Bump webpack-dev-server from 6.0.0 to 6.1.0 in /web/textviewer by dependabot[bot] · Pull Request #2803 · eclipse-set/set

dependabot · 2026-10-22T07:13:14Z

Bumps webpack-dev-server from 6.0.0 to 6.1.0.

Release notes

Sourced from webpack-dev-server's releases.

v6.1.0

Minor Changes

Run as a plugin from the top-level plugins of a multi-configuration, serving every configuration from one server. (by @alexander-akait in #5765)

Fix client progress modes, socket URL credentials, overlay and progress lifecycles, server startup error handling and local IP lookup; export BaseServer. (by @alexander-akait in #5739)

The browser client, the error overlay and both transports now come from webpack-dev-middleware, so this package has no client code of its own. Every option keeps its name and meaning, allowedHosts and the origin checks still apply here, and this server's { type } messages are still sent next to the middleware's, so React Refresh keeps working. client/index.js, client/socket.js and client/clients/WebSocketClient.js still resolve while the client's internal files are gone, and the console wording, the overlay and the progress indicator are now the middleware's. client.webSocketTransport: "sse" adds Server-Sent Events, a universal build now runs in Node without the client throwing, and sendMessage(), getClientEntry() and getClientHotEntry() still work, a subclass's overrides included, but are deprecated. (by @alexander-akait in #5750)

Patch Changes

Keep hot and live reload working after a cancelled "Leave site?" dialog. (by @alexander-akait in #5744)

Keep the overlay for a runtime error thrown while the page is still loading. (by @alexander-akait in #5745)

Validate the Host and Origin headers and enforce same-origin checks on WebSocket upgrade requests handled by proxies with ws: true. This prevents cross-origin pages from connecting to proxied WebSocket services through the development server. (by @UlisesGascon in cb1534a)

Validate options with a precompiled schema to cut ~115ms from startup. (by @alexander-akait in #5746)

Validate Host and HTTP/2 authority headers independently of Origin protocol exceptions, including when allowedHosts is "all". Handle malformed open-editor URLs with a controlled response and parse their query without relying on the Host header. (by @bjohansebas in #5771)

Changelog

Sourced from webpack-dev-server's changelog.

6.1.0

Minor Changes

Run as a plugin from the top-level plugins of a multi-configuration, serving every configuration from one server. (by @alexander-akait in #5765)

Fix client progress modes, socket URL credentials, overlay and progress lifecycles, server startup error handling and local IP lookup; export BaseServer. (by @alexander-akait in #5739)

The browser client, the error overlay and both transports now come from webpack-dev-middleware, so this package has no client code of its own. Every option keeps its name and meaning, allowedHosts and the origin checks still apply here, and this server's { type } messages are still sent next to the middleware's, so React Refresh keeps working. client/index.js, client/socket.js and client/clients/WebSocketClient.js still resolve while the client's internal files are gone, and the console wording, the overlay and the progress indicator are now the middleware's. client.webSocketTransport: "sse" adds Server-Sent Events, a universal build now runs in Node without the client throwing, and sendMessage(), getClientEntry() and getClientHotEntry() still work, a subclass's overrides included, but are deprecated. (by @alexander-akait in #5750)

Patch Changes

Keep hot and live reload working after a cancelled "Leave site?" dialog. (by @alexander-akait in #5744)

Keep the overlay for a runtime error thrown while the page is still loading. (by @alexander-akait in #5745)

Validate the Host and Origin headers and enforce same-origin checks on WebSocket upgrade requests handled by proxies with ws: true. This prevents cross-origin pages from connecting to proxied WebSocket services through the development server. (by @UlisesGascon in cb1534a)

Validate options with a precompiled schema to cut ~115ms from startup. (by @alexander-akait in #5746)

Validate Host and HTTP/2 authority headers independently of Origin protocol exceptions, including when allowedHosts is "all". Handle malformed open-editor URLs with a controlled response and parse their query without relying on the Host header. (by @bjohansebas in #5771)

Commits

50f2c43 chore(release): new release (#5740)
807c441 fix: validate host headers and handle malformed editor URLs (#5771)
b4eb797 feat: run as a plugin from the top-level plugins of a multi-configuration (#5...
9915359 fix: update generated websocket proxy types (#5767)
cb1534a Merge commit from fork
be1ca90 chore(deps): bump the dependencies group across 1 directory with 19 updates (...
dc9a72c feat: run on webpack-dev-middleware's client, with compatibility kept here (#...
d16ad96 chore(deps): bump the dependencies group with 3 updates (#5762)
69077c9 chore(deps-dev): bump hono (#5756)
6a11ab1 chore(deps): bump the dependencies group across 1 directory with 4 updates (#...
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 6.0.0 to 6.1.0. - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v6.0.0...v6.1.0) --- updated-dependencies: - dependency-name: webpack-dev-server dependency-version: 6.1.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-10-22T07:18:53Z

License summary

⚠️ Failed to process DEPENDENCIES.
⚠️ Failed to request review of not vetted licenses.

Committers can request a license review via by commenting /request-license-review.
After all reviews have concluded, Committers can re-run the license-vetting check by commenting /license-check

Workflow run (with attached summary files):
https://github.com/eclipse-set/set/actions/runs/39738997364

github-actions · 2026-10-22T07:21:52Z

Test Results

182 tests ±0 182 ✅ ±0 3m 51s ⏱️ + 1m 59s
42 suites ±0 0 💤 ±0
42 files ±0 0 ❌ ±0

Results for commit cdbeef8. ± Comparison against base commit 538c285.

This pull request removes 12 and adds 10 tests. Note that renamed tests count towards both.

, 2
, a  b c
org.eclipse.set.basis.graph.DigraphsTest ‑ testGetPathsDigraphPP(TestGetPathsDigraphPP)[1] org.eclipse.set.basis.graph.DigraphsTest$TestGetPathsDigraphPP@ed91d8d
org.eclipse.set.basis.graph.DigraphsTest ‑ testGetPathsDigraphPP(TestGetPathsDigraphPP)[2] org.eclipse.set.basis.graph.DigraphsTest$TestGetPathsDigraphPP@a4b5ce3
org.eclipse.set.basis.graph.DigraphsTest ‑ testGetPathsDigraphPP(TestGetPathsDigraphPP)[3] org.eclipse.set.basis.graph.DigraphsTest$TestGetPathsDigraphPP@3f1ef9d6
org.eclipse.set.basis.graph.DigraphsTest ‑ testGetPathsDigraphPP(TestGetPathsDigraphPP)[4] org.eclipse.set.basis.graph.DigraphsTest$TestGetPathsDigraphPP@3fd9e827
org.eclipse.set.basis.graph.DigraphsTest ‑ testGetPathsDigraphPP(TestGetPathsDigraphPP)[5] org.eclipse.set.basis.graph.DigraphsTest$TestGetPathsDigraphPP@670b3ca
org.eclipse.set.feature.plazmodel.test.CalculateTopologicalCoordinateTest ‑ testTopologischeCoordinateCalculate(Pair)[1] Pair [first=pphn, second=/tmp/set-test8793031388455723808PPHN_1.10.0.3_01-02_Ibn-Z._-_2._AeM_2022-05-17_13-44_tg3.planpro]
org.eclipse.set.feature.siteplan.transform.SiteplanTransformatorTest ‑ testSiteplanTransformSuccessful(String)[1] /tmp/set-test11833231152052439863PPHN_1.10.0.3_01-02_Ibn-Z._-_2._AeM_2022-05-17_13-44_tg3.planpro
org.eclipse.set.feature.table.pt1.test.Pt1TableTransformationTest ‑ testTransformator(String)[1] /tmp/set-test1657159250184524959PPHN_1.10.0.3_01-02_Ibn-Z._-_2._AeM_2022-05-17_13-44_tg3.planpro
…

org.eclipse.set.basis.graph.DigraphsTest ‑ testGetPathsDigraphPP(TestGetPathsDigraphPP)[1] org.eclipse.set.basis.graph.DigraphsTest$TestGetPathsDigraphPP@1d805aa1
org.eclipse.set.basis.graph.DigraphsTest ‑ testGetPathsDigraphPP(TestGetPathsDigraphPP)[2] org.eclipse.set.basis.graph.DigraphsTest$TestGetPathsDigraphPP@7d78f3d5
org.eclipse.set.basis.graph.DigraphsTest ‑ testGetPathsDigraphPP(TestGetPathsDigraphPP)[3] org.eclipse.set.basis.graph.DigraphsTest$TestGetPathsDigraphPP@3b48e183
org.eclipse.set.basis.graph.DigraphsTest ‑ testGetPathsDigraphPP(TestGetPathsDigraphPP)[4] org.eclipse.set.basis.graph.DigraphsTest$TestGetPathsDigraphPP@30c1da48
org.eclipse.set.basis.graph.DigraphsTest ‑ testGetPathsDigraphPP(TestGetPathsDigraphPP)[5] org.eclipse.set.basis.graph.DigraphsTest$TestGetPathsDigraphPP@3f1ef9d6
org.eclipse.set.feature.plazmodel.test.CalculateTopologicalCoordinateTest ‑ testTopologischeCoordinateCalculate(Pair)[1] Pair [first=pphn, second=/tmp/set-test16342961704640270830PPHN_1.10.0.3_01-02_Ibn-Z._-_2._AeM_2022-05-17_13-44_tg3.planpro]
org.eclipse.set.feature.siteplan.transform.SiteplanTransformatorTest ‑ testSiteplanTransformSuccessful(String)[1] /tmp/set-test2963808348567510320PPHN_1.10.0.3_01-02_Ibn-Z._-_2._AeM_2022-05-17_13-44_tg3.planpro
org.eclipse.set.feature.table.pt1.test.Pt1TableTransformationTest ‑ testTransformator(String)[1] /tmp/set-test880779232359461898PPHN_1.10.0.3_01-02_Ibn-Z._-_2._AeM_2022-05-17_13-44_tg3.planpro
org.eclipse.set.feature.table.pt1.test.Pt1TableTransformationTest ‑ testTransformator(String)[2] /tmp/set-test10511006682472938240Info__2026-04-21_10-40.planpro
org.eclipse.set.nattable.utils.test.PlanProRichTextPainterTest ‑ testHyphenationSpeicalText(String, String, int)[1] a  b c
, a  b c
, 2

TruongQuangSB · 2026-11-02T09:41:38Z

/request-license-review

github-actions · 2026-11-02T09:47:59Z

License summary

⚠️ Failed to process DEPENDENCIES.
⚠️ Failed to request review of not vetted licenses.

