[Snyk] Upgrade webpack-dev-server from 3.1.14 to 3.11.2

[snyk-bot]

Snyk has created this PR to upgrade webpack-dev-server from 3.1.14 to 3.11.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 23 versions ahead of your current version.
• The recommended version was released 4 months ago, on 2021-01-13.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-SOCKJS-575261	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: webpack-dev-server

• 3.11.2 - 2021-01-13
  

  3.11.2 (2021-01-13)

  Bug Fixes

  • cli arguments for serve command (a5fe337)
• 3.11.1 - 2020-12-29
  

  3.11.1 (2020-12-29)

  Bug Fixes

  • the open option works using webpack serve without value (#2948) (4837dc9)
  • vulnerable deps (#2949) (78dde50)
• 3.11.0 - 2020-05-08
  

  3.11.0 (2020-05-08)

  Features

  • add icons for directory viewer (#2441) (e953d01)
  • allow multiple contentBasePublicPath paths (#2489) (c6bdfe4)
  • emit progress-update (#2498) (4808abd), closes #1666
  • add invalidate endpoint (#2493) (89ffb86)
  • allow open option to accept an object (#2492) (adeb92e)

  Bug Fixes

  • do not swallow errors from server (#2512) (06583f2)
  • security vulnerability in yargs-parser (#2566) (41d1d0c)
  • don't crash on setupExitSignals(undefined) (#2507) (0d5c681)
  • support entry descriptor (closes #2453) (#2465) (8bbef6a)
  • update jquery (#2516) (99ccfd8)
• 3.10.3 - 2020-02-05
  

  3.10.3 (2020-02-05)

  Bug Fixes

  • forward error requests to the proxy (#2425) (e291cd4)
• 3.10.2 - 2020-01-31
  

  3.10.2 (2020-01-31)

  Bug Fixes

  • fallthrough non GET and HEAD request to routes (#2374) (ebe8eca)
  • add an optional peer dependency on webpack-cli (#2396) (aa365df)
  • add heartbeat for the websocket server (#2404) (1a7c827)
• 3.10.1 - 2019-12-19
  

  3.10.1 (2019-12-19)

  Bug Fixes

  • ie11 compatibility (1306abe)
• 3.10.0 - 2019-12-18
  

  3.10.0 (2019-12-18)

  Features

  • client: allow sock port to use location's port (sockPort: 'location') (#2341) (dc10d06)
  • server: add contentBasePublicPath option (#2150) (cee700d)

  Bug Fixes

  • client: don't override protocol for socket connection to 127.0.0.1 (#2303) (3a31917), closes #2302
  • server: respect sockPath on transportMode: 'ws' (#2310) (#2311) (e188542)
  • https on chrome linux (#2330) (dc8b475)
  • support webpack@5 (#2359) (8f89c01)
• 3.9.0 - 2019-10-22
  

  3.9.0 (2019-10-22)

  Bug Fixes

  • add hostname and port to bonjour name to prevent name collisions (#2276) (d8af2d9)
  • add extKeyUsage to self-signed cert (#2274) (a4dbc3b)

  Features

  • add multiple openPage support (#2266) (c9e9178)
• 3.8.2 - 2019-10-02
  

  3.8.2 (2019-10-02)

  Security

  • update selfsigned package
• 3.8.1 - 2019-09-16
• 3.8.0 - 2019-08-09
• 3.7.2 - 2019-06-18
• 3.7.1 - 2019-06-07
• 3.7.0 - 2019-06-06
• 3.6.0 - 2019-06-05
• 3.5.1 - 2019-06-01
• 3.5.0 - 2019-05-31
• 3.4.1 - 2019-05-17
• 3.4.0 - 2019-05-17
• 3.3.1 - 2019-04-09
• 3.3.0 - 2019-04-08
• 3.2.1 - 2019-02-25
• 3.2.0 - 2019-02-20
• 3.1.14 - 2018-12-24

from webpack-dev-server GitHub release notes

Commit messages

Package name: webpack-dev-server

• 5cb545f chore(release): 3.11.2
• a5fe337 fix: cli arguments for `serve` command
• 7e70eee chore(release): 3.11.1
• 78dde50 fix: vulnerable deps ([Docs] DatePicker, Dialog - Add title & description to examples mui/material-ui#2949)
• 4837dc9 fix: the `open` option works using `webpack serve` without value (TableHeader has a null TableHeaderColumn if you set displaySelectAll to false mui/material-ui#2948)
• 4ab1f21 chore(release): 3.11.0
• 0e51fb1 fix: invalidate route (No ripples in IconMenu on tablet (Nexus 7) mui/material-ui#2584)
• f857c40 chore: deps and tests
• 41d1d0c fix(deps): security vulnerability in yargs-parser (MenuItem right icons are not styleable if desktop=false mui/material-ui#2566)
• 375ab23 ci: add node@14 (A way to be able to turn off autoprefixer mui/material-ui#2530)
• 776e7d4 chore(deps): update dependency html-entities to ^1.3.1 (master) (Add information on gitter channel to the docs mui/material-ui#2513)
• 984536c chore: update lint-staged config (text field getValue from dynamic function error mui/material-ui#2524)
• 89ffb86 feat: add invalidate endpoint (Proposal: mui-themeable higher order component mui/material-ui#2493)
• 0e9bffb chore(deps): update all patch dependencies (Slightly improve how the props table is generated. mui/material-ui#2508)
• 99ccfd8 fix: update jquery (Fix typo in table doc page mui/material-ui#2516)
• 06583f2 fix: do not swallow errors from server ([CardHeader] Rename actAsExpander mui/material-ui#2512)
• 0d5c681 fix(server): don't crash on setupExitSignals(undefined) ([Doc] Convert LeftNav to use the new standard. mui/material-ui#2507)
• c436058 chore(deps): update all patch dependencies (master) (patch) (Fix selectable=false still selects rows mui/material-ui#2503)
• 4808abd feat(progess): emit progress-update (Fix typo for arguments. mui/material-ui#2498)
• adeb92e feat: allow open option to accept an object ([docs] fixed webpack config for production mui/material-ui#2492)
• c6bdfe4 feat(contentBasePublicPath): allow multiple paths ([Doc] Migrate Badge to the new format mui/material-ui#2489)
• f317358 chore(deps): update all patch dependencies (master) (patch) (CSS box sizing issues when using normalize.css mui/material-ui#2481)
• de763e9 chore(deps): update all minor dependencies (master) (minor) ([Divider] Initial implementation mui/material-ui#2473)
• f7b6fa1 chore(deps): update package-lock.json ([Appbar] onLeftIconButtonTouchTap event doesn't fire mui/material-ui#2482)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs