Bump webpack-dev-middleware and webpack-dev-server in /react (#729)

Bumps
[webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware)
to 8.5.0 and updates ancestor dependency
[webpack-dev-server](https://github.com/webpack/webpack-dev-server).
These dependencies need to be updated together.

Updates `webpack-dev-middleware` from 5.3.3 to 8.5.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-middleware/releases">webpack-dev-middleware's
releases</a>.</em></p>
<blockquote>
<h2>v8.5.0</h2>
<h3>Minor Changes</h3>
<ul>
<li><code>hot.token</code> also takes <code>{ value, required }</code>.
With <code>required: false</code> a token is minted (or
<code>value</code> used) and handed to the injected client as usual, but
the endpoint does not refuse a client without it, so a server with
policy of its own can compare it in <code>onConnect</code> alongside,
say, the origins it already allows. The instance's new
<code>hot.tokenRequired</code> says which applies. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2486">#2486</a>)</li>
</ul>
<h2>v8.4.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p>The client posts build events to the page the way
webpack-dev-server's does (<code>webpackOk</code>,
<code>webpackErrors</code>, <code>webpackClose</code> and the rest),
logs <code>Disconnected!</code> when the connection drops and clears the
build's problems from the overlay until it is back.
<code>progress</code> accepts <code>&quot;circular&quot;</code> or
<code>&quot;linear&quot;</code>. Reloads skip a page that is already
navigating away, use the nearest ancestor with a url of its own inside
an <code>about:blank</code> iframe, and in <code>apply:
&quot;reload&quot;</code> follow a sibling compilation's build too. (by
<a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2425">#2425</a>)</p>
</li>
<li>
<p><code>HotModuleReplacementPlugin</code> now goes to every compilation
the middleware serves, including server bundles that hot-reload through
<code>webpack/hot/poll</code>. <code>hot.client.transport</code> also
accepts a module exporting a client class of your own, and the new
<code>hot.ws</code> option is passed to the <code>ws</code> server
(compression, <code>verifyClient</code>, or a <code>port</code> or
<code>server</code> of its own), with <code>hot.cors</code> and
<code>hot.token</code> still checked. The connection the runtime holds
is exported as <code>webpack-dev-middleware/client/socket</code> for
tooling that listens alongside it. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2472">#2472</a>)</p>
</li>
<li>
<p>Grouped <code>etag</code>, <code>lastModified</code>,
<code>cacheControl</code> and <code>cacheImmutable</code> into
<code>cache.*</code>, and <code>mimeTypes</code> and
<code>mimeTypeDefault</code> into <code>mime.*</code>; the old names
warn and keep working until the next major release, and the grouped name
wins when both are set. Media types now resolve through
<code>mime-db</code> directly, and <code>mime.types</code> belongs to
its own middleware instead of being written into the table
<code>mime-types</code> shares with the whole process.
<code>instance.context.options</code> is a copy of the options passed,
<code>cache.control</code> included. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2455">#2455</a>)</p>
</li>
<li>
<p><code>hot.client.apply</code> (<code>&quot;hmr&quot;</code>,
<code>&quot;hmr-only&quot;</code>, <code>&quot;reload&quot;</code> or
<code>&quot;nothing&quot;</code>) says what a build does to the page, so
a project without HMR still reloads on a change; a single page can
choose its own mode with <code>?webpack-dev-middleware-apply=</code>,
and publishing <code>{ action: &quot;reload&quot; }</code> reloads every
page. <code>hot.client.connect</code> (<code>false</code>, or <code>{
retries, timeout }</code>) controls connecting and reconnecting, with
<code>retries</code> honoured on both transports. The <code>hot</code>,
<code>liveReload</code>, <code>reload</code>, <code>autoConnect</code>,
<code>reconnect</code> and <code>timeout</code> query parameters they
replace are still read until the next major release, with a deprecation
warning for this package's own three. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2458">#2458</a>)</p>
</li>
<li>
<p>Added <code>hot.client</code>, which sets the browser runtime's
options on the middleware under the same names the entry query takes, so
a configuration no longer needs a hand-written query string.
<code>url</code> accepts a url or its parts (<code>{ port: 8080
}</code>) and resolves the rest in the page,
<code>pageParamPrefix</code> renames the per-page
<code>?webpack-dev-middleware-apply=</code> parameter, and
<code>logging</code> accepts <code>{ level, name }</code> so an
embedding package can label the console with its own name. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2436">#2436</a>)</p>
</li>
<li>
<p>Added <code>hot.cors</code> to choose which origins may reach the hot
endpoint: Server-Sent Events still allow every origin until the next
major release, while the new WebSocket transport allows only local
origins and refuses others with <code>403</code> before the handshake.
Added <code>hot.token</code>, a secret the injected client carries and
the endpoint requires, for the case where a browser sends no
<code>Origin</code>; it is off by default. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2444">#2444</a>)</p>
</li>
<li>
<p><code>hot</code> now adds the client and
<code>HotModuleReplacementPlugin</code> to the compilation itself, so
enabling it is all a webpack configuration needs.
<code>hot.inject</code> says what is added: <code>&quot;all&quot;</code>
(the default), <code>&quot;plugin&quot;</code> for a page with a client
of its own, <code>&quot;client&quot;</code> for a configuration that
applies the plugin itself, or <code>&quot;none&quot;</code>. Web workers
get a client too, nothing is injected into a non-browser target, and the
HMR plugin is left out when <code>hot.client.apply</code> is
<code>reload</code> or <code>nothing</code>. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2430">#2430</a>)</p>
</li>
<li>
<p>The instance gains <code>attach(server)</code>,
<code>handleUpgrade(req, socket, head)</code>,
<code>onConnect(fn)</code> (now given the request as well as the
client), <code>publish(payload)</code> and <code>publishTo(client,
payload)</code>, so a server can own the upgrade, decide who may listen
and put payloads of its own on the stream, such as
<code>ProgressPlugin</code> ticks. The client understands <code>{
action: &quot;error&quot;, message }</code>, logging the reason a server
refused it and posting it to the page as <code>webpackError</code>. (by
<a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2431">#2431</a>)</p>
</li>
<li>
<p><code>hot.transport</code> chooses how events reach the browser:
Server-Sent Events (the default), <code>&quot;ws&quot;</code> for a
WebSocket, or a transport of your own, which only needs
<code>onConnect</code>, <code>publish</code>, <code>publishTo</code> and
<code>close</code>. The client speaks both built-in wires, also exported
as <code>webpack-dev-middleware/client/sse</code> and
<code>webpack-dev-middleware/client/ws</code>, and behaves the same on
either. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2420">#2420</a>)</p>
</li>
<li>
<p><code>overlay.id</code> names the overlay element, so a package
embedding it can keep the id its users already query. The new
<code>webpack-dev-middleware/client/problem</code> export formats one of
webpack's errors or warnings with <code>formatProblem</code>, and
<code>showProblems</code> accepts webpack's objects as well as strings.
(by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2438">#2438</a>)</p>
</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Bound the internal url and <code>Range</code> header caches, which
grew for the life of the process and were never released, even by
<code>close()</code>. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2405">#2405</a>)</p>
</li>
<li>
<p>The client exports ship type declarations and are marked as the ES
modules they are. The client logs through webpack's <code>Logger</code>
without <code>webpack/lib/logging/runtime.js</code>, so
<code>universal</code> and <code>[&quot;web&quot;,
&quot;node&quot;]</code> bundles no longer pull in a node builtin and a
page enforcing Trusted Types needs no guard. A module that re-exports
the client can hand it its options through
<code>__webpack_dev_middleware_client_query__</code>, and
<code>?autoConnect</code> is read like every other boolean. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2428">#2428</a>)</p>
</li>
<li>
<p>Deprecated <code>hot.progress</code>, which keeps working until the
next major release: a server that applies <code>ProgressPlugin</code>
itself ended up with two on one compiler. Remove it, apply the plugin
yourself and hand its ticks to <a
href="https://github.com/webpack/webpack-dev-middleware#publishpayload"><code>publish</code></a>;
the browser-side <code>hot.client.progress</code> is unaffected. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2451">#2451</a>)</p>
</li>
<li>
<p>The client keeps doing what webpack-dev-server's did: (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2472">#2472</a>)</p>
<ul>
<li>A page url with a malformed escape no longer stops every
update.</li>
<li><code>apply: &quot;reload&quot;</code> reloads a reconnected page
whose build is out of date.</li>
<li>A build's warnings are logged and posted along with its errors.</li>
<li>An entry written for that server's query (<code>hostname</code>,
<code>port</code>, <code>pathname</code>, <code>live-reload</code>,
<code>hot=only</code>) still connects, with no deprecation warning for
that server's own spelling.</li>
<li>The published client is ES5 down to the logger.</li>
<li>The overlay sits at the highest <code>z-index</code> and closes on
<code>Esc</code>.</li>
<li>The building indicator works without Shadow DOM and is announced as
a progress bar.</li>
</ul>
</li>
<li>
<p>The overlay takes focus when it opens and gives it back when it
closes, keeps an uncaught runtime error through a successful build,
passes a rejected value to <code>runtimeErrors</code> filters as
<code>error.cause</code>, and no longer shows an empty card or leaves
the building indicator up after a multi-compiler build. File references
in absolute, Windows and <code>file://</code> stack frames are now
clickable. The ANSI-to-HTML conversion is built in, dropping
<code>ansi-html-community</code> and fixing its handling of combined,
short and unbalanced sequences. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2437">#2437</a>)</p>
</li>
<li>
<p>Validate options with a precompiled schema to cut ~155ms from
startup. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2413">#2413</a>)</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-middleware/blob/main/CHANGELOG.md">webpack-dev-middleware's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.0</h2>
<h3>Minor Changes</h3>
<ul>
<li><code>hot.token</code> also takes <code>{ value, required }</code>.
With <code>required: false</code> a token is minted (or
<code>value</code> used) and handed to the injected client as usual, but
the endpoint does not refuse a client without it, so a server with
policy of its own can compare it in <code>onConnect</code> alongside,
say, the origins it already allows. The instance's new
<code>hot.tokenRequired</code> says which applies. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2486">#2486</a>)</li>
</ul>
<h2>8.4.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p>The client posts build events to the page the way
webpack-dev-server's does (<code>webpackOk</code>,
<code>webpackErrors</code>, <code>webpackClose</code> and the rest),
logs <code>Disconnected!</code> when the connection drops and clears the
build's problems from the overlay until it is back.
<code>progress</code> accepts <code>&quot;circular&quot;</code> or
<code>&quot;linear&quot;</code>. Reloads skip a page that is already
navigating away, use the nearest ancestor with a url of its own inside
an <code>about:blank</code> iframe, and in <code>apply:
&quot;reload&quot;</code> follow a sibling compilation's build too. (by
<a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2425">#2425</a>)</p>
</li>
<li>
<p><code>HotModuleReplacementPlugin</code> now goes to every compilation
the middleware serves, including server bundles that hot-reload through
<code>webpack/hot/poll</code>. <code>hot.client.transport</code> also
accepts a module exporting a client class of your own, and the new
<code>hot.ws</code> option is passed to the <code>ws</code> server
(compression, <code>verifyClient</code>, or a <code>port</code> or
<code>server</code> of its own), with <code>hot.cors</code> and
<code>hot.token</code> still checked. The connection the runtime holds
is exported as <code>webpack-dev-middleware/client/socket</code> for
tooling that listens alongside it. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2472">#2472</a>)</p>
</li>
<li>
<p>Grouped <code>etag</code>, <code>lastModified</code>,
<code>cacheControl</code> and <code>cacheImmutable</code> into
<code>cache.*</code>, and <code>mimeTypes</code> and
<code>mimeTypeDefault</code> into <code>mime.*</code>; the old names
warn and keep working until the next major release, and the grouped name
wins when both are set. Media types now resolve through
<code>mime-db</code> directly, and <code>mime.types</code> belongs to
its own middleware instead of being written into the table
<code>mime-types</code> shares with the whole process.
<code>instance.context.options</code> is a copy of the options passed,
<code>cache.control</code> included. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2455">#2455</a>)</p>
</li>
<li>
<p><code>hot.client.apply</code> (<code>&quot;hmr&quot;</code>,
<code>&quot;hmr-only&quot;</code>, <code>&quot;reload&quot;</code> or
<code>&quot;nothing&quot;</code>) says what a build does to the page, so
a project without HMR still reloads on a change; a single page can
choose its own mode with <code>?webpack-dev-middleware-apply=</code>,
and publishing <code>{ action: &quot;reload&quot; }</code> reloads every
page. <code>hot.client.connect</code> (<code>false</code>, or <code>{
retries, timeout }</code>) controls connecting and reconnecting, with
<code>retries</code> honoured on both transports. The <code>hot</code>,
<code>liveReload</code>, <code>reload</code>, <code>autoConnect</code>,
<code>reconnect</code> and <code>timeout</code> query parameters they
replace are still read until the next major release, with a deprecation
warning for this package's own three. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2458">#2458</a>)</p>
</li>
<li>
<p>Added <code>hot.client</code>, which sets the browser runtime's
options on the middleware under the same names the entry query takes, so
a configuration no longer needs a hand-written query string.
<code>url</code> accepts a url or its parts (<code>{ port: 8080
}</code>) and resolves the rest in the page,
<code>pageParamPrefix</code> renames the per-page
<code>?webpack-dev-middleware-apply=</code> parameter, and
<code>logging</code> accepts <code>{ level, name }</code> so an
embedding package can label the console with its own name. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2436">#2436</a>)</p>
</li>
<li>
<p>Added <code>hot.cors</code> to choose which origins may reach the hot
endpoint: Server-Sent Events still allow every origin until the next
major release, while the new WebSocket transport allows only local
origins and refuses others with <code>403</code> before the handshake.
Added <code>hot.token</code>, a secret the injected client carries and
the endpoint requires, for the case where a browser sends no
<code>Origin</code>; it is off by default. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2444">#2444</a>)</p>
</li>
<li>
<p><code>hot</code> now adds the client and
<code>HotModuleReplacementPlugin</code> to the compilation itself, so
enabling it is all a webpack configuration needs.
<code>hot.inject</code> says what is added: <code>&quot;all&quot;</code>
(the default), <code>&quot;plugin&quot;</code> for a page with a client
of its own, <code>&quot;client&quot;</code> for a configuration that
applies the plugin itself, or <code>&quot;none&quot;</code>. Web workers
get a client too, nothing is injected into a non-browser target, and the
HMR plugin is left out when <code>hot.client.apply</code> is
<code>reload</code> or <code>nothing</code>. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2430">#2430</a>)</p>
</li>
<li>
<p>The instance gains <code>attach(server)</code>,
<code>handleUpgrade(req, socket, head)</code>,
<code>onConnect(fn)</code> (now given the request as well as the
client), <code>publish(payload)</code> and <code>publishTo(client,
payload)</code>, so a server can own the upgrade, decide who may listen
and put payloads of its own on the stream, such as
<code>ProgressPlugin</code> ticks. The client understands <code>{
action: &quot;error&quot;, message }</code>, logging the reason a server
refused it and posting it to the page as <code>webpackError</code>. (by
<a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2431">#2431</a>)</p>
</li>
<li>
<p><code>hot.transport</code> chooses how events reach the browser:
Server-Sent Events (the default), <code>&quot;ws&quot;</code> for a
WebSocket, or a transport of your own, which only needs
<code>onConnect</code>, <code>publish</code>, <code>publishTo</code> and
<code>close</code>. The client speaks both built-in wires, also exported
as <code>webpack-dev-middleware/client/sse</code> and
<code>webpack-dev-middleware/client/ws</code>, and behaves the same on
either. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2420">#2420</a>)</p>
</li>
<li>
<p><code>overlay.id</code> names the overlay element, so a package
embedding it can keep the id its users already query. The new
<code>webpack-dev-middleware/client/problem</code> export formats one of
webpack's errors or warnings with <code>formatProblem</code>, and
<code>showProblems</code> accepts webpack's objects as well as strings.
(by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2438">#2438</a>)</p>
</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Bound the internal url and <code>Range</code> header caches, which
grew for the life of the process and were never released, even by
<code>close()</code>. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2405">#2405</a>)</p>
</li>
<li>
<p>The client exports ship type declarations and are marked as the ES
modules they are. The client logs through webpack's <code>Logger</code>
without <code>webpack/lib/logging/runtime.js</code>, so
<code>universal</code> and <code>[&quot;web&quot;,
&quot;node&quot;]</code> bundles no longer pull in a node builtin and a
page enforcing Trusted Types needs no guard. A module that re-exports
the client can hand it its options through
<code>__webpack_dev_middleware_client_query__</code>, and
<code>?autoConnect</code> is read like every other boolean. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2428">#2428</a>)</p>
</li>
<li>
<p>Deprecated <code>hot.progress</code>, which keeps working until the
next major release: a server that applies <code>ProgressPlugin</code>
itself ended up with two on one compiler. Remove it, apply the plugin
yourself and hand its ticks to <a
href="https://github.com/webpack/webpack-dev-middleware#publishpayload"><code>publish</code></a>;
the browser-side <code>hot.client.progress</code> is unaffected. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2451">#2451</a>)</p>
</li>
<li>
<p>The client keeps doing what webpack-dev-server's did: (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2472">#2472</a>)</p>
<ul>
<li>A page url with a malformed escape no longer stops every
update.</li>
<li><code>apply: &quot;reload&quot;</code> reloads a reconnected page
whose build is out of date.</li>
<li>A build's warnings are logged and posted along with its errors.</li>
<li>An entry written for that server's query (<code>hostname</code>,
<code>port</code>, <code>pathname</code>, <code>live-reload</code>,
<code>hot=only</code>) still connects, with no deprecation warning for
that server's own spelling.</li>
<li>The published client is ES5 down to the logger.</li>
<li>The overlay sits at the highest <code>z-index</code> and closes on
<code>Esc</code>.</li>
<li>The building indicator works without Shadow DOM and is announced as
a progress bar.</li>
</ul>
</li>
<li>
<p>The overlay takes focus when it opens and gives it back when it
closes, keeps an uncaught runtime error through a successful build,
passes a rejected value to <code>runtimeErrors</code> filters as
<code>error.cause</code>, and no longer shows an empty card or leaves
the building indicator up after a multi-compiler build. File references
in absolute, Windows and <code>file://</code> stack frames are now
clickable. The ANSI-to-HTML conversion is built in, dropping
<code>ansi-html-community</code> and fixing its handling of combined,
short and unbalanced sequences. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-middleware/pull/2437">#2437</a>)</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/webpack/webpack-dev-middleware/commit/0ffba0357acee08d0e316d88f31b64ff51bf7af3"><code>0ffba03</code></a>
chore(release): new release (<a
href="https://redirect.github.com/webpack/webpack-dev-middleware/issues/2487">#2487</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-middleware/commit/32f39027c9142dc6cab32c3e76420eb4b1c43635"><code>32f3902</code></a>
feat: hand the hot token over without requiring it (<a
href="https://redirect.github.com/webpack/webpack-dev-middleware/issues/2486">#2486</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-middleware/commit/d1ecd3d1b2736627d032eca5e1eb24056913f6da"><code>d1ecd3d</code></a>
chore(release): new release (<a
href="https://redirect.github.com/webpack/webpack-dev-middleware/issues/2406">#2406</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-middleware/commit/34e1a2708ca92ccfbf521796b671264913603ccc"><code>34e1a27</code></a>
chore: mark the query's <code>path</code> alias for removal in the next
major release (#...</li>
<li><a
href="https://github.com/webpack/webpack-dev-middleware/commit/f084ec96c09ad39f0591adfba0c476df7d51bbaa"><code>f084ec9</code></a>
refactor: one hot.inject enum for what is added to the compilation (<a
href="https://redirect.github.com/webpack/webpack-dev-middleware/issues/2484">#2484</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-middleware/commit/f9ad68396a95f4bdac42fd59ae4c21ca328940c7"><code>f9ad683</code></a>
chore(deps-dev): bump del-cli from 7.0.0 to 8.0.1 (<a
href="https://redirect.github.com/webpack/webpack-dev-middleware/issues/2483">#2483</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-middleware/commit/a8d9184bc97e38612811377f386364db47b96774"><code>a8d9184</code></a>
chore(deps-dev): bump the dependencies group with 8 updates (<a
href="https://redirect.github.com/webpack/webpack-dev-middleware/issues/2482">#2482</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-middleware/commit/ca773fbb4b47668c5a9bbbbd80727f5908010a69"><code>ca773fb</code></a>
refactor: settle the hot option names before release (<a
href="https://redirect.github.com/webpack/webpack-dev-middleware/issues/2476">#2476</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-middleware/commit/77de82295c09b4d94b56a330fd35ea16e32b64c7"><code>77de822</code></a>
chore(deps): bump the dependencies group with 5 updates (<a
href="https://redirect.github.com/webpack/webpack-dev-middleware/issues/2480">#2480</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-middleware/commit/8a7af5e362f56610ace8d7dd0a4d277b4952c2a7"><code>8a7af5e</code></a>
feat(hot): take over the last of webpack-dev-server's compiler and
socket wir...</li>
<li>Additional commits viewable in <a
href="https://github.com/webpack/webpack-dev-middleware/compare/v5.3.3...v8.5.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for webpack-dev-middleware since your current version.</p>
</details>
<details>
<summary>Install script changes</summary>
<p>This version modifies <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />

Updates `webpack-dev-server` from 4.13.2 to 6.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-server/releases">webpack-dev-server's
releases</a>.</em></p>
<blockquote>
<h2>v6.1.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p>Run as a plugin from the top-level <code>plugins</code> of a
multi-configuration, serving every configuration from one server. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5765">#5765</a>)</p>
</li>
<li>
<p>Fix client progress modes, socket URL credentials, overlay and
progress lifecycles, server startup error handling and local IP lookup;
export <code>BaseServer</code>. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5739">#5739</a>)</p>
</li>
<li>
<p>The browser client, the error overlay and both transports now come
from webpack-dev-middleware, so this package has no client code of its
own. Every option keeps its name and meaning, <code>allowedHosts</code>
and the origin checks still apply here, and this server's <code>{ type
}</code> messages are still sent next to the middleware's, so React
Refresh keeps working. <code>client/index.js</code>,
<code>client/socket.js</code> and
<code>client/clients/WebSocketClient.js</code> still resolve while the
client's internal files are gone, and the console wording, the overlay
and the progress indicator are now the middleware's.
<code>client.webSocketTransport: &quot;sse&quot;</code> adds Server-Sent
Events, a universal build now runs in Node without the client throwing,
and <code>sendMessage()</code>, <code>getClientEntry()</code> and
<code>getClientHotEntry()</code> still work, a subclass's overrides
included, but are deprecated. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5750">#5750</a>)</p>
</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Keep hot and live reload working after a cancelled &quot;Leave
site?&quot; dialog. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5744">#5744</a>)</p>
</li>
<li>
<p>Keep the overlay for a runtime error thrown while the page is still
loading. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5745">#5745</a>)</p>
</li>
<li>
<p>Validate the <code>Host</code> and <code>Origin</code> headers and
enforce same-origin checks on WebSocket upgrade requests handled by
proxies with <code>ws: true</code>. This prevents cross-origin pages
from connecting to proxied WebSocket services through the development
server. (by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://github.com/webpack/webpack-dev-server/commit/cb1534a097f21cf611995d70d83eb4ead69d1b64"><code>cb1534a</code></a>)</p>
</li>
<li>
<p>Validate options with a precompiled schema to cut ~115ms from
startup. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5746">#5746</a>)</p>
</li>
<li>
<p>Validate Host and HTTP/2 authority headers independently of Origin
protocol exceptions, including when <code>allowedHosts</code> is
<code>&quot;all&quot;</code>. Handle malformed open-editor URLs with a
controlled response and parse their query without relying on the Host
header. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5771">#5771</a>)</p>
</li>
</ul>
<h2>v6.0.0</h2>
<h3>Major Changes</h3>
<ul>
<li>
<p>Bump Express to v5. See the <a
href="https://expressjs.com/en/guide/migrating-5.html">Express 5
migration guide</a> for the full list of breaking changes. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Bump the <code>webpack</code> peer dependency range from
<code>^5.0.0</code> to <code>^5.101.0</code>. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Drop support for Node.js &lt; 22.15.0. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Convert the source to native ES modules. The package keeps
<code>&quot;type&quot;: &quot;module&quot;</code> and now exposes both
an ESM and a CommonJS build via the <code>exports</code> field: ESM
consumers import the native <code>lib/</code>, while CommonJS consumers
<code>require()</code> a transpiled <code>dist/</code> build, allowing
the package to be consumed from both ESM and CommonJS without relying on
<code>require(ESM)</code> for CommonJS consumers. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5674">#5674</a>)</p>
</li>
<li>
<p>Remove CLI flags. Use the <code>serve</code> command from
<code>webpack-cli</code> together with a configuration file or the
programmatic API instead. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Remove the <code>internalIP</code> and <code>internalIPSync</code>
static methods from <code>Server</code>. Resolve the local IP yourself
if you need it. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Remove the <code>bypass</code> option from proxy configuration. Use
the <code>router</code> or <code>context</code> options provided by
<code>http-proxy-middleware</code> instead. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Remove SockJS support. The <code>webSocketServer</code> option no
longer accepts <code>&quot;sockjs&quot;</code>; use the default
<code>&quot;ws&quot;</code> transport instead. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Remove the <code>spdy</code> dependency. Use the built-in
<code>node:http2</code> module via the <code>server</code> option for
HTTP/2 support. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Update <code>http-proxy-middleware</code> to v4. See the <a
href="https://github.com/chimurai/http-proxy-middleware/releases/tag/v3.0.0">http-proxy-middleware
v3 release notes</a> and <a
href="https://github.com/chimurai/http-proxy-middleware/releases/tag/v4.0.0">v4
release notes</a> for the full list of breaking changes. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Update <code>webpack-dev-middleware</code> to v8 and sync
<code>originalUrl</code> for middleware compatibility.
<code>server.middleware.getFilenameFromUrl()</code> is now asynchronous
and resolves to <code>{ filename, extra: { stats, outputFileSystem }
}</code>. See the <a
href="https://github.com/webpack/webpack-dev-middleware/releases/tag/v8.0.0">webpack-dev-middleware
v8 release notes</a> for details. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
</ul>
<h3>Minor Changes</h3>
<ul>
<li>Add plugin support. <code>webpack-dev-server</code> can now be used
as a webpack plugin, integrating with the compiler lifecycle without
explicitly passing a compiler, preventing multiple server starts on
recompilation, ensuring clean shutdown, and supporting
<code>MultiCompiler</code> setups with multiple independent plugin
servers. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md">webpack-dev-server's
changelog</a>.</em></p>
<blockquote>
<h2>6.1.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p>Run as a plugin from the top-level <code>plugins</code> of a
multi-configuration, serving every configuration from one server. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5765">#5765</a>)</p>
</li>
<li>
<p>Fix client progress modes, socket URL credentials, overlay and
progress lifecycles, server startup error handling and local IP lookup;
export <code>BaseServer</code>. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5739">#5739</a>)</p>
</li>
<li>
<p>The browser client, the error overlay and both transports now come
from webpack-dev-middleware, so this package has no client code of its
own. Every option keeps its name and meaning, <code>allowedHosts</code>
and the origin checks still apply here, and this server's <code>{ type
}</code> messages are still sent next to the middleware's, so React
Refresh keeps working. <code>client/index.js</code>,
<code>client/socket.js</code> and
<code>client/clients/WebSocketClient.js</code> still resolve while the
client's internal files are gone, and the console wording, the overlay
and the progress indicator are now the middleware's.
<code>client.webSocketTransport: &quot;sse&quot;</code> adds Server-Sent
Events, a universal build now runs in Node without the client throwing,
and <code>sendMessage()</code>, <code>getClientEntry()</code> and
<code>getClientHotEntry()</code> still work, a subclass's overrides
included, but are deprecated. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5750">#5750</a>)</p>
</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Keep hot and live reload working after a cancelled &quot;Leave
site?&quot; dialog. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5744">#5744</a>)</p>
</li>
<li>
<p>Keep the overlay for a runtime error thrown while the page is still
loading. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5745">#5745</a>)</p>
</li>
<li>
<p>Validate the <code>Host</code> and <code>Origin</code> headers and
enforce same-origin checks on WebSocket upgrade requests handled by
proxies with <code>ws: true</code>. This prevents cross-origin pages
from connecting to proxied WebSocket services through the development
server. (by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://github.com/webpack/webpack-dev-server/commit/cb1534a097f21cf611995d70d83eb4ead69d1b64"><code>cb1534a</code></a>)</p>
</li>
<li>
<p>Validate options with a precompiled schema to cut ~115ms from
startup. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5746">#5746</a>)</p>
</li>
<li>
<p>Validate Host and HTTP/2 authority headers independently of Origin
protocol exceptions, including when <code>allowedHosts</code> is
<code>&quot;all&quot;</code>. Handle malformed open-editor URLs with a
controlled response and parse their query without relying on the Host
header. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5771">#5771</a>)</p>
</li>
</ul>
<h2>6.0.0</h2>
<h3>Major Changes</h3>
<ul>
<li>
<p>Bump Express to v5. See the <a
href="https://expressjs.com/en/guide/migrating-5.html">Express 5
migration guide</a> for the full list of breaking changes. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Bump the <code>webpack</code> peer dependency range from
<code>^5.0.0</code> to <code>^5.101.0</code>. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Drop support for Node.js &lt; 22.15.0. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Convert the source to native ES modules. The package keeps
<code>&quot;type&quot;: &quot;module&quot;</code> and now exposes both
an ESM and a CommonJS build via the <code>exports</code> field: ESM
consumers <code>import</code> the native <code>lib/</code>, while
CommonJS consumers <code>require()</code> a transpiled
<code>dist/</code> build — so the package works from both ESM and
CommonJS, including environments where <code>require(ESM)</code> is not
supported. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Remove CLI flags. Use the <code>serve</code> command from
<code>webpack-cli</code> together with a configuration file or the
programmatic API instead. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Remove the <code>internalIP</code> and <code>internalIPSync</code>
static methods from <code>Server</code>. Resolve the local IP yourself
if you need it. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Remove the <code>bypass</code> option from proxy configuration. Use
the <code>router</code> or <code>context</code> options provided by
<code>http-proxy-middleware</code> instead. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Remove SockJS support. The <code>webSocketServer</code> option no
longer accepts <code>&quot;sockjs&quot;</code>; use the default
<code>&quot;ws&quot;</code> transport instead. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Remove the <code>spdy</code> dependency. Use the built-in
<code>node:http2</code> module via the <code>server</code> option for
HTTP/2 support. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Update <code>http-proxy-middleware</code> to v4. See the <a
href="https://github.com/chimurai/http-proxy-middleware/releases/tag/v3.0.0">http-proxy-middleware
v3 release notes</a> and <a
href="https://github.com/chimurai/http-proxy-middleware/releases/tag/v4.0.0">v4
release notes</a> for the full list of breaking changes. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
<li>
<p>Update <code>webpack-dev-middleware</code> to v8 and sync
<code>originalUrl</code> for middleware compatibility.
<code>server.middleware.getFilenameFromUrl()</code> is now asynchronous
and resolves to <code>{ filename, extra: { stats, outputFileSystem }
}</code>. See the <a
href="https://github.com/webpack/webpack-dev-middleware/releases/tag/v8.0.0">webpack-dev-middleware
v8 release notes</a> for details. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5674">#5674</a>)</p>
</li>
</ul>
<h3>Minor Changes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/50f2c4349b64fed708cf7cee0b65d31e40b4595b"><code>50f2c43</code></a>
chore(release): new release (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5740">#5740</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/807c441233bc4ef5f81f9a800393c36e18122cfa"><code>807c441</code></a>
fix: validate host headers and handle malformed editor URLs (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5771">#5771</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/b4eb7976e7b175f8b9ae51e44ecc50dc774f3a06"><code>b4eb797</code></a>
feat: run as a plugin from the top-level plugins of a
multi-configuration (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5">#5</a>...</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/9915359090c4b8862fcbfacdb30dd447a8aad3d5"><code>9915359</code></a>
fix: update generated websocket proxy types (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5767">#5767</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/cb1534a097f21cf611995d70d83eb4ead69d1b64"><code>cb1534a</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/be1ca904cca85fa7867a1fb672e8f3df12969460"><code>be1ca90</code></a>
chore(deps): bump the dependencies group across 1 directory with 19
updates (...</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/dc9a72c17927d74d794d666bec3a7569e0d979af"><code>dc9a72c</code></a>
feat: run on webpack-dev-middleware's client, with compatibility kept
here (#...</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/d16ad96506da065f9e7e9df12345f715344b6603"><code>d16ad96</code></a>
chore(deps): bump the dependencies group with 3 updates (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5762">#5762</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/69077c9d6a4db8fc846ad82457ea21b08d09f9ea"><code>69077c9</code></a>
chore(deps-dev): bump hono (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5756">#5756</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/6a11ab11a134cdb0ee7cf90291d4a3f99fef821c"><code>6a11ab1</code></a>
chore(deps): bump the dependencies group across 1 directory with 4
updates (#...</li>
<li>Additional commits viewable in <a
href="https://github.com/webpack/webpack-dev-server/compare/v4.13.2...v6.1.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for webpack-dev-server since your current version.</p>
</details>
<details>
<summary>Install script changes</summary>
<p>This version modifies <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]