Bump webpack-dev-server from 5.2.5 to 5.2.6

[dependabot]

Bumps webpack-dev-server from 5.2.5 to 5.2.6.

Release notes

Sourced from webpack-dev-server's releases.

v5.2.6

Patch Changes

• fix: allow undefined as the Server constructor options argument again (by @​bjohansebas in #5695)

  Restores accepting undefined (defaulting it to {}) for the options argument, so passing a webpack config's optional devServer field type-checks and works as before.

• Protect the built-in state-changing routes (/webpack-dev-server/invalidate and /webpack-dev-server/open-editor) against cross-site request forgery. Requests are now checked with Sec-Fetch-Site (falling back to an Origin/Host comparison when it is absent), so a cross-site page can no longer trigger a rebuild or open a file in the editor. Same-origin requests, user-initiated navigations, and non-browser clients (e.g. curl) are unaffected. (by @​bjohansebas in #5698)

• Handle malformed Host and Origin header values gracefully when validating requests. (by @​bjohansebas in #5699)

Changelog

Sourced from webpack-dev-server's changelog.

5.2.6

Patch Changes

• fix: allow undefined as the Server constructor options argument again (by @​bjohansebas in #5695)

  Restores accepting undefined (defaulting it to {}) for the options argument, so passing a webpack config's optional devServer field type-checks and works as before.

• Protect the built-in state-changing routes (/webpack-dev-server/invalidate and /webpack-dev-server/open-editor) against cross-site request forgery. Requests are now checked with Sec-Fetch-Site (falling back to an Origin/Host comparison when it is absent), so a cross-site page can no longer trigger a rebuild or open a file in the editor. Same-origin requests, user-initiated navigations, and non-browser clients (e.g. curl) are unaffected. (by @​bjohansebas in #5698)

• Handle malformed Host and Origin header values gracefully when validating requests. (by @​bjohansebas in #5699)

Commits

• 8a37b0e chore(release): new release (#5697)
• f21ed0f fix: handle malformed Host and Origin headers (#5699)
• 80cd9ee fix: reject cross-site requests to open-editor and invalidate endpoints (#5698)
• 308e853 fix: handle undefined options in Server constructor (#5695)
• 8b2b915 chore: update branch references from v4 to v5 in workflow configuration
• 870ed22 chore: add v5 branch to release workflow triggers
• See full diff in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[github-actions]

Playwright tests ❌ failed

Passed	Failed	Flaky	Duration
420	2	42	1876s

📁 Report: 31619348329-1/report.zip
Open container (Azure sign-in required) → click into 31619348329-1 folder → click report.zip → Download → unzip → open index.html · Workflow run

⚠️ 7 shard(s) failed before tests ran (infra/auth issue). Stats below reflect only shards that executed.

[github-actions]

Playwright tests ❌ failed

Passed	Failed	Flaky	Duration
562	28	63	1800s

📁 Report: 31710396444-1/report.zip
Open container (Azure sign-in required) → click into 31710396444-1 folder → click report.zip → Download → unzip → open index.html · Workflow run

⚠️ 2 shard(s) failed before tests ran (infra/auth issue). Stats below reflect only shards that executed.

[github-actions]

Playwright tests ❌ failed

Passed	Failed	Flaky	Duration
524	43	80	2085s

📁 Report: 31723536673-1/report.zip
Open container (Azure sign-in required) → click into 31723536673-1 folder → click report.zip → Download → unzip → open index.html · Workflow run

⚠️ 4 shard(s) failed before tests ran (infra/auth issue). Stats below reflect only shards that executed.

[github-actions]

Playwright tests ❌ failed

Passed	Failed	Flaky	Duration
472	79	101	3776s

📁 Report: 31738630952-1/report.zip
Open container (Azure sign-in required) → click into 31738630952-1 folder → click report.zip → Download → unzip → open index.html · Workflow run

⚠️ 10 shard(s) failed before tests ran (infra/auth issue). Stats below reflect only shards that executed.

[github-actions]

Playwright tests ❌ failed

Passed	Failed	Flaky	Duration
585	20	54	1582s

📁 Report: 31822935412-1/report.zip
Open container (Azure sign-in required) → click into 31822935412-1 folder → click report.zip → Download → unzip → open index.html · Workflow run

⚠️ 5 shard(s) failed before tests ran (infra/auth issue). Stats below reflect only shards that executed.

[github-actions]

Playwright tests ❌ failed

Passed	Failed	Flaky	Duration
574	21	64	1734s

📁 Report: 32082103715-1/report.zip
Open container (Azure sign-in required) → click into 32082103715-1 folder → click report.zip → Download → unzip → open index.html · Workflow run

⚠️ 5 shard(s) failed before tests ran (infra/auth issue). Stats below reflect only shards that executed.

[github-actions]

Playwright tests ❌ failed

Passed	Failed	Flaky	Duration
620	6	37	1880s

📁 Report: 32152503230-1/report.zip
Open container (Azure sign-in required) → click into 32152503230-1 folder → click report.zip → Download → unzip → open index.html · Workflow run

⚠️ 3 shard(s) failed before tests ran (infra/auth issue). Stats below reflect only shards that executed.

[github-actions]

Playwright tests ✅ passed

Passed	Failed	Flaky	Duration
631	0	32	7991s

📁 Report: 32257687038-1/report.zip
Open container (Azure sign-in required) → click into 32257687038-1 folder → click report.zip → Download → unzip → open index.html · Workflow run

[github-actions]

Playwright tests ✅ passed

Passed	Failed	Flaky	Duration
645	0	18	1559s

📁 Report: 32313258165-1/report.zip
Open container (Azure sign-in required) → click into 32313258165-1 folder → click report.zip → Download → unzip → open index.html · Workflow run