Updated gulp to v5 and replaced vulnerable gulp-header with gulp-append-prepend

package.json

@@ -46,7 +46,8 @@
     "babel-eslint": "^10.1.0",
     "del": "^6.0.0",
     "eslint": "^7.32.0",
-    "gulp": "^4.0.2",
+    "gulp": "^5.0.0",
+    "gulp-append-prepend": "^1.0.9",
     "gulp-cached": "^1.1.1",
     "gulp-clean-css": "^4.3.0",
     "gulp-concat": "^2.6.1",
@@ -55,7 +56,6 @@
     "gulp-expect-file": "^2.0.0",
     "gulp-filter": "^6.0.0",
     "gulp-group-css-media-queries": "^1.2.2",
-    "gulp-header": "^2.0.9",
     "gulp-less": "^5.0.0",
     "gulp-rename": "^2.0.0",
     "gulp-replace": "^1.1.3",

tasks/common.js

@@ -1,17 +1,8 @@
 /* RainLoop Webmail (c) RainLoop Team | Licensed under MIT */
-const gulp = require('gulp');
 const del = require('del');
-const fs = require('fs');
 
 const { config } = require('./config');
 
 exports.del = (dir) => del(dir);
 
-exports.copy = (sFile, sNewFile, done) => {
-	fs.writeFileSync(sNewFile, fs.readFileSync(sFile));
-	done();
-};
-
-exports.getHead = () => config.head.agpl;
-
 exports.cleanStatic = () => del(config.paths.staticJS) && del(config.paths.staticCSS);

tasks/js.js

@@ -2,7 +2,7 @@
 const gulp = require('gulp');
 
 const concat = require('gulp-concat'),
-	header = require('gulp-header'),
+	gap = require('gulp-append-prepend'),
 	rename = require('gulp-rename'),
 	replace = require('gulp-replace'),
 	terser = require('gulp-terser'),
@@ -13,12 +13,14 @@ const concat = require('gulp-concat'),
 	size = require('gulp-size');
 
 const { config } = require('./config');
-const { del, getHead } = require('./common');
+const { del } = require('./common');
 
 const { rollupJS } = require('./rollup');
 
 const jsClean = () => del(config.paths.staticJS + '/**/*.{js,map}');
 
+const prepend = () => gap.prependText(config.head.agpl + '\n');
+
 // boot
 const jsBoot = () => {
 	return gulp
@@ -56,7 +58,7 @@ const jsLibs = () => {
 const jsSieve = async () =>
 	(await rollupJS(config.paths.js.sieve.name))
 //		.pipe(sourcemaps.write('.'))
-		.pipe(header(getHead() + '\n'))
+		.pipe(prepend())
 		.pipe(eol('\n', true))
 		.pipe(gulp.dest(config.paths.staticJS));
 
@@ -64,14 +66,14 @@ const jsSieve = async () =>
 const jsApp = async () =>
 	(await rollupJS(config.paths.js.app.name))
 //		.pipe(sourcemaps.write('.'))
-		.pipe(header(getHead() + '\n'))
+		.pipe(prepend())
 		.pipe(eol('\n', true))
 		.pipe(gulp.dest(config.paths.staticJS));
 
 const jsAdmin = async () =>
 	(await rollupJS(config.paths.js.admin.name))
 //		.pipe(sourcemaps.write('.'))
-		.pipe(header(getHead() + '\n'))
+		.pipe(prepend())
 		.pipe(eol('\n', true))
 		.pipe(gulp.dest(config.paths.staticJS));