[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
webpack-dev-server	6.0.0 → 6.1.0

---

Release Notes

webpack/webpack-dev-server (webpack-dev-server)

v6.1.0

Compare Source

Minor Changes

• Run as a plugin from the top-level plugins of a multi-configuration, serving every configuration from one server. (by @​alexander-akait in #​5765)

• Fix client progress modes, socket URL credentials, overlay and progress lifecycles, server startup error handling and local IP lookup; export BaseServer. (by @​alexander-akait in #​5739)

• The browser client, the error overlay and both transports now come from webpack-dev-middleware, so this package has no client code of its own. Every option keeps its name and meaning, allowedHosts and the origin checks still apply here, and this server's { type } messages are still sent next to the middleware's, so React Refresh keeps working. client/index.js, client/socket.js and client/clients/WebSocketClient.js still resolve while the client's internal files are gone, and the console wording, the overlay and the progress indicator are now the middleware's. client.webSocketTransport: "sse" adds Server-Sent Events, a universal build now runs in Node without the client throwing, and sendMessage(), getClientEntry() and getClientHotEntry() still work, a subclass's overrides included, but are deprecated. (by @​alexander-akait in #​5750)

Patch Changes

• Keep hot and live reload working after a cancelled "Leave site?" dialog. (by @​alexander-akait in #​5744)

• Keep the overlay for a runtime error thrown while the page is still loading. (by @​alexander-akait in #​5745)

• Validate the Host and Origin headers and enforce same-origin checks on WebSocket upgrade requests handled by proxies with ws: true. This prevents cross-origin pages from connecting to proxied WebSocket services through the development server. (by @​UlisesGascon in cb1534a)

• Validate options with a precompiled schema to cut ~115ms from startup. (by @​alexander-akait in #​5746)

• Validate Host and HTTP/2 authority headers independently of Origin protocol exceptions, including when allowedHosts is "all". Handle malformed open-editor URLs with a controlled response and parse their query without relying on the Host header. (by @​bjohansebas in #​5771)

---

Configuration

📅 Schedule: (in timezone Europe/Madrid)

• Branch creation
  • "before 10pm on Sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[relativeci]

#896 Bundle Size — 897.35KiB (-12.2%).

4ab8e74(current) vs 12bfdd4 update-dependencies#317(baseline)

Bundle metrics   5 changes 3 improvements

	Current #896	Baseline #317
Initial JS	303.58KiB(-29.11%)	428.25KiB
Initial CSS	568.62KiB(~-0.01%)	568.64KiB
Cache Invalidation	41.97%	41.32%
Chunks	4	4
Assets	9	9
Modules	285(+1.06%)	282
Duplicate Modules	0	0
Duplicate Code	0%	0%
Packages	39(-2.5%)	40
Duplicate Packages	0	0

Bundle size by type   3 changes 3 improvements

	Current #896	Baseline #317
CSS	568.62KiB (~-0.01%)	568.64KiB
JS	303.58KiB (-29.11%)	428.25KiB
IMG	24.78KiB	24.78KiB
HTML	377B (-8.72%)	413B

Bundle analysis report Branch renovate-webpack-dev-server-6.x Project dashboard

---

^{Generated by RelativeCI Documentation Report issue}