mCaptcha/pow_sha256-polyfill

Fork 0

chore(deps): update dependency webpack-dev-server to v5.2.6 #145

Open

renovate-bot wants to merge 1 commit from renovate/webpack-dev-server-5.x-lockfile into master

renovate-bot commented

2026-07-06 05:16:04 +05:30

Member

This PR contains the following updates:

Package	Change	Age	Confidence
webpack-dev-server	`5.2.5` -> `5.2.6`

Release Notes

webpack/webpack-dev-server (webpack-dev-server)

`v5.2.6`

Compare Source

Patch Changes

fix: allow undefined as the Server constructor options argument again (by @bjohansebas in #5695)

Restores accepting undefined (defaulting it to {}) for the options
argument, so passing a webpack config's optional devServer field type-checks and works as before.
Protect the built-in state-changing routes (/webpack-dev-server/invalidate and /webpack-dev-server/open-editor) against cross-site request forgery. Requests are now checked with Sec-Fetch-Site (falling back to an Origin/Host comparison when it is absent), so a cross-site page can no longer trigger a rebuild or open a file in the editor. Same-origin requests, user-initiated navigations, and non-browser clients (e.g. curl) are unaffected. (by @bjohansebas in #5698)
Handle malformed Host and Origin header values gracefully when validating requests. (by @bjohansebas in #5699)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | [`5.2.5` -> `5.2.6`](https://renovatebot.com/diffs/npm/webpack-dev-server/5.2.5/5.2.6) | ![age](https://developer.mend.io/api/mc/badges/age/npm/webpack-dev-server/5.2.6?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/webpack-dev-server/5.2.5/5.2.6?slim=true) | --- ### Release Notes <details> <summary>webpack/webpack-dev-server (webpack-dev-server)</summary> ### [`v5.2.6`](https://github.com/webpack/webpack-dev-server/releases/tag/v5.2.6) [Compare Source](https://github.com/webpack/webpack-dev-server/compare/v5.2.5...v5.2.6) ##### Patch Changes - fix: allow `undefined` as the `Server` constructor `options` argument again (by [@bjohansebas](https://github.com/bjohansebas) in [#5695](https://github.com/webpack/webpack-dev-server/pull/5695)) Restores accepting `undefined` (defaulting it to `{}`) for the `options` argument, so passing a webpack config's optional `devServer` field type-checks and works as before. - Protect the built-in state-changing routes (`/webpack-dev-server/invalidate` and `/webpack-dev-server/open-editor`) against cross-site request forgery. Requests are now checked with `Sec-Fetch-Site` (falling back to an `Origin`/`Host` comparison when it is absent), so a cross-site page can no longer trigger a rebuild or open a file in the editor. Same-origin requests, user-initiated navigations, and non-browser clients (e.g. curl) are unaffected. (by [@bjohansebas](https://github.com/bjohansebas) in [#5698](https://github.com/webpack/webpack-dev-server/pull/5698)) - Handle malformed `Host` and `Origin` header values gracefully when validating requests. (by [@bjohansebas](https://github.com/bjohansebas) in [#5699](https://github.com/webpack/webpack-dev-server/pull/5699)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added the

renovate-bot

label

2026-07-06 05:16:04 +05:30

renovate-bot added 1 commit

2026-07-06 05:16:04 +05:30

chore(deps): update dependency webpack-dev-server to v5.2.6

renovate/artifacts Artifact file update failure

ci/woodpecker/push/woodpecker Pipeline was successful

Details

ci/woodpecker/pr/woodpecker Pipeline was successful

Details

ci/woodpecker/pull_request_metadata/woodpecker Pipeline was successful

Details

db52fd0b68

renovate-bot commented

2026-07-06 05:16:04 +05:30

Author

Member

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock

Unknown Syntax Error: Unsupported option name ("--ignore-platform").

$ yarn install [--json] [--immutable] [--immutable-cache] [--refresh-lockfile] [--check-cache] [--check-resolutions] [--inline-builds] [--mode #0]

### ⚠️ Artifact update problem Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens: - any of the package files in this branch needs updating, or - the branch becomes conflicted, or - you click the rebase/retry checkbox if found above, or - you rename this PR's title to start with "rebase!" to trigger it manually The artifact failure details are included below: ##### File name: yarn.lock ``` Unknown Syntax Error: Unsupported option name ("--ignore-platform"). $ yarn install [--json] [--immutable] [--immutable-cache] [--refresh-lockfile] [--check-cache] [--check-resolutions] [--inline-builds] [--mode #0] ```

renovate/artifacts Artifact file update failure

ci/woodpecker/push/woodpecker Pipeline was successful

Details

ci/woodpecker/pr/woodpecker Pipeline was successful

Details

ci/woodpecker/pull_request_metadata/woodpecker Pipeline was successful

Details

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/webpack-dev-server-5.x-lockfile:renovate/webpack-dev-server-5.x-lockfile

git switch renovate/webpack-dev-server-5.x-lockfile

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master

git merge --no-ff renovate/webpack-dev-server-5.x-lockfile

git switch renovate/webpack-dev-server-5.x-lockfile

git rebase master

git switch master

git merge --ff-only renovate/webpack-dev-server-5.x-lockfile

git switch renovate/webpack-dev-server-5.x-lockfile

git rebase master

git switch master

git merge --no-ff renovate/webpack-dev-server-5.x-lockfile

git switch master

git merge --squash renovate/webpack-dev-server-5.x-lockfile