[Snyk] Security upgrade webpack-dev-server from 2.7.1 to 3.1.6

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-Y18N-1021887	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: webpack-dev-server

The new version differs by 153 commits.

• 0e1f0c1 chore(release): 3.1.6
• aaabeb8 test(cli): remove outdated dependency lock test
• 4e27954 chore(package): update `yargs` v11.0.0...12.0.1 (`dependencies`)
• c4a1038 chore(package): update `devDependencies` (#1474)
• 3e764c5 chore(package): update `webpack-dev-middleware` v3.1.3...v3.2.0 (`dependencies`) (#1473)
• c854743 chore(package): update `webpack-log` v1.1.2...v2.0.0 (`dependencies`) (#1472)
• c760c44 ci(travis): add build stages (#1467)
• b445b68 chore(package): add `release` script (`scripts`) (#1461)
• 334c3a5 fix(bin): handle `process` signals correctly when the server isn't ready yet (#1432)
• e2220c4 fix(schema): allow the `output` filename to be a `{Function}` (#1409)
• 807c846 refactor: drop `array-includes`
• 5b6bb5e Merge pull request #1460 from webpack/docs/maintenance
• b838274 Merge pull request #1462 from webpack/chore/codeowners
• 1707e9e chore(.github/CODEOWNERS): add code owners
• 6c1d8d8 docs(readme): remove obsolete maintenance note
• 898d52a docs(examples/cli/https/readme): add an explanation how to generate certificates in Windows 7 (#1425)
• df30727 fix(examples/cli): correct template path in `open-page` example (#1401)
• 4bd4c19 Drop `array-includes`.
• 2a5e2f6 docs: fix CONTRIBUTING.md PR test dependency
• 83b3f28 fix CONTRIBUTING.md PR test dependency
• ba65ec1 fix github security warning because of old code coverage package (only in dev)
• e1bd264 3.1.5
• 38c084b update deps
• bb4b469 sendMsg('Progress', data) (#1427)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic