[dependabot]

Bumps webpack-dev-server from 5.2.6 to 5.2.7.

Release notes

Sourced from webpack-dev-server's releases.

v5.2.7

Patch Changes

• Validate the Host and Origin headers and enforce same-origin checks on WebSocket upgrade requests handled by proxies with ws: true. This prevents cross-origin pages from connecting to proxied WebSocket services through the development server. (by @​github-actions in #5766)

• Validate Host and HTTP/2 authority headers independently of Origin protocol exceptions, including when allowedHosts is "all". Handle malformed open-editor URLs with a controlled response and parse their query without relying on the Host header. (by @​bjohansebas in #5772)

Changelog

Sourced from webpack-dev-server's changelog.

5.2.7

Patch Changes

• Validate the Host and Origin headers and enforce same-origin checks on WebSocket upgrade requests handled by proxies with ws: true. This prevents cross-origin pages from connecting to proxied WebSocket services through the development server. (by @​github-actions in #5766)

• Validate Host and HTTP/2 authority headers independently of Origin protocol exceptions, including when allowedHosts is "all". Handle malformed open-editor URLs with a controlled response and parse their query without relying on the Host header. (by @​bjohansebas in #5772)

Commits

• 7768e56 chore(release): new release (#5766)
• d652b20 fix(v5): validate host headers and handle malformed editor URLs (#5772)
• 18273ba fix(v5): update generated websocket proxy types (#5768)
• 2e38d6f ci(v5): publish releases with version-5 tag (#5769)
• 3e9b604 Merge commit from fork
• See full diff in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: auth0/react-native-auth0
• Branch: master
• File: .coderabbit.yaml
• Commit: 00ed6b6
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 926317b3-75e6-474b-8fa3-8c35cef468d9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

CodeRabbit Verify

• Run CodeRabbit Verify to test the changes in this pull request.