Removes UI Framework KUI doc site

[tmarkley]

Description

• KUI components are no longer being developed and the dependencies for the doc site are related to CVEs.
• Removes related grunt tasks.
• Removes all unused dependencies from the osd/ui-framework package.

Issues Resolved

Resolves #1096

Check List

• New functionality includes testing.
  • All tests pass
    • yarn test:jest
    • yarn test:jest_integration
    • yarn test:ftr
• New functionality has been documented.
• Commits are signed per the DCO using --signoff

[ashwin-pc]

The rest looks good. Just a question about removing the grunt tasks to compile the scss for ui-framework

[tmarkley]

I successfully ran the yarn uiFramework:compileCss script but it removed all of the Webkit CSS extensions from the light and dark compiled CSS, so I reverted those changes:

$ yarn uiFramework:compileCss
yarn run v1.22.17
$ cd packages/osd-ui-framework && yarn compileCss
$ grunt compileCss
Running "compileCss" task

Done.
Done in 2.67s.

[ashwin-pc]

I successfully ran the yarn uiFramework:compileCss script but it removed all of the Webkit CSS extensions from the light and dark compiled CSS, so I reverted those changes:

Ran that on main, looks like that's unrelated to your change. The rest looks good to me!

[kavilla]

Looks like this doesn't actually had an impact on the CVE and the CVE was addressed. Given that has conflicts and the CVE was addressed I will remove the 2.0.0 label.

[tmarkley]

Looks like this doesn't actually had an impact on the CVE and the CVE was addressed. Given that has conflicts and the CVE was addressed I will remove the 2.0.0 label.

@kavilla the CVE was not addressed. [email protected] is still in the yarn.lock file: https://github.com/opensearch-project/OpenSearch-Dashboards/blob/main/yarn.lock

[kavilla]

Looks like this doesn't actually had an impact on the CVE and the CVE was addressed. Given that has conflicts and the CVE was addressed I will remove the 2.0.0 label.

@kavilla the CVE was not addressed. [email protected] is still in the yarn.lock file: https://github.com/opensearch-project/OpenSearch-Dashboards/blob/main/yarn.lock

Apologies, when I checked the CVE it was automatically resolved but I guess it re-opened 4 days ago. I see there are conflicts here.

[kavilla]

Similar with the other PR with the lock file being changed do we see any potential of breakage with plugins? Grant it is the lock file although we do is for handling a lot of our resolutions.

Thanks!

[tmarkley]

Similar with the other PR with the lock file being changed do we see any potential of breakage with plugins? Grant it is the lock file although we do is for handling a lot of our resolutions.

Thanks!

Yeah I think there could be some risk here with the amount of dependencies that we're removing. I'm okay to hold off until next week and merge after RC1.

[kavilla]

Blocking for rc1 release.

We need to merge these CVE PRs in for RC1 to address any breaking changes.