Skip to content

Upgrading gulp 4 to 5

Breaking4.0.2 → 5.0.1Breaking16Security1Platform2Deprecated1New8Changed4Fixed10Other2

Full comparisonBack to gulp
BreakingUpgrade verdict

16 breaking changes and 2 platform requirement changes and a security fix.

In plain terms
  • Streams now assume UTF-8 text encoding by default instead of leaving encoding unset.
  • Glob patterns no longer preserve order; if you need files in a specific order, use the ordered-read-stream package.
  • gulp-cli no longer works with the old alpha versions of gulp 4.
  • The --verify command line flag is gone.
Must act Top 5 of 20 that need code or config changes

Node.js requirement changed in 5.0.0: >= 0.10 → >=10.13.0.

Installs 143 packages in all (was 332).

What you must change

Breaking16
Defaults stream encoding to UTF-8.
5.0.0GitHub ReleaseSummarizedView source
Removes support for ordered globs; use ordered-read-stream if ordering is needed.
ordered-read-stream
5.0.0GitHub ReleaseSummarizedView source
Removes support for alpha releases of v4 from gulp-cli.
gulp-cli
5.0.0GitHub ReleaseSummarizedView source
Removes the --verify flag.
--verify
5.0.0GitHub ReleaseSummarizedView source
Renames the --require flag to --preload to avoid conflicting with Node.js flags.
--require--preload
5.0.0GitHub ReleaseSummarizedView source
Removes many legacy and deprecated loaders.
5.0.0GitHub ReleaseSummarizedView source
Clones Vinyl objects with stream contents using teex but no longer waits for all streams to flow before clones receive data.
Vinylteex
5.0.0GitHub ReleaseSummarizedView source
Stops using process.umask() to make directories and falls back to Node's default mode.
process.umask()
5.0.0GitHub ReleaseSummarizedView source
Drops support of Node.js snake_case flags.
5.0.0GitHub ReleaseSummarizedView source
Standardizes on the anymatch library for globbing paths so globs behave the same in src and watch.
srcwatchanymatch
5.0.0GitHub ReleaseSummarizedView source
Normalizes all globs and paths to unix-like filepaths.
5.0.0GitHub ReleaseSummarizedView source
Only allows JS variants for .gulp.* config files.
.gulp.*
5.0.0GitHub ReleaseSummarizedView source
Throws on non-function, non-string option coercers.
5.0.0GitHub ReleaseSummarizedView source
Uses a Symbol for attaching the gulplog namespace to the store.
gulplog
5.0.0GitHub ReleaseSummarizedView source
Uses a Symbol for attaching the gulplog store to the global.
gulplog
5.0.0GitHub ReleaseSummarizedView source
Uses sha256 to hash the v8flags cache into a filename.
v8flags
5.0.0GitHub ReleaseSummarizedView source
Security1
Resolves some reported ReDoS CVEs and improves performance in glob-parent.
glob-parent
5.0.0GitHub ReleaseSummarizedView source
Platform2
Drops support for Node.js versions below 10.13.
5.0.0GitHub ReleaseSummarizedView source
Normalizes the repository and drops support for Node versions below 10.13.
5.0.0GitHub ReleaseSummarizedView source

Deprecations to plan for

Deprecated1
Upgrades gulplog to v2; messages logged via v1 also display a deprecated warning, and plugins should update to v2.
gulplog
5.0.0GitHub ReleaseSummarizedView source