Tim-Demo / IdentityServer4

Apache License 2.0
0 stars 0 forks source link

Update dependency gulp to v4 - autoclosed #27

Closed mend-for-github-com[bot] closed 2 years ago

mend-for-github-com[bot] commented 2 years ago

This PR contains the following updates:

Package Type Update Change
gulp (source) devDependencies major 3.8.11 -> 4.0.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
High High 9.8 CVE-2019-10747
High High 9.8 CVE-2019-10747
High High 9.8 CVE-2019-10746
High High 9.1 CVE-2019-10744
High High 7.5 CVE-2019-20149
High High 7.5 CVE-2016-10540
High High 7.5 CVE-2021-23343
High High 7.4 CVE-2020-8203
High High 7.3 CVE-2020-7788
High High 7.2 CVE-2021-23337
Medium Medium 6.5 CVE-2019-1010266
Medium Medium 6.5 CVE-2018-3721
Medium Medium 5.6 CVE-2020-7598
Medium Medium 5.6 CVE-2018-16487

Release Notes

gulpjs/gulp ### [`v4.0.0`](https://togithub.com/gulpjs/gulp/blob/master/CHANGELOG.md#​400) [Compare Source](https://togithub.com/gulpjs/gulp/compare/v3.9.1...v4.0.0) ##### Task system changes - replaced 3.x task system (orchestrator) with new task system (bach) - removed gulp.reset - removed 3 argument syntax for `gulp.task` - `gulp.task` should only be used when you will call the task with the CLI - added `gulp.series` and `gulp.parallel` methods for composing tasks. Everything must use these now. - added single argument syntax for `gulp.task` which allows a named function to be used as the name of the task and task function. - added `gulp.tree` method for retrieving the task tree. Pass `{ deep: true }` for an `archy` compatible node list. - added `gulp.registry` for setting custom registries. ##### CLI changes - split CLI out into a module if you want to save bandwidth/disk space. you can install the gulp CLI using either `npm install gulp -g` or `npm install gulp-cli -g`, where gulp-cli is the smaller one (no module code included) - add `--tasks-json` flag to CLI to dump the whole tree out for other tools to consume - added `--verify` flag to check the dependencies in package.json against the plugin blacklist. ##### vinyl/vinyl-fs changes - added `gulp.symlink` which functions exactly like `gulp.dest`, but symlinks instead. - added `dirMode` param to `gulp.dest` and `gulp.symlink` which allows better control over the mode of the destination folder that is created. - globs passed to `gulp.src` will be evaluated in order, which means this is possible `gulp.src(['*.js', '!b*.js', 'bad.js'])` (exclude every JS file that starts with a b except bad.js) - performance for gulp.src has improved massively - `gulp.src(['**/*', '!b.js'])` will no longer eat CPU since negations happen during walking now - added `since` option to `gulp.src` which lets you only match files that have been modified since a certain date (for incremental builds) - fixed `gulp.src` not following symlinks - added `overwrite` option to `gulp.dest` which allows you to enable or disable overwriting of existing files ### [`v3.9.1`](https://togithub.com/gulpjs/gulp/blob/master/CHANGELOG.md#​391) [Compare Source](https://togithub.com/gulpjs/gulp/compare/v3.9.0...v3.9.1) - update interpret to 1.0.0 (support for babel-register) - fix to include manpages in published tarball - documentation/recipe updates ### [`v3.9.0`](https://togithub.com/gulpjs/gulp/blob/master/CHANGELOG.md#​390) [Compare Source](https://togithub.com/gulpjs/gulp/compare/v3.8.11...v3.9.0) - add babel support - add transpiler fallback support - add support for some renamed transpilers: livescript, etc - add JSCS - update dependencies (liftoff, interpret) - documentation tweaks