Skip to content

Bump gulp-rev from 9.0.0 to 12.0.0#1080

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/gulp-rev-12.0.0
Open

Bump gulp-rev from 9.0.0 to 12.0.0#1080
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/gulp-rev-12.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 28, 2026

Bumps gulp-rev from 9.0.0 to 12.0.0.

Release notes

Sourced from gulp-rev's releases.

v12.0.0

Breaking

  • Require Node.js 20 (#268) dcc2cd1

Improvements

  • Update dependencies (#268) dcc2cd1

sindresorhus/gulp-rev@v11.0.0...v12.0.0

v11.0.0

Breaking

  • Require Node.js 18 ea7c490

sindresorhus/gulp-rev@v10.0.0...v11.0.0

v10.0.0

Breaking

  • Require Node.js 16 (#267) 1a9b1e3
  • Require Gulp 4
  • This package is now pure ESM. Please read this.

Improvements

  • Update dependencies (#267) 1a9b1e3

sindresorhus/gulp-rev@v9.0.0...v10.0.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 28, 2026
@greptile-apps
Copy link
Copy Markdown
Contributor

greptile-apps Bot commented Apr 28, 2026

Greptile Summary

This PR bumps gulp-rev from 9.0.0 to 12.0.0, updating its transitive dependencies in package-lock.json. The Dockerfile already uses Node 24 which satisfies the >=20 engine requirement, but there is a critical compatibility issue.

  • gulp-rev v10.0.0 converted to pure ESM, meaning it no longer ships a CommonJS build. gulpfile.js uses var rev = require('gulp-rev') which will throw ERR_REQUIRE_ESM at startup, completely breaking the build. Before merging, gulpfile.js must be migrated to ES module syntax (or \"type\": \"module\" added to package.json and the file renamed/updated accordingly).

Confidence Score: 1/5

Not safe to merge — the upgrade introduces a pure-ESM package that is incompatible with the existing CommonJS gulpfile, causing an immediate build failure.

gulp-rev 10+ is pure ESM and cannot be loaded with require(). gulpfile.js currently uses require('gulp-rev'), which will throw ERR_REQUIRE_ESM at runtime, completely breaking the asset build pipeline. This is a definite, reproducible breakage on the critical build path.

gulpfile.js must be migrated to ES module syntax before this dependency upgrade can be accepted.

Important Files Changed

Filename Overview
package.json Bumps gulp-rev from ^9.0.0 to ^12.0.0; v10+ is pure ESM, which breaks the CommonJS require() call in gulpfile.js
package-lock.json Lockfile correctly updated with new transitive dependencies for gulp-rev 12.0.0 and its updated sub-dependencies

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[gulp-rev v9.0.0\nCommonJS CJS] -->|bump to| B[gulp-rev v12.0.0\nPure ESM only]
    B --> C{gulpfile.js\nuses require?}
    C -->|Yes - current state| D[❌ ERR_REQUIRE_ESM\nBuild fails at startup]
    C -->|No - after fix| E[✅ Build succeeds]
    E --> F[gulpfile.mjs or\ntype: module in package.json]
Loading

Reviews (1): Last reviewed commit: "Bump gulp-rev from 9.0.0 to 12.0.0" | Re-trigger Greptile

Comment thread package.json
@@ -20,7 +20,7 @@
"gulp-inject": "^5.0.5",
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P0 ESM-only module breaks CommonJS gulpfile

gulp-rev v10.0.0 became a pure ESM package (see release notes: "This package is now pure ESM"). gulpfile.js loads it with var rev = require('gulp-rev') (line 18), which will throw ERR_REQUIRE_ESM at runtime under any Node.js version. The build will fail immediately when gulp tries to load the gulpfile. This upgrade requires either converting gulpfile.js to ES modules (rename to gulpfile.mjs or add "type": "module" to package.json) or replacing gulp-rev with a fork that still ships CJS.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/gulp-rev-12.0.0 branch from c752260 to 6efd107 Compare April 28, 2026 17:29
Bumps [gulp-rev](https://github.com/sindresorhus/gulp-rev) from 9.0.0 to 12.0.0.
- [Release notes](https://github.com/sindresorhus/gulp-rev/releases)
- [Commits](sindresorhus/gulp-rev@v9.0.0...v12.0.0)

---
updated-dependencies:
- dependency-name: gulp-rev
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/gulp-rev-12.0.0 branch from 6efd107 to d50e7a3 Compare April 29, 2026 16:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants