Merge branch 'master' into whatwg-url-dependency-bump

Author: valadzhov

.changeset/grumpy-jokes-smile.md

@@ -21,7 +21,7 @@
   },
   "dependencies": {
     "@web/dev-server-legacy": "^2.1.0",
-    "@web/test-runner-core": "^0.13.1"
+    "@web/test-runner-core": "^0.13.3"
   },
   "devDependencies": {
     "@esm-bundle/chai": "^4.1.5"

.changeset/plenty-llamas-cross.md

@@ -1,5 +1,11 @@
 # @web/dev-server
 
+## 0.4.6
+
+### Patch Changes
+
+- 39ff6ffb: replace ip dependency due to security bug CVE-2024-29415
+
 ## 0.4.5
 
 ### Patch Changes

integration/test-runner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@web/dev-server",
-  "version": "0.4.5",
+  "version": "0.4.6",
   "publishConfig": {
     "access": "public"
   },
@@ -65,7 +65,7 @@
     "command-line-usage": "^7.0.1",
     "debounce": "^1.2.0",
     "deepmerge": "^4.2.2",
-    "ip": "^2.0.1",
+    "internal-ip": "^6.2.0",
     "nanocolors": "^0.2.1",
     "open": "^8.0.2",
     "portfinder": "^1.0.32"