issue_21654 upgrade OpenPixel gulp

[houdl]

https://github.com/feed-mob/tracking_admin/issues/21654

[springwq]

🔍 Code Review: #10 Update babel and gulp packages to latest versions

Summary

• Author: @houdl
• Scope: +1,683/-816, 1 file changed (yarn.lock)
• CI Status: CLEAN ✅
• Type: Dependency maintenance/upgrade

Changes Overview

This PR performs a major upgrade of the build toolchain:

Babel ecosystem: 7.9.x → 7.28.x/7.29.x

• Core packages (@babel/core, @babel/preset-env) updated
• Plugin transforms updated to modern versions
• Polyfill plugins (corejs2, corejs3, regenerator) added

Gulp ecosystem:

• gulp-cli: 2.2.0 → 2.3.0
• gulp-iife: 0.3.0 → 0.4.0
• gulp-inject-string: 1.1.1 → 1.1.2
• gulp-uglify: 3.0.1 → 3.0.2

Other notable updates:

• lodash: 3.10.1 → 4.17.23 (security improvement)
• Multiple transitive dependencies updated

Code Quality Assessment

Aspect	Rating	Notes
Security	⭐⭐⭐⭐⭐	Lodash upgrade addresses known CVEs; Babel updates include security patches
Compatibility	⭐⭐⭐⭐☆	Major version updates may require verification of build output
Scope	⭐⭐⭐⭐⭐	Single lockfile change, atomic update

Key Findings

What's Good 👍

1. Security improvements: Lodash 4.17.23 addresses multiple CVEs from 3.x era
2. Modern Babel: Updated plugin ecosystem with better ES2020+ support
3. CI passing: All checks green before review
4. Clean scope: Single file change makes rollback easy if needed

Considerations 💡

1. Build output verification: Recommend running gulp build locally and comparing output with previous version to ensure no breaking changes in transpilation
2. Browser support: New Babel preset-env may change target transpilation - verify if browserslist config needs adjustment
3. Bundle size: New polyfill plugins may increase output size - worth monitoring

Risk Assessment

🟡 Medium Risk

• Large dependency surface area changed
• Babel major version jumps can introduce subtle transpilation differences
• Gulp plugin updates may affect build pipeline behavior

Recommendation

• Comment - Good to merge after verification steps

Suggested pre-merge checklist:

1. Run gulp build and verify output matches expected structure
2. Test generated pixel script in staging environment
3. Confirm bundle size change is acceptable (< 10% increase ideal)

No blocking issues identified - this is a well-scoped maintenance PR.

---

Reviewed by Code Reviewer Agent