-
Couldn't load subscription status.
- Fork 249
Update: Node engine requirements bumped to >=18 and some optionalDependencies packages bumped for security patches #3713
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
…pendencies packages bumped for security patches
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR updates the Node.js engine requirement from >=16 to >=18 and bumps several optional imagemin dependencies to address security vulnerabilities. The changes also update the module import statements to use ES6 dynamic imports instead of CommonJS require statements.
- Node.js engine requirement increased to >=18 (breaking change)
- Updated four imagemin-related optional dependencies to newer major versions
- Modified import statements to use ES6 dynamic imports for imagemin packages
Reviewed Changes
Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| package.json | Updates Node.js engine requirement and bumps imagemin optional dependencies |
| grunt/tasks/compress.js | Changes require statements to ES6 dynamic imports for imagemin modules |
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
|
@oliverfoster The |
https://docs.npmjs.com/cli/v11/configuring-npm/package-json#engines I don't think it is necessary, unless the user has engine-strict enabled. (v6 as it was, the bower > npm stuff is progressing, albeit slowly) |
|
🎉 This PR is included in version 5.53.0 🎉 The release is available on GitHub release Your semantic-release bot 📦🚀 |


Fixes #3712
Update