Skip to content

Conversation

starfy84
Copy link
Contributor

@starfy84 starfy84 commented Sep 29, 2025

TICKET: DX-1961

This PR resolves GHSA-9jgg-88mc-972h by doing the following:

  • Bumps @cypress/webpack-dev-server to ^4.0.0
    • This is the main change, as this package uses webpack-dev-server

The following are subsequent changes I made in order to support the main package being bumped:

  • webpack-cli to ^5.0.0
  • clean-webpack-plugin to ^4.0.0
  • cypress to 14.0.0
  • react to ^18.0.0
  • react-dom to ^18.0.0

Testing

cd modules/web-demo && yarn dev still works
cd modules/web-demo && cypress run --component passes tests

@starfy84 starfy84 self-assigned this Sep 29, 2025
@starfy84 starfy84 force-pushed the DX-1961-resolve-webpack-dev-server branch from 16b22fa to 0543026 Compare September 29, 2025 16:03
@starfy84 starfy84 changed the title resolve webpack-dev-server to v5.2.1 fix: resolve webpack-dev-server to v5.2.1 Sep 29, 2025
@starfy84 starfy84 force-pushed the DX-1961-resolve-webpack-dev-server branch from 0543026 to 8003921 Compare September 29, 2025 16:44
@starfy84 starfy84 force-pushed the DX-1961-resolve-webpack-dev-server branch from 8003921 to 11c7987 Compare September 29, 2025 18:30
@starfy84 starfy84 marked this pull request as ready for review September 29, 2025 18:53
@starfy84 starfy84 requested review from a team as code owners September 29, 2025 18:53
@therealdwright therealdwright merged commit 6196331 into master Sep 29, 2025
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants