Skip to content
This repository has been archived by the owner on Dec 20, 2023. It is now read-only.

chore(deps): update dependency gulp to v4 (master) #41

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

appcues-wss[bot]
Copy link

@appcues-wss appcues-wss bot commented Feb 18, 2023

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
gulp (source) ^3.9.0 -> ^4.0.0 age adoption passing confidence

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
Critical Critical 9.1 CVE-2019-10744
Critical Critical 9.1 CVE-2019-10744
High High 7.4 CVE-2020-8203
High High 7.2 CVE-2021-23337
Medium Medium 6.5 CVE-2018-3721
Medium Medium 6.5 CVE-2019-1010266
Medium Medium 5.6 CVE-2018-16487

Release Notes

gulpjs/gulp (gulp)

v4.0.0

Compare Source

Task system changes
  • replaced 3.x task system (orchestrator) with new task system (bach)
    • removed gulp.reset
    • removed 3 argument syntax for gulp.task
    • gulp.task should only be used when you will call the task with the CLI
    • added gulp.series and gulp.parallel methods for composing tasks. Everything must use these now.
    • added single argument syntax for gulp.task which allows a named function to be used as the name of the task and task function.
    • added gulp.tree method for retrieving the task tree. Pass { deep: true } for an archy compatible node list.
    • added gulp.registry for setting custom registries.
CLI changes
  • split CLI out into a module if you want to save bandwidth/disk space. you can install the gulp CLI using either npm install gulp -g or npm install gulp-cli -g, where gulp-cli is the smaller one (no module code included)
  • add --tasks-json flag to CLI to dump the whole tree out for other tools to consume
  • added --verify flag to check the dependencies in package.json against the plugin blacklist.
vinyl/vinyl-fs changes
  • added gulp.symlink which functions exactly like gulp.dest, but symlinks instead.
  • added dirMode param to gulp.dest and gulp.symlink which allows better control over the mode of the destination folder that is created.
  • globs passed to gulp.src will be evaluated in order, which means this is possible gulp.src(['*.js', '!b*.js', 'bad.js']) (exclude every JS file that starts with a b except bad.js)
  • performance for gulp.src has improved massively
    • gulp.src(['**/*', '!b.js']) will no longer eat CPU since negations happen during walking now
  • added since option to gulp.src which lets you only match files that have been modified since a certain date (for incremental builds)
  • fixed gulp.src not following symlinks
  • added overwrite option to gulp.dest which allows you to enable or disable overwriting of existing files

v3.9.1

Compare Source

  • update interpret to 1.0.0 (support for babel-register)
  • fix to include manpages in published tarball
  • documentation/recipe updates

  • If you want to rebase/retry this PR, check this box

@appcues-wss appcues-wss bot added the security fix Security fix generated by WhiteSource label Feb 18, 2023
@appcues-wss appcues-wss bot changed the title Update dependency gulp to v4 (master) Update dependency gulp to v4 (master) - autoclosed Mar 27, 2023
@appcues-wss appcues-wss bot closed this Mar 27, 2023
@appcues-wss appcues-wss bot deleted the whitesource-remediate/master-gulp-4.x branch March 27, 2023 08:39
@appcues-wss appcues-wss bot changed the title Update dependency gulp to v4 (master) - autoclosed Update dependency gulp to v4 (master) Mar 31, 2023
@appcues-wss appcues-wss bot reopened this Mar 31, 2023
@appcues-wss appcues-wss bot restored the whitesource-remediate/master-gulp-4.x branch March 31, 2023 02:53
@appcues-wss appcues-wss bot changed the title Update dependency gulp to v4 (master) Update dependency gulp to v4 (master) - autoclosed May 8, 2023
@appcues-wss appcues-wss bot closed this May 8, 2023
@appcues-wss appcues-wss bot deleted the whitesource-remediate/master-gulp-4.x branch May 8, 2023 11:49
@appcues-wss appcues-wss bot changed the title Update dependency gulp to v4 (master) - autoclosed Update dependency gulp to v4 (master) May 8, 2023
@appcues-wss appcues-wss bot reopened this May 8, 2023
@appcues-wss appcues-wss bot restored the whitesource-remediate/master-gulp-4.x branch May 8, 2023 12:04
@appcues-wss appcues-wss bot changed the title Update dependency gulp to v4 (master) Update dependency gulp to v4 (master) - autoclosed Jun 14, 2023
@appcues-wss appcues-wss bot closed this Jun 14, 2023
@appcues-wss appcues-wss bot deleted the whitesource-remediate/master-gulp-4.x branch June 14, 2023 20:59
@appcues-wss appcues-wss bot changed the title Update dependency gulp to v4 (master) - autoclosed Update dependency gulp to v4 (master) Jun 15, 2023
@appcues-wss appcues-wss bot reopened this Jun 15, 2023
@appcues-wss appcues-wss bot restored the whitesource-remediate/master-gulp-4.x branch June 15, 2023 22:18
@appcues-wss appcues-wss bot changed the title Update dependency gulp to v4 (master) Update dependency gulp to v4 (master) - autoclosed Jun 16, 2023
@appcues-wss appcues-wss bot closed this Jun 16, 2023
@appcues-wss appcues-wss bot deleted the whitesource-remediate/master-gulp-4.x branch June 16, 2023 14:30
@appcues-wss appcues-wss bot changed the title Update dependency gulp to v4 (master) - autoclosed Update dependency gulp to v4 (master) Jun 19, 2023
@appcues-wss appcues-wss bot reopened this Jun 19, 2023
@appcues-wss appcues-wss bot restored the whitesource-remediate/master-gulp-4.x branch June 19, 2023 00:47
@appcues-wss appcues-wss bot changed the title Update dependency gulp to v4 (master) Update dependency gulp to v4 (master) - autoclosed Aug 13, 2023
@appcues-wss appcues-wss bot closed this Aug 13, 2023
@appcues-wss appcues-wss bot deleted the whitesource-remediate/master-gulp-4.x branch August 13, 2023 19:52
@appcues-wss appcues-wss bot changed the title Update dependency gulp to v4 (master) - autoclosed Update dependency gulp to v4 (master) Aug 14, 2023
@appcues-wss appcues-wss bot reopened this Aug 14, 2023
@appcues-wss appcues-wss bot restored the whitesource-remediate/master-gulp-4.x branch August 14, 2023 07:45
@appcues-wss appcues-wss bot changed the title Update dependency gulp to v4 (master) chore(deps): update dependency gulp to v4 (master) Oct 30, 2023
@appcues-wss appcues-wss bot changed the title chore(deps): update dependency gulp to v4 (master) chore(deps): update dependency gulp to v4 (master) - autoclosed Dec 9, 2023
@appcues-wss appcues-wss bot closed this Dec 9, 2023
@appcues-wss appcues-wss bot deleted the whitesource-remediate/master-gulp-4.x branch December 9, 2023 13:07
@appcues-wss appcues-wss bot changed the title chore(deps): update dependency gulp to v4 (master) - autoclosed chore(deps): update dependency gulp to v4 (master) Dec 13, 2023
@appcues-wss appcues-wss bot reopened this Dec 13, 2023
@appcues-wss appcues-wss bot restored the whitesource-remediate/master-gulp-4.x branch December 13, 2023 19:10
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants