chore(deps): update dependency webpack-dev-server to v5 by renovate[bot] · Pull Request #461 · scratchfoundation/scratch-sb1-converter

renovate · 2026-03-27T04:31:57Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
webpack-dev-server	`3.11.3` → `5.2.3`

Release Notes

webpack/webpack-dev-server (webpack-dev-server)

Security

cross-origin requests are not allowed unless allowed by Access-Control-Allow-Origin header
requests with an IP addresses in the Origin header are not allowed to connect to WebSocket server unless configured by allowedHosts or it different from the Host header

The above changes may make the dev server not work if you relied on such behavior, but unfortunately they carry security risks, so they were considered as fixes.

Bug Fixes

prevent overlay for errors caught by React error boundaries (#5431) (8c1abc9)
take the first network found instead of the last one, this restores the same behavior as 5.0.4 (#5411) (ffd0b86)

`v5.2.0`

Compare Source

Features

added getClientEntry and getClientHotEntry methods to get clients entries (dc642a8)

Bug Fixes

speed up initial client bundling (145b5d0)

`v5.1.0`

Compare Source

Features

add visual progress indicators (a8f40b7)
added the app option to be Function (by default only with connect compatibility frameworks) (3096148)
allow the server option to be Function (#5275) (02a1c6d)
http2 support for connect and connect compatibility frameworks which support HTTP2 (#5267) (6509a3f)

Bug Fixes

check the platform property to determinate the target (#5269) (c3b532c)
ipv6 output (#5270) (06005e7)
replace rimraf with rm (#5162) (1a1561f)
replace default gateway (#5255) (f5f0902)
support devServer: false (#5272) (8b341cb)

5.0.4 (2024-03-19)

Bug Fixes

security: bump webpack-dev-middleware (#5112) (aab576a)

5.0.3 (2024-03-12)

Bug Fixes

types: proxy (#5101) (6e1aed3)

5.0.2 (2024-02-16)

Bug Fixes

types (#5057) (da2c24d)

5.0.1 (2024-02-13)

Bug Fixes

avoid using eval in client (#5045) (7681477)
overlay and require-trusted-types-for (#5046) (e115436)

`v5.0.4`

Compare Source

Security

cross-origin requests are not allowed unless allowed by Access-Control-Allow-Origin header
requests with an IP addresses in the Origin header are not allowed to connect to WebSocket server unless configured by allowedHosts or it different from the Host header

The above changes may make the dev server not work if you relied on such behavior, but unfortunately they carry security risks, so they were considered as fixes.

Bug Fixes

prevent overlay for errors caught by React error boundaries (#5431) (8c1abc9)
take the first network found instead of the last one, this restores the same behavior as 5.0.4 (#5411) (ffd0b86)

`v5.0.3`

Compare Source

Features

add visual progress indicators (a8f40b7)
added the app option to be Function (by default only with connect compatibility frameworks) (3096148)
allow the server option to be Function (#5275) (02a1c6d)
http2 support for connect and connect compatibility frameworks which support HTTP2 (#5267) (6509a3f)

Bug Fixes

check the platform property to determinate the target (#5269) (c3b532c)
ipv6 output (#5270) (06005e7)
replace rimraf with rm (#5162) (1a1561f)
replace default gateway (#5255) (f5f0902)
support devServer: false (#5272) (8b341cb)

5.0.4 (2024-03-19)

Bug Fixes

security: bump webpack-dev-middleware (#5112) (aab576a)

5.0.3 (2024-03-12)

Bug Fixes

types: proxy (#5101) (6e1aed3)

5.0.2 (2024-02-16)

Bug Fixes

types (#5057) (da2c24d)

5.0.1 (2024-02-13)

Bug Fixes

avoid using eval in client (#5045) (7681477)
overlay and require-trusted-types-for (#5046) (e115436)

`v5.0.2`

Compare Source

Features

add visual progress indicators (a8f40b7)
added the app option to be Function (by default only with connect compatibility frameworks) (3096148)
allow the server option to be Function (#5275) (02a1c6d)
http2 support for connect and connect compatibility frameworks which support HTTP2 (#5267) (6509a3f)

Bug Fixes

check the platform property to determinate the target (#5269) (c3b532c)
ipv6 output (#5270) (06005e7)
replace rimraf with rm (#5162) (1a1561f)
replace default gateway (#5255) (f5f0902)
support devServer: false (#5272) (8b341cb)

5.0.4 (2024-03-19)

Bug Fixes

security: bump webpack-dev-middleware (#5112) (aab576a)

5.0.3 (2024-03-12)

Bug Fixes

types: proxy (#5101) (6e1aed3)

5.0.2 (2024-02-16)

Bug Fixes

types (#5057) (da2c24d)

5.0.1 (2024-02-13)

Bug Fixes

avoid using eval in client (#5045) (7681477)
overlay and require-trusted-types-for (#5046) (e115436)

`v5.0.1`

Compare Source

Features

add visual progress indicators (a8f40b7)
added the app option to be Function (by default only with connect compatibility frameworks) (3096148)
allow the server option to be Function (#5275) (02a1c6d)
http2 support for connect and connect compatibility frameworks which support HTTP2 (#5267) (6509a3f)

Bug Fixes

check the platform property to determinate the target (#5269) (c3b532c)
ipv6 output (#5270) (06005e7)
replace rimraf with rm (#5162) (1a1561f)
replace default gateway (#5255) (f5f0902)
support devServer: false (#5272) (8b341cb)

5.0.4 (2024-03-19)

Bug Fixes

security: bump webpack-dev-middleware (#5112) (aab576a)

5.0.3 (2024-03-12)

Bug Fixes

types: proxy (#5101) (6e1aed3)

5.0.2 (2024-02-16)

Bug Fixes

types (#5057) (da2c24d)

5.0.1 (2024-02-13)

Bug Fixes

avoid using eval in client (#5045) (7681477)
overlay and require-trusted-types-for (#5046) (e115436)

`v5.0.0`

Compare Source

Features

add visual progress indicators (a8f40b7)
added the app option to be Function (by default only with connect compatibility frameworks) (3096148)
allow the server option to be Function (#5275) (02a1c6d)
http2 support for connect and connect compatibility frameworks which support HTTP2 (#5267) (6509a3f)

Bug Fixes

check the platform property to determinate the target (#5269) (c3b532c)
ipv6 output (#5270) (06005e7)
replace rimraf with rm (#5162) (1a1561f)
replace default gateway (#5255) (f5f0902)
support devServer: false (#5272) (8b341cb)

5.0.4 (2024-03-19)

Bug Fixes

security: bump webpack-dev-middleware (#5112) (aab576a)

5.0.3 (2024-03-12)

Bug Fixes

types: proxy (#5101) (6e1aed3)

5.0.2 (2024-02-16)

Bug Fixes

types (#5057) (da2c24d)

5.0.1 (2024-02-13)

Bug Fixes

avoid using eval in client (#5045) (7681477)
overlay and require-trusted-types-for (#5046) (e115436)

`v4.15.2`

Compare Source

4.15.2 (2024-03-20)

Bug Fixes

security: bump webpack-dev-middleware (4116209)

`v4.15.1`

Compare Source

Migration Guide and Changes.

4.15.1 (2023-06-09)

Bug Fixes

replace :: with localhost before openBrowser() (#4856) (874c44b)
types: compatibility with @types/ws (#4899) (34bcec2)

`v4.15.0`

Compare Source

Migration Guide and Changes.

4.15.1 (2023-06-09)

Bug Fixes

replace :: with localhost before openBrowser() (#4856) (874c44b)
types: compatibility with @types/ws (#4899) (34bcec2)

`v4.14.0`

Compare Source

Features

allow CLI to be ESM (#4837) (bb4a5d9)
allow filter overlay errors/warnings with function (#4813) (aab01b3)

4.13.3 (2023-04-15)

Bug Fixes

perf: reduced initial start time (#4818) (fcf01d1)

4.13.2 (2023-03-31)

Bug Fixes

prevent open 0.0.0.0 in browser due windows problems (04e74f2)

4.13.1 (2023-03-18)

Bug Fixes

make webpack optional peer dependency (#4778) (71be54e)

`v4.13.3`

Compare Source

Features

allow CLI to be ESM (#4837) (bb4a5d9)
allow filter overlay errors/warnings with function (#4813) (aab01b3)

4.13.3 (2023-04-15)

Bug Fixes

perf: reduced initial start time (#4818) (fcf01d1)

4.13.2 (2023-03-31)

Bug Fixes

prevent open 0.0.0.0 in browser due windows problems (04e74f2)

4.13.1 (2023-03-18)

Bug Fixes

make webpack optional peer dependency (#4778) (71be54e)

`v4.13.2`

Compare Source

Features

allow CLI to be ESM (#4837) (bb4a5d9)
allow filter overlay errors/warnings with function (#4813) (aab01b3)

4.13.3 (2023-04-15)

Bug Fixes

perf: reduced initial start time (#4818) (fcf01d1)

4.13.2 (2023-03-31)

Bug Fixes

prevent open 0.0.0.0 in browser due windows problems (04e74f2)

4.13.1 (2023-03-18)

Bug Fixes

make webpack optional peer dependency (#4778) (71be54e)

`v4.13.1`

Compare Source

Features

allow CLI to be ESM (#4837) (bb4a5d9)
allow filter overlay errors/warnings with function (#4813) (aab01b3)

4.13.3 (2023-04-15)

Bug Fixes

perf: reduced initial start time (#4818) (fcf01d1)

4.13.2 (2023-03-31)

Bug Fixes

prevent open 0.0.0.0 in browser due windows problems (04e74f2)

4.13.1 (2023-03-18)

Bug Fixes

make webpack optional peer dependency (#4778) (71be54e)

`v4.13.0`

Compare Source

Features

allow CLI to be ESM (#4837) (bb4a5d9)
allow filter overlay errors/warnings with function (#4813) (aab01b3)

4.13.3 (2023-04-15)

Bug Fixes

perf: reduced initial start time (#4818) (fcf01d1)

4.13.2 (2023-03-31)

Bug Fixes

prevent open 0.0.0.0 in browser due windows problems (04e74f2)

4.13.1 (2023-03-18)

Bug Fixes

make webpack optional peer dependency (#4778) (71be54e)

`v4.12.0`

Compare Source

Features

allow to set the sockjs_url option (only sockjs) using the webSocketServer.options.sockjsUrl option (#4586) (69a2fba)
catch runtime error (#4605) (87a26cf)
improve styles for overlay (#4576) (791fb85)
open editor when clicking error on overlay (#4587) (efb2cec)

Bug Fixes

compatibility with experiments.buildHttp (#4585) (5b846cb)
respect NODE_PATH env variable (#4581) (b857e6f)

4.11.1 (2022-09-19)

Bug Fixes

respect client.logging option for all logs (#4572) (375835c)

`v4.11.1`

Compare Source

Features

allow to set the sockjs_url option (only sockjs) using the webSocketServer.options.sockjsUrl option (#4586) (69a2fba)
catch runtime error (#4605) (87a26cf)
improve styles for overlay (#4576) (791fb85)
open editor when clicking error on overlay (#4587) (efb2cec)

Bug Fixes

compatibility with experiments.buildHttp (#4585) (5b846cb)
respect NODE_PATH env variable (#4581) (b857e6f)

4.11.1 (2022-09-19)

Bug Fixes

respect client.logging option for all logs (#4572) (375835c)

`v4.11.0`

Compare Source

Features

allow to set the sockjs_url option (only sockjs) using the webSocketServer.options.sockjsUrl option (#4586) (69a2fba)
catch runtime error (#4605) (87a26cf)
improve styles for overlay (#4576) (791fb85)
open editor when clicking error on overlay (#4587) (efb2cec)

Bug Fixes

compatibility with experiments.buildHttp (#4585) (5b846cb)
respect NODE_PATH env variable (#4581) (b857e6f)

4.11.1 (2022-09-19)

Bug Fixes

respect client.logging option for all logs (#4572) (375835c)

`v4.10.1`

Compare Source

Features

make allowedHosts accept localhost subdomains by default (#4357) (0a33e6a)

Bug Fixes

auto reply to OPTIONS requests only when unhandled (#4559) (984af02), closes #4551

4.10.1 (2022-08-29)

Bug Fixes

compatibility with old browsers (#4544) (6a430d4)

`v4.10.0`

Compare Source

Features

make allowedHosts accept localhost subdomains by default (#4357) (0a33e6a)

Bug Fixes

auto reply to OPTIONS requests only when unhandled (#4559) (984af02), closes #4551

4.10.1 (2022-08-29)

Bug Fixes

compatibility with old browsers (#4544) (6a430d4)

`v4.9.3`

Compare Source

Features

allow to configure more client options via resource URL (#4274) (216e3cb)

Bug Fixes

response correctly when receive an OPTIONS request (#4185) (2b3b7e0)

4.9.3 (2022-06-29)

Bug Fixes

avoid creation unnecessary stream for static sockjs file (#4482) (049b153)
history-api-fallback now supports HEAD requests and handles them the same as GET (8936082)

4.9.2 (2022-06-06)

Bug Fixes

add @types/serve-static to dependencies (#4468) (af83deb)

4.9.1 (2022-05-31)

Bug Fixes

security problem with sockjs (#4465) (e765182)

`v4.9.2`

Compare Source

Features

allow to configure more client options via resource URL (#4274) (216e3cb)

Bug Fixes

response correctly when receive an OPTIONS request (#4185) (2b3b7e0)

4.9.3 (2022-06-29)

Bug Fixes

avoid creation unnecessary stream for static sockjs file (#4482) (049b153)
history-api-fallback now supports HEAD requests and handles them the same as GET (8936082)

4.9.2 (2022-06-06)

Bug Fixes

add @types/serve-static to dependencies (#4468) (af83deb)

4.9.1 (2022-05-31)

Bug Fixes

security problem with sockjs (#4465) (e765182)

`v4.9.1`

Compare Source

Features

allow to configure more client options via resource URL (#4274) (216e3cb)

Bug Fixes

response correctly when receive an OPTIONS request (#4185) (2b3b7e0)

4.9.3 (2022-06-29)

Bug Fixes

avoid creation unnecessary stream for static sockjs file (#4482) (049b153)
history-api-fallback now supports HEAD requests and handles them the same as GET (8936082)

4.9.2 (2022-06-06)

Bug Fixes

add @types/serve-static to dependencies (#4468) (af83deb)

4.9.1 (2022-05-31)

Bug Fixes

security problem with sockjs (#4465) (e765182)

`v4.9.0`

Compare Source

Features

allow to configure more client options via resource URL (#4274) (216e3cb)

Bug Fixes

response correctly when receive an OPTIONS request (#4185) (2b3b7e0)

4.9.3 (2022-06-29)

Bug Fixes

avoid creation unnecessary stream for static sockjs file (#4482) (049b153)
history-api-fallback now supports HEAD requests and handles them the same as GET (8936082)

4.9.2 (2022-06-06)

Bug Fixes

add @types/serve-static to dependencies (#4468) (af83deb)

4.9.1 (2022-05-31)

Bug Fixes

security problem with sockjs (#4465) (e765182)

`v4.8.1`

Compare Source

Features

support Trusted Types for client overlay (#4404) (8132e1d)

Bug Fixes

ie11 runtime (#4403) (256d5fb)
replace portfinder with custom implementation and fix security problem (#4384) (eea50f3)
use the host in options to check if port is available (#4385) (a10c7cf)

4.8.1 (2022-04-06)

Bug Fixes

types (#4373) (f6fe6be)

`v4.8.0`

Compare Source

Features

support Trusted Types for client overlay (#4404) (8132e1d)

Bug Fixes

ie11 runtime (#4403) (256d5fb)
replace portfinder with custom implementation and fix security problem (#4384) (eea50f3)
use the host in options to check if port is available (#4385) (a10c7cf)

4.8.1 (2022-04-06)

Bug Fixes

types (#4373) (f6fe6be)

`v4.7.4`

Compare Source

Features

export initialized socket client (#4304) (7920364)

Bug Fixes

update description for --no-client-reconnect (#4248) (317648d)
update description for --no-client (#4250) (c3b6690)
update description for --no-history-api-fallback (#4277) (d63a0a2)
update negated descriptions for more options (#4287) (c64bd94)
update schema to have negatedDescription only for type boolean (#4280) (fcf8e8e)

4.7.4 (2022-02-02)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-03-27T04:32:00Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: webpack-dev-server@5.2.3
npm ERR! Found: webpack@4.47.0
npm ERR! node_modules/webpack
npm ERR!   dev webpack@"4.47.0" from the root project
npm ERR!   peer webpack@">=2" from babel-loader@8.4.1
npm ERR!   node_modules/babel-loader
npm ERR!     dev babel-loader@"8.4.1" from the root project
npm ERR!   4 more (html-webpack-plugin, terser-webpack-plugin, ...)
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peerOptional webpack@"^5.0.0" from webpack-dev-server@5.2.3
npm ERR! node_modules/webpack-dev-server
npm ERR!   dev webpack-dev-server@"5.2.3" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: webpack@5.105.4
npm ERR! node_modules/webpack
npm ERR!   peerOptional webpack@"^5.0.0" from webpack-dev-server@5.2.3
npm ERR!   node_modules/webpack-dev-server
npm ERR!     dev webpack-dev-server@"5.2.3" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /runner/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /runner/cache/others/npm/_logs/2026-03-27T04_31_44_569Z-debug-0.log

chore(deps): update dependency webpack-dev-server to v5

18c1801

renovate bot added the dependencies Pull requests that update a dependency file label Mar 27, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update dependency webpack-dev-server to v5#461

chore(deps): update dependency webpack-dev-server to v5#461
renovate[bot] wants to merge 1 commit intodevelopfrom
renovate/webpack-dev-server-5.x

renovate bot commented Mar 27, 2026

Uh oh!

renovate bot commented Mar 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Mar 27, 2026

Release Notes

Security

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

5.0.4 (2024-03-19)

Bug Fixes

5.0.3 (2024-03-12)

Bug Fixes

5.0.2 (2024-02-16)

Bug Fixes

5.0.1 (2024-02-13)

Bug Fixes

Security

Bug Fixes

Features

Bug Fixes

5.0.4 (2024-03-19)

Bug Fixes

5.0.3 (2024-03-12)

Bug Fixes

5.0.2 (2024-02-16)

Bug Fixes

5.0.1 (2024-02-13)

Bug Fixes

Features

Bug Fixes

5.0.4 (2024-03-19)

Bug Fixes

5.0.3 (2024-03-12)

Bug Fixes

5.0.2 (2024-02-16)

Bug Fixes

5.0.1 (2024-02-13)

Bug Fixes

Features

Bug Fixes

5.0.4 (2024-03-19)

Bug Fixes

5.0.3 (2024-03-12)

Bug Fixes

5.0.2 (2024-02-16)

Bug Fixes

5.0.1 (2024-02-13)

Bug Fixes

Features

Bug Fixes

5.0.4 (2024-03-19)

Bug Fixes

5.0.3 (2024-03-12)

Bug Fixes

5.0.2 (2024-02-16)

Bug Fixes

5.0.1 (2024-02-13)

Bug Fixes

4.15.2 (2024-03-20)

Bug Fixes

4.15.1 (2023-06-09)

Bug Fixes

4.15.1 (2023-06-09)

Bug Fixes

Features

4.13.3 (2023-04-15)

Bug Fixes

4.13.2 (2023-03-31)

Bug Fixes

4.13.1 (2023-03-18)

Bug Fixes

Features

4.13.3 (2023-04-15)

Bug Fixes

4.13.2 (2023-03-31)

Bug Fixes

4.13.1 (2023-03-18)

Bug Fixes

Features