Skip to content

deps: remove gulp and other vulnerable dependencies - #4199

Merged
fbricon merged 1 commit into
redhat-developer:mainfrom
fbricon:kill-gulp
Oct 14, 2025
Merged

deps: remove gulp and other vulnerable dependencies#4199
fbricon merged 1 commit into
redhat-developer:mainfrom
fbricon:kill-gulp

Conversation

@fbricon

@fbricon fbricon commented Oct 7, 2025

Copy link
Copy Markdown
Collaborator
  • replaced gulpfile with regular ESM scripts
  • upgraded Glob to an async compatible version
  • removed vulnerable lodash.template dependency

npm audit
found 0 vulnerabilities

I think I tested all impacted tasks/areas, but I'd really like someone to double check I didn't break anything. @snjeza you up for the task?

@fbricon
fbricon force-pushed the kill-gulp branch 4 times, most recently from a6f19a3 to bf6c375 Compare October 7, 2025 10:27
Signed-off-by: Fred Bricon <fbricon@gmail.com>

@snjeza snjeza left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks good to me.

@fbricon
fbricon merged commit 0ec72fb into redhat-developer:main Oct 14, 2025
2 checks passed
@fbricon fbricon added this to the End October 2025 milestone Oct 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants