chore(deps-dev): bump sockjs-client from 1.5.1 to 1.5.2

[dependabot]

Bumps sockjs-client from 1.5.1 to 1.5.2.

Release notes

Sourced from sockjs-client's releases.

1.5.2

• Update url-parse due to CVE-2021-3664.

Changelog

Sourced from sockjs-client's changelog.

1.5.2

• Update url-parse due to CVE-2021-3664.

Commits

• 71876b3 1.5.2
• a1cfabf Update url-parse
• ff8b525 Update README.md
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

Merging #3739 (d6fa573) into master (13cd267) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master    #3739   +/-   ##
=======================================
  Coverage   92.87%   92.87%           
=======================================
  Files          14       14           
  Lines        1320     1320           
  Branches      466      466           
=======================================
  Hits         1226     1226           
  Misses         87       87           
  Partials        7        7           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 13cd267...d6fa573. Read the comment docs.

[iorrah]

This addresses the vulnerability issue detected on [email protected].

Reference:
https://snyk.io/test/npm/url-parse/1.5.1
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-3664
https://huntr.dev/bounties/1625557993985-unshiftio/url-parse

[iorrah]

@alexander-akait This PR only changed the package-lock.json file, but not package.json. Why is that?

[alexander-akait]

Because we use ^ and bundle code

[iorrah]

@alexander-akait Thank you for the response. When the next release of webpack-dev-server going to happen?

[alexander-akait]

I think we will do release today

[keithchong]

Hi all, what version of webpack-dev-server has this fix? Is it 4.1.0 or later?

I checked the following, but I don't see any reference to this PR:

https://github.com/webpack/webpack-dev-server/releases/tag/v4.1.0