Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update webpack-dev-server to latest version #7030

Open
hardfist opened this issue Jul 3, 2024 · 1 comment
Open

update webpack-dev-server to latest version #7030

hardfist opened this issue Jul 3, 2024 · 1 comment
Labels
team The issue/pr is created by the member of Rspack.

Comments

@hardfist
Copy link
Contributor

hardfist commented Jul 3, 2024

Hey. Do you have plans to update dependencies to the first version?

npm audit:

ws  8.0.0 - 8.17.0
Severity: high
ws affected by a DoS when handling a request with many HTTP headers - https://github.com/advisories/GHSA-3h5v-q93c-6h6q
fix available via `npm audit fix --force`
Will install @rspack/[email protected], which is a breaking change
node_modules/ws
  @rspack/dev-server  <=0.0.0-ff9366411-20230221070252 || >=0.0.8
  Depends on vulnerable versions of ws
  node_modules/@rspack/dev-server
    @rspack/cli  <=0.0.0-ff9366411-20230221070252 || >=0.0.8
    Depends on vulnerable versions of @rspack/dev-server
    node_modules/@rspack/cli

also warnings during installation:

npm WARN deprecated [email protected]: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm WARN deprecated [email protected]: Rimraf versions prior to v4 are no longer supported
npm WARN deprecated [email protected]: Glob versions prior to v9 are no longer supported

via @rspack/dev-server -> [email protected]

Originally posted by @dartess in #6315 (comment)

@github-actions github-actions bot added the team The issue/pr is created by the member of Rspack. label Jul 3, 2024
@dartess
Copy link

dartess commented Jul 4, 2024

update webpack-dev-server to latest version

Also ws is a top-lever dependency of the @rspack/dev-server package. Unfortunately, you have fixed the package version.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
team The issue/pr is created by the member of Rspack.
Projects
None yet
Development

No branches or pull requests

2 participants