build(deps): bump lodash.template, gulp, gulp-angular-templatecache, gulp-htmlmin, gulp-jshint, gulp-uglify and gulp-zip

[dependabot]

Bumps lodash.template to 4.5.0 and updates ancestor dependencies lodash.template, gulp, gulp-angular-templatecache, gulp-htmlmin, gulp-jshint, gulp-uglify and gulp-zip. These dependencies need to be updated together.

Updates lodash.template from 3.6.2 to 4.5.0

Release notes

Sourced from lodash.template's releases.

4.0.0

lodash v4.0.0

2015 was big year! Lodash became the most depended on npm package, passed 1 billion downloads, & its v3 release saw massive adoption!

The year was also one of collaboration, as discussions began on merging Lodash & Underscore. Much of Lodash v4 is proofing out the ideas from those discussions. Lodash v4 would not be possible without the collaboration & contributions of the Underscore core team. In the spirit of merging our teams have blended with several members contributing to both libraries.

For 2016 & lodash v4.0.0 we wanted to cut loose, push forward, & take things up a notch!

Modern only

With v4 we’re breaking free from old projects, old environments, & dropping old IE < 9 support!

4 kB Core

Lodash’s kitchen-sink size will continue to grow as new methods & functionality are added. However, we now offer a 4 kB (gzipped) core build that’s compatible with Backbone v1.2.4 for folks who want Lodash without lugging around the kitchen sink.

More ES6

We’ve continued to embrace ES6 with methods like _.isSymbol, added support for cloning & comparing array buffers, maps, sets, & symbols, converting iterators to arrays, & iterable _(…).

In addition, we’ve published an es-build & pulled babel-plugin-lodash into core to make tree-shaking a breeze.

More Modular

Pop quiz! 📣

What category path does the bindAll method belong to? Is it

A) require('lodash/function/bindAll') B) require('lodash/utility/bindAll') C) require('lodash/util/bindAll')

Don’t know? Well, with v4 it doesn’t matter because now module paths are as simple as

var bindAll = require('lodash/bindAll');

We’ve also reduced module complexity making it easier to create smaller bundles. This has helped Lodash adoption with libraries like Async & Redux!

1st Class FP

With v3 we introduced lodash-fp. We learned a lot & with v4 we decided to pull it into core.

Now you can get immutable, auto-curried, iteratee-first, data-last methods as simply as

var _ = require('lodash/fp');
var object = { 'a': 1 };
</tr></table> 

... (truncated)

Commits

• See full diff in compare view

Updates gulp from 3.9.1 to 4.0.2

Release notes

Sourced from gulp's releases.

v4.0.2

Fix

• Bind src/dest/symlink to the gulp instance to support esm exports (5667666) - Ref standard-things/esm#797

Docs

• Add notes about esm support (4091bd3) - Closes #2278
• Fix the Negative Globs section & examples (3c66d95) - Closes #2297
• Remove next tag from recipes (1693a11) - Closes #2277
• Add default task wrappers to Watching Files examples to make runnable (d916276) - Closes #2322
• Fix syntax error in lastRun API docs (ea52a92) - Closes #2315
• Fix typo in Explaining Globs (5d81f42) - Closes #2326

Build

• Add node 12 to Travis & Azure (b4b5a68)

v4.0.1

Fix

• Temporary workaround for facebook/Docusaurus#257 (9f4a2e9) - Closes facebook/Docusaurus#257

Docs

• Fix error in ES2015 usage example (a4e8d48) - Closes #2099 #2100
• Add temporary notice for 4.0.0 vs 3.9.1 documentation (126423a) - Closes #2121
• Improve recipe for empty glob array (45830cf) - Closes #2122
• Reword standard to default (b065a13)
• Fix recipe typo (86acdea) - Closes #2156
• Add front-matter to each file (d693e49) - Closes #2109
• Rename "Getting Started" to "Quick Start" & update it (6a0fa00)
• Add "Creating Tasks" documentation (21b6962)
• Add "JavaScript and Gulpfiles" documentation (31adf07)
• Add "Working with Files" documentation (50fafc6)
• Add "Async Completion" documentation (ad8b568)
• Add "Explaining Globs" documentation (f8cafa0)
• Add "Using Plugins" documentation (233c3f9)
• Add "Watching Files" documentation (f3f2d9f)
• Add Table of Contents to "Getting Started" directory (a43caf2)
• Improve & fix parts of Getting Started (84b0234)
• Create and link-to a "docs missing" page for LINK_NEEDED references (2bd75d0)
• Redirect users to new Getting Started guides (53e9727)
• Temporarily reference gulp@next in Quick Start (2cecf1e)
• Fixed a capitalization typo in a heading (3d051d8) - Closes #2242
• Use h2 headers within Quick Start documentation (921312c) - Closes #2241
• Fix for nested directories references (4c2b9a7)
• Add some more cleanup for Docusaurus (6a8fd8f)
• Temporarily point LINK_NEEDED references to documentation-missing.md (df7cdcb)
• API documentation improvements based on feedback (0a68710)

... (truncated)

Changelog

Sourced from gulp's changelog.

gulp changelog

4.0.0

Task system changes

• replaced 3.x task system (orchestrator) with new task system (bach)
  • removed gulp.reset
  • removed 3 argument syntax for gulp.task
  • gulp.task should only be used when you will call the task with the CLI
  • added gulp.series and gulp.parallel methods for composing tasks. Everything must use these now.
  • added single argument syntax for gulp.task which allows a named function to be used as the name of the task and task function.
  • added gulp.tree method for retrieving the task tree. Pass { deep: true } for an archy compatible node list.
  • added gulp.registry for setting custom registries.

CLI changes

• split CLI out into a module if you want to save bandwidth/disk space. you can install the gulp CLI using either npm install gulp -g or npm install gulp-cli -g, where gulp-cli is the smaller one (no module code included)
• add --tasks-json flag to CLI to dump the whole tree out for other tools to consume
• added --verify flag to check the dependencies in package.json against the plugin blacklist.

vinyl/vinyl-fs changes

• added gulp.symlink which functions exactly like gulp.dest, but symlinks instead.
• added dirMode param to gulp.dest and gulp.symlink which allows better control over the mode of the destination folder that is created.
• globs passed to gulp.src will be evaluated in order, which means this is possible gulp.src(['*.js', '!b*.js', 'bad.js']) (exclude every JS file that starts with a b except bad.js)
• performance for gulp.src has improved massively
  • gulp.src(['**/*', '!b.js']) will no longer eat CPU since negations happen during walking now
• added since option to gulp.src which lets you only match files that have been modified since a certain date (for incremental builds)
• fixed gulp.src not following symlinks
• added overwrite option to gulp.dest which allows you to enable or disable overwriting of existing files

Commits

• 069350a Release: 4.0.2
• b4b5a68 Build: Add node 12 to Travis & Azure
• 5667666 Fix: Bind src/dest/symlink to the gulp instance to support esm exports (ref s...
• 4091bd3 Docs: Add notes about esm support (closes #2278)
• 3c66d95 Docs: Fix the Negative Globs section & examples (closes #2297)
• 1693a11 Docs: Remove next tag from recipes (closes #2277)
• d916276 Docs: Add default task wrappers to Watching Files examples to make runnable (...
• ea52a92 Docs: Fix syntax error in lastRun API docs (closes #2315)
• 5d81f42 Docs: Fix typo in Explaining Globs (#2326)
• ea3bba4 Release: 4.0.1
• Additional commits viewable in compare view

Updates gulp-angular-templatecache from 2.2.7 to 2.2.7

Commits

• See full diff in compare view

Updates gulp-htmlmin from 2.0.0 to 5.0.1

Commits

• 190d031 5.0.1
• 0b8a331 stream errors
• f954dda remove eslint from pretest
• e5aeb27 update readme
• 8d8068e 5.0.0
• 20a1d30 closes jonschlinkert/gulp-htmlmin#72
• a412d83 refactor
• 3bd9d8f 4.0.0
• f549ab4 run verb to generate readme
• dd66fbc run updaters
• Additional commits viewable in compare view

Updates gulp-jshint from 1.12.0 to 2.1.0

Changelog

Sourced from gulp-jshint's changelog.

