build: Webpack hot module reload & devserver setup

[peterzen]

This PR adds webpack hot module reload (HMR) config to hot reload CSS.

To use, run

npm run dev

This starts webpack DevServer on port 9000. Changes to CSS file are hot reloaded.

[buck54321]

I'm confused. This causes my browser to auto-reload every time I make a change to js or css? Is that desirable? What else does this offer over the npm run watch script?

[peterzen]

I'm confused. This causes my browser to auto-reload every time I make a change to js or css? Is that desirable? What else does this offer over the npm run watch script?

This is for hot reloading CSS, when you update the SCSS it applies the changes without reloading the page. It's a byproduct of the consolidation work, quite useful when working on dialogs etc.

[JoeGruffins]

Appears to add vulnerabilities:

$ npm audit
# npm audit report

express  <4.19.2
Severity: moderate
Express.js Open Redirect in malformed URLs - https://github.com/advisories/GHSA-rv95-896h-c2vc
fix available via `npm audit fix`
node_modules/express

follow-redirects  <=1.15.5
Severity: moderate
follow-redirects' Proxy-Authorization header kept across hosts - https://github.com/advisories/GHSA-cxjh-pqwp-8mfp
fix available via `npm audit fix`
node_modules/follow-redirects

webpack-dev-middleware  7.0.0
Severity: high
Path traversal in webpack-dev-middleware - https://github.com/advisories/GHSA-wr3j-pwj9-hqq6
fix available via `npm audit fix`
node_modules/webpack-dev-middleware

3 vulnerabilities (2 moderate, 1 high)