chore(deps): bump the npm_and_yarn group across 3 directories with 14 updates#4
Conversation
… updates Bumps the npm_and_yarn group with 2 updates in the / directory: [webpack](https://github.com/webpack/webpack) and [webpack-dev-server](https://github.com/webpack/webpack-dev-server). Bumps the npm_and_yarn group with 1 update in the /packages/sdk directory: [webpack-dev-server](https://github.com/webpack/webpack-dev-server). Bumps the npm_and_yarn group with 9 updates in the /packages/ur-registry-eth directory: | Package | From | To | | --- | --- | --- | | [webpack](https://github.com/webpack/webpack) | `5.74.0` | `5.104.1` | | [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers) | `7.15.3` | `7.25.9` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.15.0` | `7.25.9` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.2.1` | `4.2.3` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [secp256k1](https://github.com/cryptocoinjs/secp256k1-node) | `4.0.2` | `4.0.4` | | [shelljs](https://github.com/shelljs/shelljs) | `0.8.4` | `0.8.5` | | [tmpl](https://github.com/daaku/nodejs-tmpl) | `1.0.4` | `1.0.5` | Updates `webpack` from 5.95.0 to 5.104.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.95.0...v5.104.1) Updates `webpack-dev-server` from 3.11.3 to 5.2.1 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v3.11.3...v5.2.1) Updates `node-forge` from 0.10.0 to 1.3.3 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@0.10.0...v1.3.3) Updates `on-headers` from 1.0.2 to 1.1.0 - [Release notes](https://github.com/jshttp/on-headers/releases) - [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md) - [Commits](jshttp/on-headers@v1.0.2...v1.1.0) Updates `qs` from 6.5.3 to 6.5.5 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.3...v6.5.5) Updates `webpack-dev-middleware` from 3.7.3 to 7.4.5 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v3.7.3...v7.4.5) Updates `webpack-dev-server` from 3.11.3 to 5.2.1 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v3.11.3...v5.2.1) Updates `webpack` from 5.74.0 to 5.104.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.95.0...v5.104.1) Updates `@babel/helpers` from 7.15.3 to 7.25.9 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.25.9/packages/babel-helpers) Updates `@babel/traverse` from 7.15.0 to 7.25.9 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.25.9/packages/babel-traverse) Updates `browserify-sign` from 4.2.1 to 4.2.3 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.2.1...v4.2.3) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `secp256k1` from 4.0.2 to 4.0.4 - [Release notes](https://github.com/cryptocoinjs/secp256k1-node/releases) - [Commits](cryptocoinjs/secp256k1-node@v4.0.2...v4.0.4) Updates `shelljs` from 0.8.4 to 0.8.5 - [Release notes](https://github.com/shelljs/shelljs/releases) - [Changelog](https://github.com/shelljs/shelljs/blob/main/CHANGELOG.md) - [Commits](shelljs/shelljs@v0.8.4...v0.8.5) Updates `tmpl` from 1.0.4 to 1.0.5 - [Commits](https://github.com/daaku/nodejs-tmpl/commits/v1.0.5) --- updated-dependencies: - dependency-name: webpack dependency-version: 5.104.1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack-dev-server dependency-version: 5.2.1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: node-forge dependency-version: 1.3.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: on-headers dependency-version: 1.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.5.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-version: 7.4.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-server dependency-version: 5.2.1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack dependency-version: 5.104.1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/helpers" dependency-version: 7.25.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-version: 7.25.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserify-sign dependency-version: 4.2.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: decode-uri-component dependency-version: 0.2.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-version: 1.2.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: secp256k1 dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: shelljs dependency-version: 0.8.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tmpl dependency-version: 1.0.5 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
|
Caution MetaMask internal reviewing guidelines:
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
| "webpack": "^5.48.0", | ||
| "webpack-cli": "^4.7.2", | ||
| "webpack-dev-server": "^3.11.2" | ||
| "webpack-dev-server": "^5.2.1" |
There was a problem hiding this comment.
Removed contentBase option breaks webpack dev server
High Severity
Bumping webpack-dev-server from v3 to v5 is a major version upgrade, but packages/sdk/webpack.config.js still uses contentBase in the devServer config — an option that was removed in v4. Webpack-dev-server v5 will throw a validation error on startup, breaking the start script (webpack serve --open). The contentBase option needs to be replaced with static.
Bumps the npm_and_yarn group with 2 updates in the / directory: webpack and webpack-dev-server.
Bumps the npm_and_yarn group with 1 update in the /packages/sdk directory: webpack-dev-server.
Bumps the npm_and_yarn group with 9 updates in the /packages/ur-registry-eth directory:
5.74.05.104.17.15.37.25.97.15.07.25.94.2.14.2.30.2.00.2.21.2.51.2.84.0.24.0.40.8.40.8.51.0.41.0.5Updates
webpackfrom 5.95.0 to 5.104.1Release notes
Sourced from webpack's releases.
... (truncated)
Changelog
Sourced from webpack's changelog.
Commits
24e3c2dchore(release): new release (#20253)2efd21bfix(re-exports): reexports runtime calculation should not accessing `__WEBPAC...c510070fix(security): userinfo bypass vulnerability in HttpUriPlugin allowedUris4b0501cci: fix release (#20252)0c213ceci: use\<@&1450591255485743204>over@herefor discord notificationw5bf8bc5refactor: types for benchmarks and tests505a5e7chore(release): new release (#20188)0c06680refactor: update eslint configuration2eb0d6aci: release announcement (#20238)b2b2459ci: cancel in progress (#20239)Updates
webpack-dev-serverfrom 3.11.3 to 5.2.1Release notes
Sourced from webpack-dev-server's releases.
... (truncated)
Changelog
Sourced from webpack-dev-server's changelog.
... (truncated)
Commits
0d22a08chore(release): 5.2.16045b1echore(deps): update (#5444)ffd0b86fix: take the first network found instead of the last one, this restores the ...9ea7b08ci: update dependency-review-action (#5442)5c9378bMerge commit from forkd2575adMerge commit from fork8c1abc9fix: prevent overlay for errors caught by React error boundaries (#5431)5a39c70ci: update codecov/codecov-action to v5 (#5406)55220a8chore(deps-dev): bump the dependencies group across 1 directory with 4 update...09f6f8echore(deps): bump the dependencies group across 1 directory with 2 updates (#...Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
node-forgefrom 0.10.0 to 1.3.3Changelog
Sourced from node-forge's changelog.
... (truncated)
Commits
1cea0afRelease 1.3.3.5265989Update changelog.e4f3961Fix changelog for release.503979bUpdate changelog.c3b3b32Make digestAlgorithm parameters optional6f70043Update CVE details.f547b0dStart 1.3.3-0.235ad3eRelease 1.3.2.2598244Update changelog.0032dd0Fix typos.Updates
on-headersfrom 1.0.2 to 1.1.0Release notes
Sourced from on-headers's releases.
Changelog
Sourced from on-headers's changelog.
Commits
4b017af1.1.0b636f2d♻️ refactor header array code3e2c2d4✨ ignore falsy header keys, matching node behavior172eb41✨ support duplicate headersc6e3849🔒️ fix array handling6893518💚 update CI - add newer node versions56a345d✨ add script to update known hashes175ab21👷 add upstream change detection (#31)ce0b2c8ci: apply OSSF Scorecard security best practices (#20)1a38c54fix: useubuntu-latestas ci runner (#19)Maintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for on-headers since your current version.
Updates
qsfrom 6.5.3 to 6.5.5Changelog
Sourced from qs's changelog.
Commits
3a6d9f8v6.5.548160e7[actions] update reusable workflows2fc004a[meta] addnpmignoreto autogenerate an npmignore fileddcc5d5[Fix] fix regressions from robustness refactorc190488v6.5.440b77c3[actions] fix rebase workflow permissions6e39e92[readme] document thataddQueryPrefixdoes not add?to empty output4e393de[readme] replace runkit CI badge with shields.io check-runs badgedbb0346[readme] clarifyparseArraysandarrayLimitdocumentation6b8b4d8[Robustness] avoid.push, usevoidUpdates
webpack-dev-middlewarefrom 3.7.3 to 7.4.5Release notes
Sourced from webpack-dev-middleware's releases.
... (truncated)
Changelog
Sourced from webpack-dev-middleware's changelog.
... (truncated)
Commits
ec97e06chore(release): 7.4.5c9a0e68fix: unpin memfs (#2176)0c87e95chore(deps-dev): bump the dependencies group across 1 directory with 6 update...8f40f5fchore(release): 7.4.4044d691fix: pin memfs version (#2174)253c7e1chore(deps-dev): bump the dependencies group with 3 updates (#2170)2535262chore(deps): bump the dependencies group across 1 directory with 5 updates (#...6b7531echore: remove CODEOWNERS, too spammy (#2167)be10aa6chore(deps): remove strip-ansi (#2166)0c4431bchore(deps): updateInstall script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Updates
webpack-dev-serverfrom 3.11.3 to 5.2.1Release notes
Sourced from webpack-dev-server's releases.
... (truncated)
Changelog
Sourced from webpack-dev-server's changelog.
... (truncated)
Commits
0d22a08chore(release): 5.2.16045b1echore(deps): update (#5444)ffd0b86fix: take the first network found instead of the last one, this restores the ...9ea7b08ci: update dependency-review-action (#5442)5c9378bMerge commit from forkd2575adMerge commit from fork8c1abc9fix: prevent overlay for errors caught by React error boundaries (#5431)5a39c70ci: update codecov/codecov-action to v5 (#5406)55220a8chore(deps-dev): bump the dependencies group across 1 directory with 4 update...09f6f8echore(deps): bump the dependencies group across 1 directory with 2 updates (#...Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
webpackfrom 5.74.0 to 5.104.1Release notes
Sourced from webpack's releases.
... (truncated)
Changelog
Sourced from webpack's changelog.
Commits
24e3c2dchore(release): new release (#20253)2efd21bfix(re-exports): reexports runtime calculation should not accessing `__WEBPAC...c510070fix(security): userinfo bypass vulnerability in HttpUriPlugin allowedUris4b0501cci: fix release (#20252)