.3.24 - [Release notes](https://github.com/sockjs/sockjs-node/releases) - [Changelog](https://github.com/sockjs/sockjs-node/blob/v0.3.24/Changelog) - [Commits](sockjs/sockjs-node@v0.3.19...v0.3.24) Updates `webpack-dev-middleware` from 3.4.0 to 7.4.2 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v3.4.0...v7.4.2) Updates `y18n` from 4.0.0 to 5.0.8 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](yargs/y18n@v4.0.0...v5.0.8) Updates `yargs-parser` from 10.1.0 to 21.1.1 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md) - [Commits](yargs/yargs-parser@v10.1.0...yargs-parser-v21.1.1) --- updated-dependencies: - dependency-name: webpack-dev-server dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: har-validator dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack-cli dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack-dev-server dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: chownr dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dns-packet dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mkdirp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: html-webpack-plugin dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: http-proxy dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: solid-auth-client dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsprim dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: xmldom dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rdflib dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serialize-javascript dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: copy-webpack-plugin dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: sockjs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Feb 10, 2025

This was referenced Feb 10, 2025

Bump fsevents from 1.2.4 to 1.2.13 #3

Closed

Bump lodash from 4.17.11 to 4.17.21 #4

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group with 36 updates #6

Bump the npm_and_yarn group with 36 updates #6

Uh oh!

dependabot bot commented on behalf of github Feb 10, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the npm_and_yarn group with 36 updates #6

Are you sure you want to change the base?

Bump the npm_and_yarn group with 36 updates #6

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 10, 2025

v3.1.11

3.1.11 (2018-12-21)

Bug Fixes

v3.1.10

2018-10-23

Bug Fixes

3.1.11 (2018-12-21)

Bug Fixes

3.1.10 (2018-10-23)

Bug Fixes

v6.12.6

v6.12.5

v6.12.4

v6.12.3

v6.12.2

v6.12.1

v6.12.0

v6.11.0

v6.10.2

v6.10.1

v6.10.0

v6.9.0

v6.12.6

v6.12.5

v6.12.4

v6.12.3

v6.12.2

v6.12.1

v6.12.0

v6.11.0

v6.10.2

v6.10.1

v6.10.0

v6.9.0

v5.1.5

5.1.5 (2020-07-30)

v5.1.4

5.1.4 (2020-07-30)

v5.1.2

5.1.2 (2018-11-07)

Bug Fixes

v5.1.1

5.1.1 (2018-11-07)

Bug Fixes

1.20.3

What's Changed

Important

Other changes

New Contributors

1.20.2

1.20.1

1.20.0

1.20.3 / 2024-09-10

1.20.2 / 2023-02-21

1.20.1 / 2022-10-06

1.20.0 / 2022-04-02

1.19.2 / 2022-02-15

1.19.1 / 2021-12-10

4.21.2

What's Changed

4.21.1

What's Changed

4.21.0

What's Changed

New Contributors

4.20.0

What's Changed

Important

Other Changes

4.21.2 / 2024-11-06

4.21.1 / 2024-10-08

4.21.0 / 2024-09-11

4.20.0 / 2024-09-10

4.19.2 / 2024-03-25