2.0

• jshint is now a peerDependency, meaning you must install it seperately

  npm install jshint gulp-jshint --save-dev

Commits

• 32a25b0 2.1.0
• 2c57c9f Merge pull request #157 from spalger/remove-gulp-util
• 5f621f8 vinyl is only used in testing
• 5eaabdd add yarn.lock file for dev
• 154180d [gulp-util/PluginError] use plugin-error directly
• 357ab98 [gulp-util/File] use Vinyl directly
• 807bead 2.0.4
• aca8740 Add test to verify that default files are not broken
• c277434 2.0.3
• 711f3f0 test fix
• Additional commits viewable in compare view

Updates gulp-uglify from 1.5.4 to 3.0.2

Release notes

Sourced from gulp-uglify's releases.

v3.0.2

A relatively small maintenance release adjusting dependencies.

Features

• Lodash is removed in favor of lighter dependencies specifically for the features used. intelli-espower-loader was also removed, as it's no longer compatible with the full suite of Node.js releases tested.

v3.0.1

A relatively small maintenance release.

Fixes

• If the error from UglifyJS contains column information, append this to the error message (alongside the line number).
• Buffers are now allocated with Buffer.from, ensuring Buffers never have any private information.
• The Streams callback is only called once, even if a downstream exits in error.

v3.0.0

We're now targeting UglifyJS3, if you need to continue to use UglifyJS2, you should stay on v2.1.2.

Breaking Changes

• The custom option "preserveComments" was removed.

  As a replacement, set the options.output.comments option directly, UglifyJS3 understands the following options:

  • "all", to attempt to keep all comments.
  • "some", to keep comments containing some license text.
  • a RegExp
  • a function that should return true or false.

  While the "some" option works for many cases, it doesn't fully match the behavior of the "license" option. Fortunately, you can pass the exported function from uglify-save-license as the comment option.

• The "minifier" API, which you could use to provide your own UglifyJS instance has been removed. It has been replaced with the "composer" API.

v2.1.2

Bug Fixes

• package: In the previous release devDependencies were incorrectly added as dependencies. This moves them to the correct location. (ba83a45c)

v2.1.1

Bug Fixes

• errors: restore filenames and line information to GulpUglifyError's toString method. (c722ab9c)

v2.1.0

Minor Fixes

• Updates UglifyJS to 2.8.10, and loosens version pinning to minor versions. See mishoo/UglifyJS@v2.7.5...v2.8.10 for details of changes.

v2.0.1

Minor Fixes

• Updates UglifyJS to 2.7.5. See mishoo/UglifyJS@v2.7.0...v2.7.5 for details of changes.

v2.0.0

Bug Fixes

• errors: emit errors of type GulpUglifyError (1232c3c)
• minifer: use gulplog for the warning (5632cee)

... (truncated)

Changelog

Sourced from gulp-uglify's changelog.

As of version 2.0.0, the CHANGELOG is maintained on GitHub Releases.

Change Log

Commits

• 7b9a7ad 3.0.2
• a56d1c7 feat: remove lodash dependency
• bcdda44 docs: replace pump with pipeline
• c92197d 3.0.1
• 27b26d4 fix(composer): invoke callback only once
• 2c7f656 tests: import tape-catch to catch thrown errors
• b2492c4 fix: create safe-buffers
• a751c5a tests: convert tests to to tape harness
• 95f17a5 feat(error): add column to error string
• e2462fa chore(travis): update test matrix
• Additional commits viewable in compare view

Updates gulp-zip from 3.2.0 to 5.1.0

Release notes

Sourced from gulp-zip's releases.

v5.1.0

• Add support for streaming output with option (#118) ca2e4f7

sindresorhus/gulp-zip@v5.0.2...v5.1.0

v5.0.2

• Fix creating unusable ZIP files on Windows (#117) 20106c8

sindresorhus/gulp-zip@v5.0.1...v5.0.2

v5.0.1

• Make Gulp an optional peer dependency (#115) a5994ea

sindresorhus/gulp-zip@v5.0.0...v5.0.1

v5.0.0

Breaking:

• Require Node.js 8 ddbacce

sindresorhus/gulp-zip@v4.2.0...v5.0.0

Commits

• b53a201 5.1.0
• ca2e4f7 Add support for streaming output with option (#118)
• b278501 Move to GitHub Actions (#119)
• dbbb727 5.0.2
• 20106c8 Fix creating unusable ZIP files on Windows (#117)
• f58c257 5.0.1
• a5994ea Make Gulp an optional peer dependency (#115)
• 29f79cf Meta tweaks
• f68ed4a 5.0.0
• ddbacce Require Node.js 8
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.