Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update webpack-dev-server to latest version #7030

Closed
hardfist opened this issue Jul 3, 2024 · 2 comments
Closed

update webpack-dev-server to latest version #7030

hardfist opened this issue Jul 3, 2024 · 2 comments
Assignees
Labels
team The issue/pr is created by the member of Rspack.

Comments

@hardfist
Copy link
Contributor

hardfist commented Jul 3, 2024

Hey. Do you have plans to update dependencies to the first version?

npm audit:

ws  8.0.0 - 8.17.0
Severity: high
ws affected by a DoS when handling a request with many HTTP headers - https://github.com/advisories/GHSA-3h5v-q93c-6h6q
fix available via `npm audit fix --force`
Will install @rspack/cli@0.0.6, which is a breaking change
node_modules/ws
  @rspack/dev-server  <=0.0.0-ff9366411-20230221070252 || >=0.0.8
  Depends on vulnerable versions of ws
  node_modules/@rspack/dev-server
    @rspack/cli  <=0.0.0-ff9366411-20230221070252 || >=0.0.8
    Depends on vulnerable versions of @rspack/dev-server
    node_modules/@rspack/cli

also warnings during installation:

npm WARN deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm WARN deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported
npm WARN deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported

via @rspack/dev-server -> webpack-dev-server@4.13.1

Originally posted by @dartess in #6315 (comment)

@github-actions github-actions bot added the team The issue/pr is created by the member of Rspack. label Jul 3, 2024
@dartess
Copy link

dartess commented Jul 4, 2024

update webpack-dev-server to latest version

Also ws is a top-lever dependency of the @rspack/dev-server package. Unfortunately, you have fixed the package version.

@SoonIter
Copy link
Member

SoonIter commented Jul 12, 2024

There is one point that needs to be underlined, BREAKING CHANGE: Minimum Node version is 18
we are also planning to update the minimum node version support of @rspack/cli.

https://github.com/webpack/webpack-dev-server/blob/master/migration-v5.md

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
team The issue/pr is created by the member of Rspack.
Projects
None yet
Development

No branches or pull requests

3 participants