Page MenuHomePhabricator

Transition Gruntfile.js to NPM scripts in ReadingLists extension
Closed, ResolvedPublic2 Estimated Story Points

Description

Background

With the decline of Grunt for many years now, it won't be feasible to use it infinitely without risking modern functionality and abilities and security (read below). The last release dates back to Jan 2023.
In a recent NPM audit in Oct 2025, a security vulnerability was identified, where Grunt, depends on an unmaintained version of Glob.

Goal

Replace Grunt tasks with NPM tasks and ensure all functionality is continuing to be available orienting on T246326

A related task in this venture is T407800.

Acceptance criteria for done

  • All dependencies are replaced
  • All functionality continues to be working

Event Timeline

Change #1206990 had a related patch set uploaded (by VolkerE; author: VolkerE):

[mediawiki/extensions/ReadingLists@master] build: Replace Grunt task runner scripts by npm scripts

https://gerrit.wikimedia.org/r/1206990

Change #1206990 merged by jenkins-bot:

[mediawiki/extensions/ReadingLists@master] build: Replace Grunt task runner scripts by npm scripts

https://gerrit.wikimedia.org/r/1206990