Skip to content

Updates NPM packages, removes unused ones#360

Merged
matt-bernhardt merged 1 commit intomainfrom
audit-dep-updates
Jun 23, 2022
Merged

Updates NPM packages, removes unused ones#360
matt-bernhardt merged 1 commit intomainfrom
audit-dep-updates

Conversation

@matt-bernhardt
Copy link
Copy Markdown
Member

Why are these changes being introduced:

  • It has been a while since we did maintenance on our NPM / Grunt setup.
    As a result, there are a few outdated packages, and some that we no
    longer use as part of our build step.

Relevant ticket(s):

  • n/a - maintenance week task

How does this address that need:

  • This removes a few npm packages that were used in the past for theme
    builds, but are no longer relevant:
    • connect
    • imagemin
    • jshint
    • watch
  • This also runs npm update to get our deeper dependencies as close to
    current as we can make them.
  • Bumps theme version to 1.13.1

There are a few steps we could take to go further down this path, but
are not part of this PR yet:

  • The PHPCS package can probably be removed soon, but that should
    probably be part of the CI rebuild / adoption of GitHub Actions.
  • The output of npm outdated shows a number of base packages have
    newer versions available, but those may introduce breaking changes so
    the work is a bit more hands-on than our typical maintenance-week
    tasks.

Document any side effects to this change:

  • None

Todo:

  • Documentation
  • Stakeholder approval

Requires new or updated plugins, themes, or libraries?

YES

Requires change to deploy process?

NO

** Why are these changes being introduced:

* It has been a while since we did maintenance on our NPM / Grunt setup.
  As a result, there are a few outdated packages, and some that we no
  longer use as part of our build step.

** Relevant ticket(s):

* n/a - maintenance week task

** How does this address that need:

* This removes a few npm packages that were used in the past for theme
  builds, but are no longer relevant:
  * connect
  * imagemin
  * jshint
  * watch
* This also runs `npm update` to get our deeper dependencies as close to
  current as we can make them.
* Bumps theme version to 1.13.1

There are a few steps we could take to go further down this path, but
are not part of this PR yet:

* The PHPCS package can probably be removed soon, but that should
  probably be part of the CI rebuild / adoption of GitHub Actions.
* The output of `npm outdated` shows a number of base packages have
  newer versions available, but those may introduce breaking changes so
  the work is a bit more hands-on than our typical maintenance-week
  tasks.

** Document any side effects to this change:

* Updates /style.css to use "unbuilt" as its version number, as a
  clearer warning that a step was skipped in the deploy process. In the
  future only the version number in css/style.css should need to be
  updated.
@matt-bernhardt
Copy link
Copy Markdown
Member Author

As usual for our maintenance work, I'm merging this without code review. I have, however, deployed the update to staging and run through the list of reference URLs.

@matt-bernhardt matt-bernhardt merged commit 6bab81a into main Jun 23, 2022
@matt-bernhardt matt-bernhardt deleted the audit-dep-updates branch June 23, 2022 16:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant