Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump gulp from 3.9.1 to 4.0.2 in /client-admin #889

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 8, 2021

Bumps gulp from 3.9.1 to 4.0.2.

Release notes

Sourced from gulp's releases.

v4.0.2

Fix

Docs

  • Add notes about esm support (4091bd3) - Closes #2278
  • Fix the Negative Globs section & examples (3c66d95) - Closes #2297
  • Remove next tag from recipes (1693a11) - Closes #2277
  • Add default task wrappers to Watching Files examples to make runnable (d916276) - Closes #2322
  • Fix syntax error in lastRun API docs (ea52a92) - Closes #2315
  • Fix typo in Explaining Globs (5d81f42) - Closes #2326

Build

  • Add node 12 to Travis & Azure (b4b5a68)

v4.0.1

Fix

Docs

  • Fix error in ES2015 usage example (a4e8d48) - Closes #2099 #2100
  • Add temporary notice for 4.0.0 vs 3.9.1 documentation (126423a) - Closes #2121
  • Improve recipe for empty glob array (45830cf) - Closes #2122
  • Reword standard to default (b065a13)
  • Fix recipe typo (86acdea) - Closes #2156
  • Add front-matter to each file (d693e49) - Closes #2109
  • Rename "Getting Started" to "Quick Start" & update it (6a0fa00)
  • Add "Creating Tasks" documentation (21b6962)
  • Add "JavaScript and Gulpfiles" documentation (31adf07)
  • Add "Working with Files" documentation (50fafc6)
  • Add "Async Completion" documentation (ad8b568)
  • Add "Explaining Globs" documentation (f8cafa0)
  • Add "Using Plugins" documentation (233c3f9)
  • Add "Watching Files" documentation (f3f2d9f)
  • Add Table of Contents to "Getting Started" directory (a43caf2)
  • Improve & fix parts of Getting Started (84b0234)
  • Create and link-to a "docs missing" page for LINK_NEEDED references (2bd75d0)
  • Redirect users to new Getting Started guides (53e9727)
  • Temporarily reference gulp@next in Quick Start (2cecf1e)
  • Fixed a capitalization typo in a heading (3d051d8) - Closes #2242
  • Use h2 headers within Quick Start documentation (921312c) - Closes #2241
  • Fix for nested directories references (4c2b9a7)
  • Add some more cleanup for Docusaurus (6a8fd8f)
  • Temporarily point LINK_NEEDED references to documentation-missing.md (df7cdcb)
  • API documentation improvements based on feedback (0a68710)

... (truncated)

Changelog

Sourced from gulp's changelog.

gulp changelog

4.0.0

Task system changes

  • replaced 3.x task system (orchestrator) with new task system (bach)
    • removed gulp.reset
    • removed 3 argument syntax for gulp.task
    • gulp.task should only be used when you will call the task with the CLI
    • added gulp.series and gulp.parallel methods for composing tasks. Everything must use these now.
    • added single argument syntax for gulp.task which allows a named function to be used as the name of the task and task function.
    • added gulp.tree method for retrieving the task tree. Pass { deep: true } for an archy compatible node list.
    • added gulp.registry for setting custom registries.

CLI changes

  • split CLI out into a module if you want to save bandwidth/disk space. you can install the gulp CLI using either npm install gulp -g or npm install gulp-cli -g, where gulp-cli is the smaller one (no module code included)
  • add --tasks-json flag to CLI to dump the whole tree out for other tools to consume
  • added --verify flag to check the dependencies in package.json against the plugin blacklist.

vinyl/vinyl-fs changes

  • added gulp.symlink which functions exactly like gulp.dest, but symlinks instead.
  • added dirMode param to gulp.dest and gulp.symlink which allows better control over the mode of the destination folder that is created.
  • globs passed to gulp.src will be evaluated in order, which means this is possible gulp.src(['*.js', '!b*.js', 'bad.js']) (exclude every JS file that starts with a b except bad.js)
  • performance for gulp.src has improved massively
    • gulp.src(['**/*', '!b.js']) will no longer eat CPU since negations happen during walking now
  • added since option to gulp.src which lets you only match files that have been modified since a certain date (for incremental builds)
  • fixed gulp.src not following symlinks
  • added overwrite option to gulp.dest which allows you to enable or disable overwriting of existing files
Commits
  • 069350a Release: 4.0.2
  • b4b5a68 Build: Add node 12 to Travis & Azure
  • 5667666 Fix: Bind src/dest/symlink to the gulp instance to support esm exports (ref s...
  • 4091bd3 Docs: Add notes about esm support (closes #2278)
  • 3c66d95 Docs: Fix the Negative Globs section & examples (closes #2297)
  • 1693a11 Docs: Remove next tag from recipes (closes #2277)
  • d916276 Docs: Add default task wrappers to Watching Files examples to make runnable (...
  • ea52a92 Docs: Fix syntax error in lastRun API docs (closes #2315)
  • 5d81f42 Docs: Fix typo in Explaining Globs (#2326)
  • ea3bba4 Release: 4.0.1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from colinmegill as a code owner March 8, 2021 07:21
@dependabot dependabot bot added dependencies Pull requests that update a dependency file 🔩 p:client-admin labels Mar 8, 2021
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/client-admin/dev/gulp-4.0.2 branch from 372064e to 7ac057c Compare April 19, 2021 22:21
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/client-admin/dev/gulp-4.0.2 branch 2 times, most recently from 6584979 to f2b3697 Compare July 19, 2021 06:47
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/client-admin/dev/gulp-4.0.2 branch 3 times, most recently from 0660c6b to bed3f8a Compare August 10, 2021 22:51
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/client-admin/dev/gulp-4.0.2 branch 2 times, most recently from 1c1ec38 to b51b98c Compare November 28, 2021 20:05
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/client-admin/dev/gulp-4.0.2 branch 2 times, most recently from 5efc9e4 to 4fc4575 Compare April 19, 2022 07:21
Bumps node from 11.15.0-alpine to 18.9.0-alpine.

---
updated-dependencies:
- dependency-name: node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps node from 11.15.0-alpine to 18.9.0-alpine.

---
updated-dependencies:
- dependency-name: node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [moment](https://github.com/moment/moment) from 2.29.1 to 2.29.4.
- [Release notes](https://github.com/moment/moment/releases)
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.29.1...2.29.4)

---
updated-dependencies:
- dependency-name: moment
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [ws](https://github.com/websockets/ws) from 7.4.2 to 7.5.7.
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.4.2...7.5.7)

---
updated-dependencies:
- dependency-name: ws
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Removes [got](https://github.com/sindresorhus/got). It's no longer used after updating ancestor dependency [nodemon](https://github.com/remy/nodemon). These dependencies need to be updated together.


Removes `got`

Updates `nodemon` from 2.0.7 to 2.0.20
- [Release notes](https://github.com/remy/nodemon/releases)
- [Commits](remy/nodemon@v2.0.7...v2.0.20)

---
updated-dependencies:
- dependency-name: got
  dependency-type: indirect
- dependency-name: nodemon
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/client-admin/dev/gulp-4.0.2 branch 2 times, most recently from da55397 to a16a76b Compare September 23, 2022 04:03
Bumps [y18n](https://github.com/yargs/y18n) from 3.2.1 to 3.2.2.
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/substack/minimist/releases)
- [Commits](https://github.com/substack/minimist/compare/1.2.5...1.2.6)

---
updated-dependencies:
- dependency-name: minimist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 2, 2022

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

1 similar comment
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 15, 2022

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 24, 2022

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

13 similar comments
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 6, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 6, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 7, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 10, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 10, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 24, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 28, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 9, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 9, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 17, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 27, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 4, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 5, 2023

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@ballPointPenguin ballPointPenguin deleted the dependabot/npm_and_yarn/client-admin/dev/gulp-4.0.2 branch November 9, 2023 06:30
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 9, 2023

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file 🔩 p:client-admin
Projects
Status: Done
1 participant