[lizardruss]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• ui/package.json
• ui/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Improper Encoding or Escaping of Output SNYK-JS-OPEN-22112123	818

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[lizardruss]

This is a major version upgrade from webpack-dev-server v4 to v5, which introduces significant breaking changes requiring configuration and environment updates. The target version 6.0.0 has not been released; this analysis covers the upgrade to the v5.x line.

Key Breaking Changes (v4 → v5):

• Environment Requirements:

  • Node.js: The minimum required Node.js version is now 18.12.0.
  • webpack: The minimum required webpack version is 5.0.0.

• Configuration (webpack.config.js):

  • Server Options: The https and http2 options have been removed. You must migrate your HTTPS configuration to the new server object.
  • Proxy Configuration: The proxy option syntax has changed from an object to an array of objects. This will require refactoring any existing proxy setup.
  • Node.js API: For users of the Node.js API, the constructor arguments have been swapped from new Server(compiler, options) to new Server(options, compiler).
  • Removed Options: The magicHtml option has been removed entirely.

Source: Official v4 to v5 Migration Guide

Recommendation: Developers must carefully review the official migration guide and update their webpack.config.js and Node.js environment. The changes to server and proxy configuration are mandatory and will break existing setups.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[netlify]

✅ Deploy Preview for devspace-docs canceled.

Name	Link
🔨 Latest commit	39b05ee
🔍 Latest deploy log	https://app.netlify.com/projects/devspace-docs/deploys/6aed9ff7479b698e8696020c