replaced 3.x task system (orchestrator) with new task system (bach)
removed gulp.reset
removed 3 argument syntax for gulp.task
gulp.task should only be used when you will call the task with the CLI
added gulp.series and gulp.parallel methods for composing tasks. Everything must use these now.
added single argument syntax for gulp.task which allows a named function to be used as the name of the task and task function.
added gulp.tree method for retrieving the task tree. Pass { deep: true } for an archy compatible node list.
added gulp.registry for setting custom registries.
CLI changes
split CLI out into a module if you want to save bandwidth/disk space. you can install the gulp CLI using either npm install gulp -g or npm install gulp-cli -g, where gulp-cli is the smaller one (no module code included)
add --tasks-json flag to CLI to dump the whole tree out for other tools to consume
added --verify flag to check the dependencies in package.json against the plugin blacklist.
vinyl/vinyl-fs changes
added gulp.symlink which functions exactly like gulp.dest, but symlinks instead.
added dirMode param to gulp.dest and gulp.symlink which allows better control over the mode of the destination folder that is created.
globs passed to gulp.src will be evaluated in order, which means this is possible gulp.src(['*.js', '!b*.js', 'bad.js']) (exclude every JS file that starts with a b except bad.js)
performance for gulp.src has improved massively
gulp.src(['**/*', '!b.js']) will no longer eat CPU since negations happen during walking now
added since option to gulp.src which lets you only match files that have been modified since a certain date (for incremental builds)
fixed gulp.src not following symlinks
added overwrite option to gulp.dest which allows you to enable or disable overwriting of existing files
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/InsanityRadio/Nerve/network/alerts).
Bumps minimatch to 3.1.2 and updates ancestor dependencies minimatch, gulp and protractor. These dependencies need to be updated together.
Updates
minimatchfrom 2.0.10 to 3.1.2Commits
699c4593.1.22f2b5fffix: trim pattern25d7c0d3.1.155dda29fix: treat nocase:true as always having magic5e1fb8d3.1.0f8145c5Add 'allowWindowsEscape' option570e8b1add publishConfig for v3 publishes5b7cd333.0.620b4b56[fix] revert all breaking syntax changes2ff0388document, expose, and test 'partial:true' optionMaintainer changes
This version was pushed to npm by isaacs, a new releaser for minimatch since your current version.
Updates
gulpfrom 3.9.1 to 4.0.2Release notes
Sourced from gulp's releases.
... (truncated)
Changelog
Sourced from gulp's changelog.
Commits
069350aRelease: 4.0.2b4b5a68Build: Add node 12 to Travis & Azure5667666Fix: Bind src/dest/symlink to the gulp instance to support esm exports (ref s...4091bd3Docs: Add notes about esm support (closes #2278)3c66d95Docs: Fix the Negative Globs section & examples (closes #2297)1693a11Docs: Remove next tag from recipes (closes #2277)d916276Docs: Add default task wrappers to Watching Files examples to make runnable (...ea52a92Docs: Fix syntax error in lastRun API docs (closes #2315)5d81f42Docs: Fix typo in Explaining Globs (#2326)ea3bba4Release: 4.0.1Updates
protractorfrom 4.0.14 to 7.0.0Release notes
Sourced from protractor's releases.
Changelog
Sourced from protractor's changelog.
... (truncated)
Commits
71771derelease: 7.0.09d2e18erefactor: use console.log instead of util.putsc281157refactor: remove debugger and explore methods7cdb978build: update several dev packages that have security issues8e82835build: update webdriver-managera1fe5f2ci: update tests to run on Node 10 and 123fc9220fix: prototype Pollution vulnerability through outdated yargs packagea0ffa9brelease: 5.4.48b3ebf8fix: security prototype pollution162f9e5ci: Log sauce connect proxy to stdout, remove travis_wait, upgrade proxy to 4...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/InsanityRadio/Nerve/network/alerts).