dependabot[bot] opened a new pull request, #26610: URL: https://github.com/apache/datafusion/pull/26610
Bumps the all-npm-deps group in /datafusion/wasmtest/datafusion-wasm-app with 1 update: [webpack-dev-server](https://github.com/webpack/webpack-dev-server). Updates `webpack-dev-server` from 6.0.0 to 6.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/releases";>webpack-dev-server's releases</a>.</em></p> <blockquote> <h2>v6.1.0</h2> <h3>Minor Changes</h3> <ul> <li> <p>Run as a plugin from the top-level <code>plugins</code> of a multi-configuration, serving every configuration from one server. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5765";>#5765</a>)</p> </li> <li> <p>Fix client progress modes, socket URL credentials, overlay and progress lifecycles, server startup error handling and local IP lookup; export <code>BaseServer</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5739";>#5739</a>)</p> </li> <li> <p>The browser client, the error overlay and both transports now come from webpack-dev-middleware, so this package has no client code of its own. Every option keeps its name and meaning, <code>allowedHosts</code> and the origin checks still apply here, and this server's <code>{ type }</code> messages are still sent next to the middleware's, so React Refresh keeps working. <code>client/index.js</code>, <code>client/socket.js</code> and <code>client/clients/WebSocketClient.js</code> still resolve while the client's internal files are gone, and the console wording, the overlay and the progress indicator are now the middleware's. <code>client.webSocketTransport: "sse"</code> adds Server-Sent Events, a universal build now runs in Node without the client throwing, and <code>sendMessage()</code>, <code>getClientEntry()</code> and <code>getClientHotEntry()</code> still work, a subclass's overrides included, but are deprecated. (by <a href="https://github.com/alexander-akait";><co de>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5750";>#5750</a>)</p> </li> </ul> <h3>Patch Changes</h3> <ul> <li> <p>Keep hot and live reload working after a cancelled "Leave site?" dialog. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5744";>#5744</a>)</p> </li> <li> <p>Keep the overlay for a runtime error thrown while the page is still loading. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5745";>#5745</a>)</p> </li> <li> <p>Validate the <code>Host</code> and <code>Origin</code> headers and enforce same-origin checks on WebSocket upgrade requests handled by proxies with <code>ws: true</code>. This prevents cross-origin pages from connecting to proxied WebSocket services through the development server. (by <a href="https://github.com/UlisesGascon";><code>@UlisesGascon</code></a> in <a href="https://github.com/webpack/webpack-dev-server/commit/cb1534a097f21cf611995d70d83eb4ead69d1b64";><code>cb1534a</code></a>)</p> </li> <li> <p>Validate options with a precompiled schema to cut ~115ms from startup. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5746";>#5746</a>)</p> </li> <li> <p>Validate Host and HTTP/2 authority headers independently of Origin protocol exceptions, including when <code>allowedHosts</code> is <code>"all"</code>. Handle malformed open-editor URLs with a controlled response and parse their query without relying on the Host header. (by <a href="https://github.com/bjohansebas";><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5771";>#5771</a>)</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md";>webpack-dev-server's changelog</a>.</em></p> <blockquote> <h2>6.1.0</h2> <h3>Minor Changes</h3> <ul> <li> <p>Run as a plugin from the top-level <code>plugins</code> of a multi-configuration, serving every configuration from one server. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5765";>#5765</a>)</p> </li> <li> <p>Fix client progress modes, socket URL credentials, overlay and progress lifecycles, server startup error handling and local IP lookup; export <code>BaseServer</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5739";>#5739</a>)</p> </li> <li> <p>The browser client, the error overlay and both transports now come from webpack-dev-middleware, so this package has no client code of its own. Every option keeps its name and meaning, <code>allowedHosts</code> and the origin checks still apply here, and this server's <code>{ type }</code> messages are still sent next to the middleware's, so React Refresh keeps working. <code>client/index.js</code>, <code>client/socket.js</code> and <code>client/clients/WebSocketClient.js</code> still resolve while the client's internal files are gone, and the console wording, the overlay and the progress indicator are now the middleware's. <code>client.webSocketTransport: "sse"</code> adds Server-Sent Events, a universal build now runs in Node without the client throwing, and <code>sendMessage()</code>, <code>getClientEntry()</code> and <code>getClientHotEntry()</code> still work, a subclass's overrides included, but are deprecated. (by <a href="https://github.com/alexander-akait";><co de>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5750";>#5750</a>)</p> </li> </ul> <h3>Patch Changes</h3> <ul> <li> <p>Keep hot and live reload working after a cancelled "Leave site?" dialog. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5744";>#5744</a>)</p> </li> <li> <p>Keep the overlay for a runtime error thrown while the page is still loading. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5745";>#5745</a>)</p> </li> <li> <p>Validate the <code>Host</code> and <code>Origin</code> headers and enforce same-origin checks on WebSocket upgrade requests handled by proxies with <code>ws: true</code>. This prevents cross-origin pages from connecting to proxied WebSocket services through the development server. (by <a href="https://github.com/UlisesGascon";><code>@UlisesGascon</code></a> in <a href="https://github.com/webpack/webpack-dev-server/commit/cb1534a097f21cf611995d70d83eb4ead69d1b64";><code>cb1534a</code></a>)</p> </li> <li> <p>Validate options with a precompiled schema to cut ~115ms from startup. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5746";>#5746</a>)</p> </li> <li> <p>Validate Host and HTTP/2 authority headers independently of Origin protocol exceptions, including when <code>allowedHosts</code> is <code>"all"</code>. Handle malformed open-editor URLs with a controlled response and parse their query without relying on the Host header. (by <a href="https://github.com/bjohansebas";><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5771";>#5771</a>)</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/webpack-dev-server/commit/50f2c4349b64fed708cf7cee0b65d31e40b4595b";><code>50f2c43</code></a> chore(release): new release (<a href="https://redirect.github.com/webpack/webpack-dev-server/issues/5740";>#5740</a>)</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/807c441233bc4ef5f81f9a800393c36e18122cfa";><code>807c441</code></a> fix: validate host headers and handle malformed editor URLs (<a href="https://redirect.github.com/webpack/webpack-dev-server/issues/5771";>#5771</a>)</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/b4eb7976e7b175f8b9ae51e44ecc50dc774f3a06";><code>b4eb797</code></a> feat: run as a plugin from the top-level plugins of a multi-configuration (<a href="https://redirect.github.com/webpack/webpack-dev-server/issues/5";>#5</a>...</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/9915359090c4b8862fcbfacdb30dd447a8aad3d5";><code>9915359</code></a> fix: update generated websocket proxy types (<a href="https://redirect.github.com/webpack/webpack-dev-server/issues/5767";>#5767</a>)</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/cb1534a097f21cf611995d70d83eb4ead69d1b64";><code>cb1534a</code></a> Merge commit from fork</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/be1ca904cca85fa7867a1fb672e8f3df12969460";><code>be1ca90</code></a> chore(deps): bump the dependencies group across 1 directory with 19 updates (...</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/dc9a72c17927d74d794d666bec3a7569e0d979af";><code>dc9a72c</code></a> feat: run on webpack-dev-middleware's client, with compatibility kept here (#...</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/d16ad96506da065f9e7e9df12345f715344b6603";><code>d16ad96</code></a> chore(deps): bump the dependencies group with 3 updates (<a href="https://redirect.github.com/webpack/webpack-dev-server/issues/5762";>#5762</a>)</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/69077c9d6a4db8fc846ad82457ea21b08d09f9ea";><code>69077c9</code></a> chore(deps-dev): bump hono (<a href="https://redirect.github.com/webpack/webpack-dev-server/issues/5756";>#5756</a>)</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/6a11ab11a134cdb0ee7cf90291d4a3f99fef821c";><code>6a11ab1</code></a> chore(deps): bump the dependencies group across 1 directory with 4 updates (#...</li> <li>Additional commits viewable in <a href="https://github.com/webpack/webpack-dev-server/compare/v6.0.0...v6.1.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
