Lots of npm warn deprecated warnings during a clean build of older Vaadin versions

[mshabarov]

Description of the bug

Vaadin 23.6.3 and likely other versions 14.12.x and 24.8(9).x use deprecated npm versions as this is shown during the build:

npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm warn deprecated rollup-plugin-terser@7.0.2: This package has been deprecated and is no longer maintained. Please use @rollup/plugin-terser
npm warn deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
npm warn deprecated workbox-sw@6.6.1: this package has been deprecated
npm warn deprecated sourcemap-codec@1.4.8: Please use @jridgewell/sourcemap-codec instead
npm warn deprecated workbox-cacheable-response@6.6.1: workbox-background-sync@6.6.1
npm warn deprecated workbox-navigation-preload@6.6.1: this package has been deprecated
npm warn deprecated source-map@0.8.0-beta.0: The work that was done in this beta branch won't be included in future versions
npm warn deprecated workbox-google-analytics@6.6.1: It is not compatible with newer versions of GA starting with v4, as long as you are using GAv3 it should be ok, but the package is not longer being maintained
npm warn deprecated workbox-range-requests@6.6.1: this package has been deprecated
npm warn deprecated workbox-broadcast-update@6.6.1: this package has been deprecated
npm warn deprecated workbox-recipes@6.6.1: this package has been deprecated
npm warn deprecated workbox-expiration@6.6.1: this package has been deprecated
npm warn deprecated workbox-streams@6.6.1: this package has been deprecated
npm warn deprecated workbox-background-sync@6.6.1: this package has been deprecated
npm warn deprecated workbox-routing@6.6.1: this package has been deprecated
npm warn deprecated workbox-strategies@6.6.1: this package has been deprecated
npm warn deprecated workbox-window@6.6.1: this package has been deprecated
npm warn deprecated workbox-precaching@6.6.1: this package has been deprecated
npm warn deprecated workbox-core@6.6.1: this package has been deprecated
npm warn deprecated workbox-build@6.6.1: this package has been deprecated

We should manually upgrade npm packages via script here #22318 and then automate it with #22304.

Expected behavior

No warnings

Minimal reproducible example

V23.6.3 starter should show these when you run the production build

Versions

• Vaadin / Flow version: 14.12.x, 23.6.x, 24.8(9).x

[mcollovati]

I tried to run the script on 23.6 branch, but it did not change any package.json file.

[mcollovati]

The reason is that the script upgrade type for maintenance branches is path.
However, for example workbox-core:6.6.1 has been deprecated and there are no other versions available for 6.x.
What should we do in this case? Is it safe to bump to the latest major?
What should we check, other than ensure that the validation passes?

[mcollovati]

Maybe the script could run npx npm-check-updates@18.1.1 --no-deprecated after upgrade and fail if deprecated packages are still found. This would help at least with the automated job, to notify us of manual intervention needed.