Committers can request a license review via by commenting /request-license-review.
After all reviews have concluded, Committers can re-run the license-vetting check by commenting /license-check

Workflow run (with attached summary files):
https://github.com/eclipse-set/set/actions/runs/41422749428

TruongQuangSB · 2026-11-05T08:45:12Z

/request-license-review

github-actions · 2026-11-05T08:52:32Z

License summary

❌ Not yet vetted dependencies:

Dependency	License	Status	Ticket
npm/npmjs/-/webpack-dev-middleware/8.5.0		restricted	clearlydefined
npm/npmjs/-/webpack-dev-server/6.1.0		restricted	clearlydefined

🚀 Requested reviews:

npm/npmjs/-/webpack-dev-server/6.1.0
npm/npmjs/-/webpack-dev-middleware/8.5.0
Committers can request a license review via by commenting /request-license-review.
After all reviews have concluded, Committers can re-run the license-vetting check by commenting /license-check

Workflow run (with attached summary files):
https://github.com/eclipse-set/set/actions/runs/41996902224

TruongQuangSB · 2026-11-09T11:37:48Z

/request-license-review

github-actions · 2026-11-09T11:42:57Z

License summary

⚠️ Failed to process DEPENDENCIES.
⚠️ Failed to request review of not vetted licenses.

Committers can request a license review via by commenting /request-license-review.
After all reviews have concluded, Committers can re-run the license-vetting check by commenting /license-check

Workflow run (with attached summary files):
https://github.com/eclipse-set/set/actions/runs/42610565051

TruongQuangSB · 2026-11-09T12:33:13Z

/request-license-review

github-actions · 2026-11-09T12:38:14Z

License summary

⚠️ Failed to process DEPENDENCIES.
⚠️ Failed to request review of not vetted licenses.

Committers can request a license review via by commenting /request-license-review.
After all reviews have concluded, Committers can re-run the license-vetting check by commenting /license-check

Workflow run (with attached summary files):
https://github.com/eclipse-set/set/actions/runs/42617979404

TruongQuangSB · 2026-11-09T16:35:24Z

/request-license-review

github-actions · 2026-11-09T16:41:11Z

License summary

⚠️ Failed to process DEPENDENCIES.
⚠️ Failed to request review of not vetted licenses.

Committers can request a license review via by commenting /request-license-review.
After all reviews have concluded, Committers can re-run the license-vetting check by commenting /license-check

Workflow run (with attached summary files):
https://github.com/eclipse-set/set/actions/runs/42656318625

TruongQuangSB · 2026-11-09T16:44:00Z

/request-license-review

github-actions · 2026-11-09T16:51:20Z

License summary

✔️ All licenses already successfully vetted.

Workflow run (with attached summary files):
https://github.com/eclipse-set/set/actions/runs/42657735488

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 22, 2026

TruongQuangSB merged commit b17280c into main Nov 9, 2026
18 of 19 checks passed

TruongQuangSB deleted the dependabot/npm_and_yarn/web/textviewer/webpack-dev-server-6.1.0 branch November 9, 2026 17:02

Conversation

dependabot Bot commented on behalf of github Oct 22, 2026

v6.1.0

Minor Changes

Patch Changes

6.1.0

Minor Changes

Patch Changes

Uh oh!

github-actions Bot commented Oct 22, 2026

License summary

Uh oh!

github-actions Bot commented Oct 22, 2026

Test Results

Uh oh!

TruongQuangSB commented Nov 2, 2026

Uh oh!

github-actions Bot commented Nov 2, 2026

License summary

Uh oh!

TruongQuangSB commented Nov 5, 2026

Uh oh!

github-actions Bot commented Nov 5, 2026

License summary

🚀 Requested reviews:

Uh oh!

TruongQuangSB commented Nov 9, 2026

Uh oh!

github-actions Bot commented Nov 9, 2026

License summary

Uh oh!

TruongQuangSB commented Nov 9, 2026

Uh oh!

github-actions Bot commented Nov 9, 2026

License summary

Uh oh!

TruongQuangSB commented Nov 9, 2026

Uh oh!

github-actions Bot commented Nov 9, 2026

License summary

Uh oh!

TruongQuangSB commented Nov 9, 2026

Uh oh!

github-actions Bot commented Nov 9, 2026

License summary

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant