Upgrade several gulp and less npm packages for security issues in their dependencies.

gulpfile.js/index.js

@@ -1,2 +1,3 @@
 var requireDir = require('require-dir');
-requireDir('./tasks', { recurse: true });
+requireDir('./subtasks', { recurse: true });
+requireDir('./tasks', { recurse: false });

gulpfile.js/tasks/copy.js → gulpfile.js/subtasks/copy.js

@@ -47,7 +47,7 @@ var gulp = require("gulp"),
             "node_modules/select2/dist/css/select2.min.css"
         ]).pipe(gulp.dest("src/oscar/static/oscar/js/select2"));
 
-        gulp.src("node_modules/select2-bootstrap-theme/dist/*.min.css")
+        return gulp.src("node_modules/select2-bootstrap-theme/dist/*.min.css")
             .pipe(gulp.dest("src/oscar/static/oscar/css"));
     };
 

gulpfile.js/tasks/default.js

@@ -1,3 +1,3 @@
 var gulp = require('gulp');
 
-gulp.task('default', ['copy', 'less']);
+gulp.task('default', gulp.series(['copy', 'less']));

package.json

@@ -8,18 +8,18 @@
     "bootstrap": "^3.3.7",
     "bootstrap-datetime-picker": "^2.4.4",
     "eslint": "^4.19.1",
-    "gulp": "~3.9.1",
+    "gulp": "^4.0.0",
     "gulp-autoprefixer": "~1.0.1",
     "gulp-concat": "^2.6.1",
-    "gulp-less": "^3.0.5",
+    "gulp-less": "^4.0.0",
     "gulp-sourcemaps": "^2.6.2",
     "gulp-watch": "^5.0.0",
     "jquery": "^3.3.1",
     "jquery-mousewheel": "^3.1.13",
     "jquery-sortable": "^0.9.13",
     "jquery.inputmask": "~3.2.7",
-    "less": "^2.5.3",
-    "pump": "^1.0.1",
+    "less": "^3.0.4",
+    "pump": "^3.0.0",
     "require-dir": "^0.3.0",
     "select2": "4.0.5",
     "select2-bootstrap-theme": "0.1.0-beta.10",