npm vulnerabilities fixes

.github/workflows/publish.yml

@@ -14,16 +14,16 @@ jobs:
     runs-on: ubuntu-latest
     environment: npmjs
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.event.release.target_commitish }}
-      - run: git fetch --force --tags
-      - uses: actions/setup-node@v4
+      - uses: DevExpress/testcafe-build-system/actions/publish@main
         with:
-          node-version: 24
-          registry-url: 'https://registry.npmjs.org'
-      - run: npm ci
-      - run: npm run publish-please-only
+          pre-publish-script: gulp test-server
+          audit-level: critical
+          omit-dev-dependencies: true
+          branch: ${{ github.event.release.target_commitish }}
+          version: ${{ github.event.release.tag_name }}
   docker-publish:
     needs: npm-publish
     runs-on: ubuntu-latest

Gulpfile.js

@@ -2,7 +2,6 @@ const gulp                          = require('gulp');
 const gulpStep                      = require('gulp-step');
 const data                          = require('gulp-data');
 const less                          = require('gulp-less');
-const mocha                         = require('gulp-mocha-simple');
 const mustache                      = require('gulp-mustache');
 const rename                        = require('gulp-rename');
 const uglify                        = require('gulp-uglify');
@@ -28,6 +27,7 @@ const promisifyStream               = require('./gulp/helpers/promisify-stream')
 const testFunctional                = require('./gulp/helpers/test-functional');
 const moduleExportsTransform        = require('./gulp/helpers/module-exports-transform');
 const createPackageFilesForTests    = require('./gulp/helpers/create-package-files-for-tests');
+const { runCommands }               = require('./gulp/helpers/run-shell-commands');
 
 const {
     TESTS_GLOB,
@@ -84,7 +84,7 @@ gulp.task('lint', () => {
             'gulp/**/*.js',
             '!test/client/vendor/**/*.*',
             '!test/functional/fixtures/api/es-next/custom-client-scripts/data/*.js',
-            'Gulpfile.js',
+            '[Gg]ulpfile.js',
         ])
         .pipe(eslint())
         .pipe(eslint.format(process.env.ESLINT_FORMATTER))
@@ -254,7 +254,7 @@ gulp.step('clean-functional-tests', async () => {
 
 gulp.step('prepare-tests', gulp.registry().get(SKIP_BUILD ? 'lint' : 'build'));
 
-gulp.step('test-server-run', () => {
+gulp.step('test-server-run', async () => {
     const chai = require('chai');
 
     chai.use(require('chai-string'));
@@ -264,11 +264,11 @@ gulp.step('test-server-run', () => {
     const domains = exitDomains();
 
     try {
-        return gulp
-            .src('test/server/*-test.js', { read: false })
-            .pipe(mocha({
-                timeout: getTimeout(4_000),
-            }));
+        const timeout = getTimeout(4_000) === Infinity ? 0 : getTimeout(4_000);
+
+        await runCommands([
+            `npx --no-install mocha --full-trace --timeout ${timeout} "test/server/*-test.js"`,
+        ]);
     }
     finally {
         enterDomains(domains);

gulp/helpers/run-shell-commands.js

@@ -0,0 +1,19 @@
+const childProcess = require('child_process');
+
+async function runCommands (commands) {
+    for (const command of commands) {
+        const commandExitCode = await new Promise((resolve, reject) => {
+            const child = childProcess.spawn(command, { shell: true, stdio: 'inherit' });
+
+            child.on('error', reject);
+            child.on('close', code => {
+                resolve(code ?? 1);
+            });
+        });
+
+        if (commandExitCode !== 0)
+            throw new Error(`Command "${command}" exited with code ${commandExitCode}`);
+    }
+}
+
+exports.runCommands = runCommands;

gulp/helpers/test-functional.js

@@ -51,8 +51,7 @@ module.exports = async function testFunctional (src, testingEnvironmentName, { n
     tests.unshift(SETUP_TESTS_GLOB);
 
     const opts = {
-        reporter: 'mocha-reporter-spec-with-retries',
-        timeout:  getTimeout(3 * 60 * 1000),
+        timeout: getTimeout(3 * 60 * 1000),
     };
 
     if (process.env.RETRY_FAILED_TESTS === 'true')