Skip to content

Bump webpack-dev-server and @angular-devkit/build-angular in /src/Ui/app - #210

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/src/Ui/app/multi-eb954b7325
Open

Bump webpack-dev-server and @angular-devkit/build-angular in /src/Ui/app#210
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/src/Ui/app/multi-eb954b7325

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown

Bumps webpack-dev-server to 5.2.6 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates webpack-dev-server from 4.11.0 to 5.2.6

Release notes

Sourced from webpack-dev-server's releases.

v5.2.6

Patch Changes

  • fix: allow undefined as the Server constructor options argument again (by @​bjohansebas in #5695)

    Restores accepting undefined (defaulting it to {}) for the options argument, so passing a webpack config's optional devServer field type-checks and works as before.

  • Protect the built-in state-changing routes (/webpack-dev-server/invalidate and /webpack-dev-server/open-editor) against cross-site request forgery. Requests are now checked with Sec-Fetch-Site (falling back to an Origin/Host comparison when it is absent), so a cross-site page can no longer trigger a rebuild or open a file in the editor. Same-origin requests, user-initiated navigations, and non-browser clients (e.g. curl) are unaffected. (by @​bjohansebas in #5698)

  • Handle malformed Host and Origin header values gracefully when validating requests. (by @​bjohansebas in #5699)

v5.2.5

Patch Changes

  • Skip the HMR WebSocket path when forwarding upgrade requests to user-defined proxies, so custom proxy WebSocket upgrades are no longer intercepted by the dev server. (by @​bjohansebas in #5680)

v5.2.4

5.2.4 (2026-05-11)

Bug Fixes

  • set Cross-Origin-Resource-Policy header to prevent source code theft over HTTP

v5.2.3

5.2.3 (2026-01-12)

Bug Fixes

  • add cause for errorObject (#5518) (37b033d)
  • compatibility with event target and universal target and lazy compilation (574026c)
  • overlay: add ESC key to dismiss overlay (#5598) (f91baa8)
  • progress indicator styles (#5557) (41a53a1)
  • upgrade selfsigned to v5

v5.2.2

5.2.2 (2025-06-03)

Bug Fixes

  • "Overlay enabled" false positive (18e72ee)
  • do not crush when error is null for runtime errors (#5447) (309991f)
  • remove unnecessary header X_TEST (#5451) (64a6124)
  • respect the allowedHosts option for cross-origin header check (#5510) (03d1214)

v5.2.1

5.2.1 (2025-03-26)

... (truncated)

Changelog

Sourced from webpack-dev-server's changelog.

5.2.6

Patch Changes

  • fix: allow undefined as the Server constructor options argument again (by @​bjohansebas in #5695)

    Restores accepting undefined (defaulting it to {}) for the options argument, so passing a webpack config's optional devServer field type-checks and works as before.

  • Protect the built-in state-changing routes (/webpack-dev-server/invalidate and /webpack-dev-server/open-editor) against cross-site request forgery. Requests are now checked with Sec-Fetch-Site (falling back to an Origin/Host comparison when it is absent), so a cross-site page can no longer trigger a rebuild or open a file in the editor. Same-origin requests, user-initiated navigations, and non-browser clients (e.g. curl) are unaffected. (by @​bjohansebas in #5698)

  • Handle malformed Host and Origin header values gracefully when validating requests. (by @​bjohansebas in #5699)

5.2.5

Patch Changes

  • Skip the HMR WebSocket path when forwarding upgrade requests to user-defined proxies, so custom proxy WebSocket upgrades are no longer intercepted by the dev server. (by @​bjohansebas in #5680)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.2.4 (2026-05-11)

Bug Fixes

  • set Cross-Origin-Resource-Policy header to prevent source code theft over HTTP

5.2.3 (2026-01-12)

Bug Fixes

  • add cause for errorObject (#5518) (37b033d)
  • compatibility with event target and universal target and lazy compilation (574026c)
  • overlay: add ESC key to dismiss overlay (#5598) (f91baa8)
  • progress indicator styles (#5557) (41a53a1)
  • upgrade selfsigned to v5

5.2.2 (2025-06-03)

Bug Fixes

  • "Overlay enabled" false positive (18e72ee)
  • do not crush when error is null for runtime errors (#5447) (309991f)
  • remove unnecessary header X_TEST (#5451) (64a6124)
  • respect the allowedHosts option for cross-origin header check (#5510) (03d1214)

5.2.1 (2025-03-26)

Security

... (truncated)

Commits
  • 8a37b0e chore(release): new release (#5697)
  • f21ed0f fix: handle malformed Host and Origin headers (#5699)
  • 80cd9ee fix: reject cross-site requests to open-editor and invalidate endpoints (#5698)
  • 308e853 fix: handle undefined options in Server constructor (#5695)
  • 8b2b915 chore: update branch references from v4 to v5 in workflow configuration
  • 870ed22 chore: add v5 branch to release workflow triggers
  • c3ee325 chore(release): new release (#5682)
  • 60173be feat: add changeset validation and release workflow (#5680)
  • 948d5e6 fix(proxy): match the HMR upgrade path exactly like the ws server (#5678)
  • 93e8996 fix: skip HMR websocket path when forwarding upgrades to user-defined proxies...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-dev-server since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @angular-devkit/build-angular from 14.2.3 to 22.1.2

Release notes

Sourced from @​angular-devkit/build-angular's releases.

22.1.2

@​angular/cli

Commit Description
fix - 57db27ea91 add packages with built-in schematics to devDependencies only

@​angular/build

Commit Description
fix - baed978885 prevent IIFE wrapper interleaving for adjacent classes in minified files

22.1.1

@​angular/cli

Commit Description
fix - ab971a8543 support npm 12 metadata array and error formats

@​angular/build

Commit Description
fix - db24220fb8 rewrite paths from sandboxed execroots when running under Bazel

22.1.0

@​angular/cli

Commit Description
fix - f59bcf529 abort and guide manual mitigation when updating catalog packages
fix - 48f90f5d5 prevent Yarn registry environment variable override
fix - c963ecbec remove algoliasearch dependency and support latest docs versions
fix - 6859d25c3 resolve correct registry name when using npm alias syntax during update
fix - 3a2589dac respect client-side release age settings during update resolution
fix - 5c3101bff revert package.json changes if installation tasks fail during update
fix - 7932caaf9 robustly parse npm manifest from array

@​schematics/angular

Commit Description
feat - 89d7f59cd update ai-config to include Angular MCP server config
fix - b345bb54d remove unused spec tsconfig outDir

@​angular-devkit/core

Commit Description
refactor - fd336d365 deprecate stringToFileBuffer and fileBufferToString

@​angular/build

Commit Description
feat - 34d558c3c add built-in SQLite cache store fallback
feat - 0c18dc0f6 emit debug ids for stable subresource integrity hashes
feat - 51f69276f enable chunk optimization for server builds
feat - 10dc30f9c migrate advanced optimization Babel plugins to oxc-parser + magic-string
feat - 917393a4c migrate i18n inliner to oxc-parser + magic-string
feat - 52ae7f862 share persistent build cache across git worktrees
fix - 95510511d add bounded timeout to vitest executor disposal

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

22.1.2 (2026-07-30)

@​angular/cli

Commit Type Description
57db27ea91 fix add packages with built-in schematics to devDependencies only

@​angular/build

Commit Type Description
baed978885 fix prevent IIFE wrapper interleaving for adjacent classes in minified files

22.1.1 (2026-07-30)

@​angular/cli

Commit Type Description
ab971a8543 fix support npm 12 metadata array and error formats

@​angular/build

Commit Type Description
db24220fb8 fix rewrite paths from sandboxed execroots when running under Bazel

22.2.0-next.0 (2026-07-30)

@​angular/cli

Commit Type Description
e148a8df93 fix support npm 12 metadata array and error formats

@​angular/build

Commit Type Description
6469b5f1f5 fix rewrite paths from sandboxed execroots when running under Bazel

... (truncated)

Commits
  • bccc749 release: cut the v22.1.2 release
  • 57db27e fix(@​angular/cli): add packages with built-in schematics to devDependencies only
  • baed978 fix(@​angular/build): prevent IIFE wrapper interleaving for adjacent classes i...
  • dde9aed build: update cross-repo angular dependencies
  • 51efbd8 build: update github/codeql-action action to v4.37.4
  • 6c15ac8 ci: add branch tracking comments to dev-infra GitHub actions
  • 5d92c65 release: cut the v22.1.1 release
  • e30e18a build: update dependency webpack to v5.109.2
  • 46d42d8 build: update dependency oxc-parser to v0.142.0
  • 9ccb475 build: update bazel dependencies
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump webpack-dev-server and @angular-devkit/build-angular in /src/Ui/app
a81c3e2 
Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) to 5.2.6 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `webpack-dev-server` from 4.11.0 to 5.2.6
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/v5.2.6/CHANGELOG.md)
- [Commits](webpack/webpack-dev-server@v4.11.0...v5.2.6)

Updates `@angular-devkit/build-angular` from 14.2.3 to 22.1.2
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@14.2.3...v22.1.2)

---
updated-dependencies:
- dependency-name: webpack-dev-server
  dependency-version: 5.2.6
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 22.1.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants