Merge pull request #2643 from tlouisse/fix/ip-vulnerability

fix: remove vulnerability by updating `ip` package

Author: thepassle

.changeset/grumpy-foxes-laugh.md

@@ -0,0 +1,12 @@
+---
+'@web/test-runner-browserstack': patch
+'@web/test-runner-saucelabs': patch
+'@web/test-runner-core': patch
+'@web/dev-server': patch
+---
+
+Vulnerability fix in `ip` package.
+For more info, see:
+
+- https://github.com/advisories/GHSA-78xj-cgh5-2h22
+- https://github.com/indutny/node-ip/issues/136#issuecomment-1952083593

package-lock.json

@@ -65,7 +65,7 @@
     "command-line-usage": "^7.0.1",
     "debounce": "^1.2.0",
     "deepmerge": "^4.2.2",
-    "ip": "^1.1.5",
+    "ip": "^2.0.1",
     "nanocolors": "^0.2.1",
     "open": "^8.0.2",
     "portfinder": "^1.0.32"

packages/dev-server/package.json

@@ -48,7 +48,7 @@
   "dependencies": {
     "@web/test-runner-webdriver": "^0.8.0",
     "browserstack-local": "^1.4.8",
-    "ip": "^1.1.5",
+    "ip": "^2.0.1",
     "nanoid": "^3.1.25"
   },
   "devDependencies": {

packages/test-runner-browserstack/package.json

@@ -68,7 +68,7 @@
     "debounce": "^1.2.0",
     "dependency-graph": "^0.11.0",
     "globby": "^11.0.1",
-    "ip": "^1.1.5",
+    "ip": "^2.0.1",
     "istanbul-lib-coverage": "^3.0.0",
     "istanbul-lib-report": "^3.0.1",
     "istanbul-reports": "^3.0.2",

packages/test-runner-core/package.json

@@ -47,7 +47,7 @@
   ],
   "dependencies": {
     "@web/test-runner-webdriver": "^0.8.0",
-    "ip": "^1.1.5",
+    "ip": "^2.0.1",
     "nanoid": "^3.1.25",
     "saucelabs": "^7.2.0",
     "webdriver": "^8.8.6",