#315 Bump webpack-dev-server from 3.11.3 to 5.2.1 Pull request opened by dependabot[bot] Bumps webpack-dev-server from 3.11.3 to 5.2.1. Release notes Sourced from webpack-dev-server's releases.

## v5.2.1

## 5.2.1 (2025-03-26)

### Security

• cross-origin requests are not allowed unless allowed by

Access-Control-Allow-Origin

header

• requests with an IP addresses in the

Origin

header are not allowed to connect to WebSocket server unless configured by

allowedHosts

or it different from the

Host

header

The above changes may make the dev server not work if you relied on such behavior, but unfortunately they carry security risks, so they were considered as fixes.

### Bug Fixes

• prevent overlay for errors caught by React error boundaries (#5431) (8c1abc9)

• take the first network found instead of the last one, this restores the same behavior as 5.0.4 (#5411) (ffd0b86)

## v5.2.0

## 5.2.0 (2024-12-11)

### Features

• added

getClientEntry

and

getClientHotEntry

methods to get clients entries (dc642a8)

### Bug Fixes

• speed up initial client bundling (145b5d0)

## v5.1.0

## 5.1.0 (2024-09-03)

### Features

• add visual progress indicators (a8f40b7)

• added the

app

option to be

Function

(by default only with

connect

compatibility frameworks) (3096148)

• allow the

server

option to be

Function

(#5275) (02a1c6d)

• http2 support for

connect

and

connect

compatibility frameworks which support HTTP2 (#5267) (6509a3f)

### Bug Fixes

• check the

platform

property to determinate the target (#5269) (c3b532c)

• ipv6 output (#5270) (06005e7)

• replace

rimraf

with

rm

(#5162) (1a1561f)

• replace default gateway (#5255) (f5f0902)

• support

devServer: false

(#5272) (8b341cb)

## v5.0.4

### 5.0.4 (2024-03-19)

... (truncated) Changelog Sourced from webpack-dev-server's changelog.

## 5.2.1 (2025-03-26)

### Security

• cross-origin requests are not allowed unless allowed by

Access-Control-Allow-Origin

header

• requests with an IP addresses in the

Origin

header are not allowed to connect to WebSocket server unless configured by

allowedHosts

or it different from the

Host

header

The above changes may make the dev server not work if you relied on such behavior, but unfortunately they carry security risks, so they were considered as fixes.

### Bug Fixes

• prevent overlay for errors caught by React error boundaries (#5431) (8c1abc9)

• take the first network found instead of the last one, this restores the same behavior as 5.0.4 (#5411) (ffd0b86)

## 5.2.0 (2024-12-11)

### Features

• added

getClientEntry

and

getClientHotEntry

methods to get clients entries (dc642a8)

### Bug Fixes

• speed up initial client bundling (145b5d0)

## 5.1.0 (2024-09-03)

### Features

• add visual progress indicators (a8f40b7)

• added the

app

option to be

Function

(by default only with

connect

compatibility frameworks) (3096148)

• allow the

server

option to be

Function

(#5275) (02a1c6d)

• http2 support for

connect

and

connect

compatibility frameworks which support HTTP2 (#5267) (6509a3f)

### Bug Fixes

• check the

platform

property to determinate the target (#5269) (c3b532c)

• ipv6 output (#5270) (06005e7)

• replace

rimraf

with

rm

(#5162) (1a1561f)

• replace default gateway (#5255) (f5f0902)

• support

devServer: false

(<https://redirect.github.com/webpack/webpack-dev-server/issues/52…

osquery/osquery-site