Skip to content

Releases: webpack/webpack-dev-middleware

v2.0.1

14 Dec 16:58
Compare
Choose a tag to compare

Publish to correct package.json.

v2.0.0

14 Dec 16:33
e9407b7
Compare
Choose a tag to compare

This major release introduces a comprehensive refactor of the codebase and move to leverage more ES6 as supported by Node 6+. It also introduced a number of breaking changes, as outlined below.

Node Version Support

webpack-dev-middleware version 2 and higher will only support Node 6.x and higher. Active
LTS for Node 4.x ended October 31st, 2017 and entered maintenance on that date.
Likewise, the version 1.x branch of webpack-dev-middleware will enter maintenance on
that date.

Informative Changes

  • logging is now handled by log-level and follows the same patterns as
    webpack-dev-server.

Breaking Changes

  • watchDelay option was previous deprecated and has now been removed.
  • reportTime option renamed to logTime
  • noInfo option removed in favor of setting a logLevel higher than 'info'
  • quiet option removed in favor of logLevel: 'silent'
  • reporter signature changed to reporter(middlewareOptions, reporterOptions)

v1.12.2

27 Nov 14:07
Compare
Choose a tag to compare

Bugfixes

  • serve .wasm files as application/wasm (without charset) (#230)

v1.12.1

22 Nov 17:51
Compare
Choose a tag to compare

Updates

  • update mime package to avoid security vulnerability (#231)

v1.12.0

31 Jul 13:05
Compare
Choose a tag to compare

Updates

  • Test updates for Node 8 and Sinon

Features

  • Added optional time output for logging

Bugfixes

  • Stop serving index.html if options.index is falsy
  • Use querystring.unescape to fallback to safer equivalent that does not throw on malformed URIs

v1.11.0

22 Jun 04:08
Compare
Choose a tag to compare

Updates

  • Webpack@3 Support
  • Koa@2 Support

Features

  • add mimeTypes option

Bugfixes

  • Use options.log, warn and error for messages
  • serverSideRendering example corrected
  • added support for multi-compiler configuration

v1.10.2

22 Apr 10:01
Compare
Choose a tag to compare

Security fix:

This version contains a security fix, which is also breaking change if you have an insecure configuration.
We are releasing this breaking change as patch version to protect you from attacks.
Sorry if this breaks your setup, but the fix is easy.

We removed setting Access-Control-Allow-Origin to * be default. This allowed evil websites to access your assets.
Instead we ask you to set Access-Control-Allow-Origin manually to your host if required in your setup.
Use the headers option to do so.

middleware(compiler, {
    headers: {
        "Access-Control-Allow-Origin": "your-host"
    }
})

Read more about CORS here: https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS

Bugfixes:

  • Remove Access-Control-Allow-Origin = * default

v1.10.1

18 Feb 13:56
Compare
Choose a tag to compare
  • Files with non-ascii names were not getting served (#171).

v1.10.0

01 Feb 20:19
Compare
Choose a tag to compare
  • You probably have seen the infamous message webpack: bundle is now (IN)VALID. a lot of times. This has now been changed to more clear messages, clearly indicating when compiling and when done compiling, it will tell you if it was successful or with errors (#164).

v1.9.0

15 Dec 19:59
Compare
Choose a tag to compare
  • Allow latest webpack 2.2.0-rc.0 as peer dependency (#160).
  • Fix error handling for plugins (#157).
  • Update memory-fs dependency to 0.4.1.
  • Refactoring to make it easier to support other frameworks then Express in the future (#140).