Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Shed some vestigial dev tooling #194

Merged
merged 5 commits into from
Jan 17, 2024

Conversation

Mr0grog
Copy link
Contributor

@Mr0grog Mr0grog commented Jan 12, 2024

⚠️ This is based on #193; that PR should be merged first. ⚠️

Based on the discussion in #191, this removes a bunch of dev-time tooling that we no longer actually need or use. It also happens to resolve 31 of our vulnerabilities from dependencies (based on the results of npm audit), including 4 that were rated “critical” (there are 21 total left, 2 of which are “critical”).

Removed:

  • QUnit (this was only used to verify that we don’t cause problems when used by a package that is tested with QUnit; I replaced it with a simple test of noConflict(), which is what this is really about)
  • Saucelabs
  • Coveralls.io (if we want to start using Coveralls.io again, we should probably use their official GitHub Action instead)
  • Vendored json2.js package (it never seems to have actually been used)
  • Removes a redundant step from the test-browser task in Grunt.

There’s still a little more easy-ish cleanup/updates to do based on #191, and I’ll work on that after this PR lands.

@pimterry
Copy link
Owner

Can you rebase this on top of main? That should drop the duplicated CI commits that are still shown here.

The QUnit test was only meant to ensure that loglevel still works when used in a package tested with QUnit, which is *really* about `noConflict()`. This cuts out some extra dependencies and tooling in favor of a simpler test of the `noConflict()` function. (See pimterry#191 for more discussion here.)
Saucelabs is no longer used for any testing, and given the maintenance status here, it's a good idea to drop the Sauce-related tooling and reduce our maintenance burden.

This also removes 20 (!) security vulnerabilities, including 3 that were rated "critical".
Nobody remembers why `json2.js` was there, and it doesn't seem to actually be in use.
We have not actively posted Coverage data to coveralls.io in several years and retaining the coveralls tooling adds to our maintenance support burden, so this removes it. (If we want to start using it again in the future, they now provide a GitHub Action step, which is probably a better way to do things than with the Grunt plugin we were using.)

This also removes 11 security warnings including 1 that was rated "critical".
@Mr0grog Mr0grog force-pushed the 191-shed-some-vestigial-stuff branch from cb65909 to d97ef5d Compare January 16, 2024 22:01
@Mr0grog
Copy link
Contributor Author

Mr0grog commented Jan 16, 2024

Done!

@pimterry pimterry merged commit 9c99ede into pimterry:master Jan 17, 2024
7 checks passed
@Mr0grog Mr0grog deleted the 191-shed-some-vestigial-stuff branch January 17, 2024 14:06
@Mr0grog Mr0grog mentioned this pull request Dec 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants