build(deps): bump webpack-dev-server and @angular-devkit/build-angular #117
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) to 5.2.1 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together. Updates `webpack-dev-server` from 5.2.0 to 5.2.1 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.2.0...v5.2.1) Updates `@angular-devkit/build-angular` from 19.1.8 to 20.0.1 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@19.1.8...20.0.1) --- updated-dependencies: - dependency-name: webpack-dev-server dependency-version: 5.2.1 dependency-type: indirect - dependency-name: "@angular-devkit/build-angular" dependency-version: 20.0.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
@dependabot merge
…On Sat, 7 Jun 2025 at 09:47, dependabot[bot] ***@***.***> wrote:
This automated pull request fixes a security vulnerability
<https://github.com/davidshen84/davidshen84.github.io/security/dependabot/128>
(moderate severity).
Learn more about Dependabot security updates
<https://docs.github.com/github/managing-security-vulnerabilities/configuring-dependabot-security-updates>.
------------------------------
Bumps webpack-dev-server <https://github.com/webpack/webpack-dev-server>
to 5.2.1 and updates ancestor dependency @angular-devkit/build-angular
<https://github.com/angular/angular-cli>. These dependencies need to be
updated together.
Updates webpack-dev-server from 5.2.0 to 5.2.1
Release notes
*Sourced from webpack-dev-server's releases
<https://github.com/webpack/webpack-dev-server/releases>.*
v5.2.1 5.2.1
<webpack/webpack-dev-server@v5.2.0...v6.0.0>
(2025-03-26) Security
- cross-origin requests are not allowed unless allowed by
Access-Control-Allow-Origin header
- requests with an IP addresses in the Origin header are not allowed
to connect to WebSocket server unless configured by allowedHosts or it
different from the Host header
The above changes may make the dev server not work if you relied on such
behavior, but unfortunately they carry security risks, so they were
considered as fixes.
Bug Fixes
- prevent overlay for errors caught by React error boundaries (#5431
<https://redirect.github.com/webpack/webpack-dev-server/issues/5431>) (
8c1abc9
<webpack/webpack-dev-server@8c1abc9>
)
- take the first network found instead of the last one, this restores
the same behavior as 5.0.4 (#5411
<https://redirect.github.com/webpack/webpack-dev-server/issues/5411>) (
ffd0b86
<webpack/webpack-dev-server@ffd0b86>
)
Changelog
*Sourced from webpack-dev-server's changelog
<https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md>.*
5.2.1
<webpack/webpack-dev-server@v5.2.0...v6.0.0>
(2025-03-26) Security
- cross-origin requests are not allowed unless allowed by
Access-Control-Allow-Origin header
- requests with an IP addresses in the Origin header are not allowed
to connect to WebSocket server unless configured by allowedHosts or it
different from the Host header
The above changes may make the dev server not work if you relied on such
behavior, but unfortunately they carry security risks, so they were
considered as fixes.
Bug Fixes
- prevent overlay for errors caught by React error boundaries (#5431
<https://redirect.github.com/webpack/webpack-dev-server/issues/5431>) (
8c1abc9
<webpack/webpack-dev-server@8c1abc9>
)
- take the first network found instead of the last one, this restores
the same behavior as 5.0.4 (#5411
<https://redirect.github.com/webpack/webpack-dev-server/issues/5411>) (
ffd0b86
<webpack/webpack-dev-server@ffd0b86>
)
Commits
- 0d22a08
<webpack/webpack-dev-server@0d22a08>
chore(release): 5.2.1
- 6045b1e
<webpack/webpack-dev-server@6045b1e>
chore(deps): update (#5444
<https://redirect.github.com/webpack/webpack-dev-server/issues/5444>)
- ffd0b86
<webpack/webpack-dev-server@ffd0b86>
fix: take the first network found instead of the last one, this restores
the ...
- 9ea7b08
<webpack/webpack-dev-server@9ea7b08>
ci: update dependency-review-action (#5442
<https://redirect.github.com/webpack/webpack-dev-server/issues/5442>)
- 5c9378b
<webpack/webpack-dev-server@5c9378b>
Merge commit from fork
- d2575ad
<webpack/webpack-dev-server@d2575ad>
Merge commit from fork
- 8c1abc9
<webpack/webpack-dev-server@8c1abc9>
fix: prevent overlay for errors caught by React error boundaries (#5431
<https://redirect.github.com/webpack/webpack-dev-server/issues/5431>)
- 5a39c70
<webpack/webpack-dev-server@5a39c70>
ci: update codecov/codecov-action to v5 (#5406
<https://redirect.github.com/webpack/webpack-dev-server/issues/5406>)
- 55220a8
<webpack/webpack-dev-server@55220a8>
chore(deps-dev): bump the dependencies group across 1 directory with 4
update...
- 09f6f8e
<webpack/webpack-dev-server@09f6f8e>
chore(deps): bump the dependencies group across 1 directory with 2 updates
(#...
- See full diff in compare view
<webpack/webpack-dev-server@v5.2.0...v5.2.1>
Updates @angular-devkit/build-angular from 19.1.8 to 20.0.1
Release notes
*Sourced from @angular-devkit/build-angular's releases
<https://github.com/angular/angular-cli/releases>.*
20.0.1 @schematics/angular
Commit Description
[image: fix - 525ddcbd2]
<angular/angular-cli@525ddcb> only
overwrite JSON file if actually changed
[image: fix - 83c820e5a]
<angular/angular-cli@83c820e> remove
karma config devkit package usages during application migration
[image: fix - 87266b38a]
<angular/angular-cli@87266b3> skip
zone.js dependency for zoneless applications @angular/cli
Commit Description
[image: fix - 0883248cb]
<angular/angular-cli@0883248> improve
Node.js version check and error messages @angular/build
Commit Description
[image: fix - e5efdc577]
<angular/angular-cli@e5efdc5> also
disable outputMode in vitest unit-tests
[image: fix - 5814393db]
<angular/angular-cli@5814393> resolve
junit karma reporter output to workspace root 20.0.0 @angular/cli
Commit Description
[image: fix - e513cd4aa]
<angular/angular-cli@e513cd4> add
Node.js 24 as supported version
[image: fix - 5e90c1b4e]
<angular/angular-cli@5e90c1b> remove
Node.js v18 support
[image: fix - 787e510dc]
<angular/angular-cli@787e510> update
min Node.js support to 20.19, 22.12, and 24.0
[image: fix - 64732534e]
<angular/angular-cli@6473253> update
minimum supported Node.js 22 version to 22.11.0 @schematics/angular
Commit Description
[image: feat - e03f2b899]
<angular/angular-cli@e03f2b8> Add
global error listeners to new app generation
[image: feat - 1e137ca84]
<angular/angular-cli@1e137ca> add
migration to update moduleResolution to bundler
[image: feat - 26fd4ea73]
<angular/angular-cli@26fd4ea> add
migrations for server rendering updates
[image: feat - 5876577af]
<angular/angular-cli@5876577> Add
prompt for new apps to be zoneless
[image: feat - fdc6291dd]
<angular/angular-cli@fdc6291> add
update migration to keep previous style guide generation behavior
[image: feat - 093c5a315]
<angular/angular-cli@093c5a3> directly
use @angular/build in new projects
[image: feat - d6f594fe0]
<angular/angular-cli@d6f594f> generate
applications using TypeScript project references
[image: feat - 0ab1ddf63]
<angular/angular-cli@0ab1ddf> generate
libraries using TypeScript project references
[image: feat - 18e13e2ce]
<angular/angular-cli@18e13e2> remove
--server-routing option
[image: feat - 03180fe03]
<angular/angular-cli@03180fe> use
TypeScript module preserve option for new projects
[image: fix - 86d241629]
<angular/angular-cli@86d2416> add
@angular/ssr dependency only when provideServerRendering import has been
updated
[image: fix - 9e6b9b537]
<angular/angular-cli@9e6b9b5> add
type checking of host bindings to strict config
[image: fix - 8654b3fea]
<angular/angular-cli@8654b3f> application
migration should migrate karma builder package
[image: fix - c557a19ef]
<angular/angular-cli@c557a19> avoid
empty polyfill option for new zoneless application
[image: fix - 90615a88b]
<angular/angular-cli@90615a8> default
component templates to not use .ng.html extension
[image: fix - 672ae14cd]
<angular/angular-cli@672ae14> drop
composite in tsconfig
[image: fix - da6ef626f]
<angular/angular-cli@da6ef62> ensure
app-shell schematic consistently uses withAppShell
[image: fix - f126f8d34]
<angular/angular-cli@f126f8d> ensure
module discovery checks for an NgModule decorator
[image: fix - dc2f65999]
<angular/angular-cli@dc2f659> generate
component templates with a .ng.html file extension
[image: fix - 23fc8e1e1]
<angular/angular-cli@23fc8e1> generate
components without a .component extension/type
[image: fix - 8d715fa94]
<angular/angular-cli@8d715fa> generate
directives without a .directive extension/type
[image: fix - 5fc595144]
<angular/angular-cli@5fc5951> generate
guards with a dash type separator
... (truncated)
Changelog
*Sourced from @angular-devkit/build-angular's changelog
<https://github.com/angular/angular-cli/blob/main/CHANGELOG.md>.*
20.0.1 (2025-06-04) @angular/cli
Commit Type Description
0883248cb
<angular/angular-cli@0883248>
fix improve Node.js version check and error messages @schematics/angular
Commit Type Description
525ddcbd2
<angular/angular-cli@525ddcb>
fix only overwrite JSON file if actually changed
83c820e5a
<angular/angular-cli@83c820e>
fix remove karma config devkit package usages during application migration
87266b38a
<angular/angular-cli@87266b3>
fix skip zone.js dependency for zoneless applications @angular/build
Commit Type Description
e5efdc577
<angular/angular-cli@e5efdc5>
fix also disable outputMode in vitest unit-tests
5814393db
<angular/angular-cli@5814393>
fix resolve junit karma reporter output to workspace root
20.0.0 (2025-05-28) Breaking Changes @angular/cli
-
Node.js v18 is no longer supported with Angular.
Before updating a project to Angular v20, the Node.js version must be
at least 20.11.1. For the full list of supported Node.js versions, see
https://angular.dev/reference/versions.
-
Node.js versions from 22.0 to 22.10 are no longer supported
@schematics/angular
- --server-routing option has been removed from several schematics.
Server routing will be used when using the application builder.
@angular-devkit/schematics
-
The NodePackageLinkTask has been removed without a replacement. Create
a custom task if needed.
Note: This does not affect application developers.
... (truncated)
Commits
- 4e7e0b0
<angular/angular-cli@4e7e0b0>
release: cut the v20.0.1 release
- 0883248
<angular/angular-cli@0883248>
fix(@angular/cli): improve Node.js version check and error messages
- 87266b3
<angular/angular-cli@87266b3>
fix(@schematics/angular): skip zone.js dependency for zoneless
applications
- 5814393
<angular/angular-cli@5814393>
fix(@angular/build): resolve junit karma reporter output to workspace
root
- 83c820e
<angular/angular-cli@83c820e>
fix(@schematics/angular): remove karma config devkit package usages
during ap...
- 525ddcb
<angular/angular-cli@525ddcb>
fix(@schematics/angular): only overwrite JSON file if actually changed
- e5efdc5
<angular/angular-cli@e5efdc5>
fix(@angular/build): also disable outputMode in vitest unit-tests
- 510db3e
<angular/angular-cli@510db3e>
release: cut the v20.0.0 release
- b3fa0a8
<angular/angular-cli@b3fa0a8>
build: update framework and ng-packagr to 20.0.0
- 2353de5
<angular/angular-cli@2353de5>
release: cut the v20.0.0-rc.4 release
- Additional commits viewable in compare view
<angular/angular-cli@19.1.8...20.0.1>
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting @dependabot
rebase.
------------------------------
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits
that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after
your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge
and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- @dependabot show <dependency name> ignore conditions will show all
of the ignore conditions of the specified dependency
- @dependabot ignore this major version will close this PR and stop
Dependabot creating any more for this major version (unless you reopen the
PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen the
PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the PR
or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security
Alerts page
<https://github.com/davidshen84/davidshen84.github.io/network/alerts>.
------------------------------
You can view, comment on, or merge this pull request online at:
#117
Commit Summary
- 59f67fb
<59f67fb>
build(deps): bump webpack-dev-server and @angular-devkit/build-angular
File Changes
(2 files
<https://github.com/davidshen84/davidshen84.github.io/pull/117/files>)
- *M* package-lock.json
<https://github.com/davidshen84/davidshen84.github.io/pull/117/files#diff-053150b640a7ce75eff69d1a22cae7f0f94ad64ce9a855db544dda0929316519>
(9491)
- *M* package.json
<https://github.com/davidshen84/davidshen84.github.io/pull/117/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519>
(2)
Patch Links:
- https://github.com/davidshen84/davidshen84.github.io/pull/117.patch
- https://github.com/davidshen84/davidshen84.github.io/pull/117.diff
—
Reply to this email directly, view it on GitHub
<#117>, or
unsubscribe
<https://github.com/notifications/unsubscribe-auth/AAAQBTIVYG2YKSF5EFLZ23T3CISCDAVCNFSM6AAAAAB6ZF6FEGVHI2DSMVQWIX3LMV43ASLTON2WKOZTGEZDMMJRHE3TSNQ>
.
You are receiving this because you are subscribed to this thread.Message
ID: ***@***.***>
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps webpack-dev-server to 5.2.1 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.
Updates
webpack-dev-serverfrom 5.2.0 to 5.2.1Release notes
Sourced from webpack-dev-server's releases.
Changelog
Sourced from webpack-dev-server's changelog.
Commits
0d22a08chore(release): 5.2.16045b1echore(deps): update (#5444)ffd0b86fix: take the first network found instead of the last one, this restores the ...9ea7b08ci: update dependency-review-action (#5442)5c9378bMerge commit from forkd2575adMerge commit from fork8c1abc9fix: prevent overlay for errors caught by React error boundaries (#5431)5a39c70ci: update codecov/codecov-action to v5 (#5406)55220a8chore(deps-dev): bump the dependencies group across 1 directory with 4 update...09f6f8echore(deps): bump the dependencies group across 1 directory with 2 updates (#...Updates
@angular-devkit/build-angularfrom 19.1.8 to 20.0.1Release notes
Sourced from
@angular-devkit/build-angular's releases.... (truncated)
Changelog
Sourced from
@angular-devkit/build-angular's changelog.... (truncated)
Commits
4e7e0b0release: cut the v20.0.1 release0883248fix(@angular/cli): improve Node.js version check and error messages87266b3fix(@schematics/angular): skip zone.js dependency for zoneless applications5814393fix(@angular/build): resolve junit karma reporter output to workspace root83c820efix(@schematics/angular): remove karma config devkit package usages during ap...525ddcbfix(@schematics/angular): only overwrite JSON file if actually changede5efdc5fix(@angular/build): also disable outputMode in vitest unit-tests510db3erelease: cut the v20.0.0 releaseb3fa0a8build: update framework and ng-packagr to 20.0.02353de5release: cut the v20.0.0-rc.4 releaseDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot will merge this PR once CI passes on it, as requested by @davidshen84.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.