chore(deps): upgrade dependencies and remove production vulnerabilities

gulpfile.js

@@ -1,4 +1,4 @@
-const { src, dest, parallel, series } = require("gulp");
+const { src, dest } = require("vinyl-fs");
 const uglify = require("gulp-uglify");
 const concat = require("gulp-concat");
 const order = require("ordered-read-streams");
@@ -6,6 +6,7 @@ const { pipeline } = require("node:stream");
 const cleanCss = require("gulp-clean-css");
 const crypto = require("crypto");
 const fs = require("fs");
+const path = require("path");
 const esbuild = require("esbuild");
 const { compileTemplate } = require("vue/compiler-sfc");
 const { Script } = require("node:vm");
@@ -55,10 +56,14 @@ function hashFile(filePath) {
   return crypto.createHash("md5").update(content).digest("hex").slice(0, 10);
 }
 
-// Gulp 5 does not preserve array order. Read each asset in its declared order
+// Read each asset in its declared order
 // so libraries precede their plugins and application code, and CSS keeps its cascade.
 function orderedSrc(files) {
-  return order(files.map(file => src(file)));
+  return order(files.map(assetSrc));
+}
+
+function assetSrc(file) {
+  return src(path.basename(file), { cwd: path.dirname(file) });
 }
 
 function buildCoreJs(cb) {
@@ -98,7 +103,7 @@ async function buildVendorJs() {
 }
 
 function buildMermaidJs(cb) {
-  pipeline(src(mermaidFiles), concat("mermaid.min.js"), dest("public/script"), cb);
+  pipeline(orderedSrc(mermaidFiles), concat("mermaid.min.js"), dest("public/script"), cb);
 }
 
 function buildCss(cb) {
@@ -129,6 +134,21 @@ function writeManifest(cb) {
   cb();
 }
 
-const buildAssets = parallel(buildCoreJs, buildVendorJs, buildMermaidJs, buildCss);
+async function buildAssets() {
+  await Promise.all([
+    promisify(buildCoreJs)(), buildVendorJs(),
+    promisify(buildMermaidJs)(), promisify(buildCss)(),
+  ]);
+  await promisify(writeManifest)();
+}
 
-exports.default = series(buildAssets, writeManifest);
+exports.default = cb => buildAssets().then(() => cb(), cb);
+
+if (require.main === module) {
+  exports.default(error => {
+    if (error) {
+      console.error(error);
+      process.exitCode = 1;
+    }
+  });
+}