Skip to content

deps: remove request, request-progress, gulp-angular-templatecache (#339, safe subset) - #345

Merged
anchapin merged 1 commit into
deps/integrationfrom
deps/339-deprecated-npm
Oct 14, 2026
Merged

anchapin merged 1 commit into
deps/integrationfrom
deps/339-deprecated-npm

Conversation

@anchapin

@anchapin anchapin commented Oct 14, 2026 •

Copy link
Copy Markdown
Collaborator

Refs #339 (partial; does not close it — gulp 5 / eslint / ng-annotate / sourcemaps paths remain).

Changes

  • tasks/build.js: downloadDeps uses built-in fetch + stream pipeline (progress when content-length known, non-2xx -> error, 5s idle/connect timeout via AbortController, partial file removed on failure). Now returns a Promise. CRLF preserved.
  • tasks/templateCache.js: small local gulp plugin replacing gulp-angular-templatecache. Verified byte-identical output (250551 bytes) vs the old plugin on app/app/**/*.html with module PAT, root app.
  • Removed request, request-progress, gulp-angular-templatecache, and now-unused vinyl-source-stream; added explicit jsesc (~2.5.2, same version as before) and vinyl (~2.2.1, already in tree).
  • Root audit (lockfile): 97 -> 90 (13 -> 9 critical). app/ untouched (22).

Tested locally (Apple Silicon, Node 18 via npx): npm ci; npm run test:build OK; gulp installDeps real download+extract OK for ruby; bad endpoint -> HTTP 403 error surfaced. Note: root postinstall (npm install in app/) rewrites app/package-lock.json (pre-existing; I reverted that).
Not verified: Windows/Intel mac download, Playwright UI tests (#290).

Test plan: CI Build_PAT (all OSes) incl. npm ci + build; manual npx gulp installDeps.
Rollback: revert commit.

Duck review (addressed/noted): worth doing (removes deprecated request tree). Known behavior change: Node fetch does not honor HTTP(S)_PROXY env like request did — proxy-based installDeps unsupported (documented limitation; follow up if needed). templateCache emits no file for empty input (old plugin emitted an empty wrapper); n/a since partials always exist. Lockfile has some npm-version dedupe churn beyond the removals. No fixture/timeout tests added (manual only); follow-up candidate.

@anchapin
anchapin changed the base branch from develop to deps/integration October 14, 2026 04:01
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@anchapin
anchapin force-pushed the deps/339-deprecated-npm branch from 4629926 to e2c0f6a Compare October 14, 2026 21:02
@anchapin
anchapin merged commit 4258651 into deps/integration Oct 14, 2026
@anchapin
anchapin deleted the deps/339-deprecated-npm branch October 14, 2026 21:02
anchapin pushed a commit that referenced this pull request Oct 14, 2026
…json

- Pass { encoding: false } to gulp.src in fonts(), other(), and nodeModules() so Gulp 5 does not transcode PNGs, fonts, and icons as UTF-8
- Sync root package-lock.json after combining #345, #301, and #296

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant