chore(deps): update dependency webpack-dev-server to v6

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
webpack-dev-server	5.2.6 → 6.0.0

---

Release Notes

webpack/webpack-dev-server (webpack-dev-server)

v6.0.0

Compare Source

Major Changes

• Bump Express to v5. See the Express 5 migration guide for the full list of breaking changes. (by @​bjohansebas in #​5674)

• Bump the webpack peer dependency range from ^5.0.0 to ^5.101.0. (by @​bjohansebas in #​5674)

• Drop support for Node.js < 22.15.0. (by @​bjohansebas in #​5674)

• Convert the source to native ES modules. The package keeps "type": "module" and now exposes both an ESM and a CommonJS build via the exports field: ESM consumers import the native lib/, while CommonJS consumers require() a transpiled dist/ build — so the package works from both ESM and CommonJS, including environments where require(ESM) is not supported. (by @​bjohansebas in #​5674)

• Remove CLI flags. Use the serve command from webpack-cli together with a configuration file or the programmatic API instead. (by @​bjohansebas in #​5674)

• Remove the internalIP and internalIPSync static methods from Server. Resolve the local IP yourself if you need it. (by @​bjohansebas in #​5674)

• Remove the bypass option from proxy configuration. Use the router or context options provided by http-proxy-middleware instead. (by @​bjohansebas in #​5674)

• Remove SockJS support. The webSocketServer option no longer accepts "sockjs"; use the default "ws" transport instead. (by @​bjohansebas in #​5674)

• Remove the spdy dependency. Use the built-in node:http2 module via the server option for HTTP/2 support. (by @​bjohansebas in #​5674)

• Update http-proxy-middleware to v4. See the http-proxy-middleware v3 release notes and v4 release notes for the full list of breaking changes. (by @​bjohansebas in #​5674)

• Update webpack-dev-middleware to v8 and sync originalUrl for middleware compatibility. server.middleware.getFilenameFromUrl() is now asynchronous and resolves to { filename, extra: { stats, outputFileSystem } }. See the webpack-dev-middleware v8 release notes for details. (by @​bjohansebas in #​5674)

Minor Changes

• Add plugin support. webpack-dev-server can now be used as a webpack plugin, integrating with the compiler lifecycle without explicitly passing a compiler, preventing multiple server starts on recompilation, ensuring clean shutdown, and supporting MultiCompiler setups with multiple independent plugin servers. (by @​bjohansebas in #​5674)

• Enable the compression middleware for HTTP/2 connections. (by @​bjohansebas in #​5674)

• Remove the colorette dependency in favor of native ANSI styling. (by @​bjohansebas in #​5674)

• Update chokidar to v5 and extend watchFiles.options.ignored to support glob string patterns via tinyglobby. (by @​bjohansebas in #​5674)

• Use compiler.platform to determine the target environment instead of inspecting the resolved target string. Universal targets ("universal" or ["web", "node"], where compiler.platform.universal is true since webpack 5.108.0) are treated as web targets so the client runtime is injected. (by @​bjohansebas in #​5674)

• Use the WHATWG URL API instead of the deprecated url.parse. (by @​bjohansebas in #​5674)

Patch Changes

• Bump production dependencies, notably open to v11 and p-retry to v8. (by @​bjohansebas in #​5674)

• Reject cross-site requests to the internal open-editor and invalidate endpoints. They performed state-changing actions (opening a file in the editor, forcing a recompilation) on any GET request, so a page the developer visited could trigger them. They now require a same-origin request, validated via Sec-Fetch-Site with an Origin/Host fallback. (by @​bjohansebas in #​5691)

• Treat loopback aliases (127.0.0.1, ::1, localhost) as equivalent in isSameOrigin so the WebSocket client does not reject valid same-origin connections. (by @​bjohansebas in #​5674)

• Migrate the test suite from Jest to node:test and set up the jsdom environment. (by @​bjohansebas in #​5674)

• Update webpack-cli to v7.0.2. (by @​bjohansebas in #​5674)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

📊 Package size report   No changes

File	Before (Size / Gzip)	After (Size / Gzip)
Total (Includes all files)	56.3 kB / 20.6 kB	56.3 kB / -0%↓20.6 kB
Tarball size	12.3 kB	-0.04%↓12.3 kB

Unchanged files

File	Size (Size / Gzip)
esm/components/Tab.js	1.4 kB / 651 B
esm/components/TabList.js	671 B / 373 B
esm/components/TabPanel.js	972 B / 495 B
esm/components/Tabs.js	2.7 kB / 1.1 kB
esm/components/UncontrolledTabs.js	6.0 kB / 1.9 kB
esm/helpers/childrenDeepMap.js	861 B / 308 B
esm/helpers/count.js	205 B / 157 B
esm/helpers/elementTypes.js	244 B / 144 B
esm/helpers/propTypes.js	2.6 kB / 927 B
esm/index.js	200 B / 94 B
index.d.ts	2.0 kB / 542 B
lib/components/Tab.js	2.1 kB / 934 B
lib/components/TabList.js	897 B / 450 B
lib/components/TabPanel.js	1.2 kB / 573 B
lib/components/Tabs.js	3.5 kB / 1.4 kB
lib/components/UncontrolledTabs.js	6.9 kB / 2.1 kB
lib/helpers/childrenDeepMap.js	1.0 kB / 353 B
lib/helpers/count.js	325 B / 193 B
lib/helpers/elementTypes.js	369 B / 187 B
lib/helpers/propTypes.js	2.8 kB / 978 B
lib/index.js	558 B / 209 B
LICENSE	1.1 kB / 653 B
package.json	3.0 kB / 1.1 kB
README.md	12.1 kB / 3.6 kB
style/react-tabs.css	842 B / 369 B
style/react-tabs.less	879 B / 391 B
style/react-tabs.scss	879 B / 391 B

_{🤖 This report was automatically generated by pkg-size-action}