TryGhost/Ghost
1
0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2024-12-22 18:31:57 +03:00
Code Issues Projects Releases Wiki Activity
12451d413d
Ghost/yarn.lock

11154 lines
471 KiB
Plaintext
Raw Normal View History

✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
# yarn lockfile v1
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
"@aws-crypto/ie11-detection@^1.0.0":
version "1.0.0"
resolved "https://registry.yarnpkg.com/@aws-crypto/ie11-detection/-/ie11-detection-1.0.0.tgz#d3a6af29ba7f15458f79c41d1cd8cac3925e726a"
integrity sha512-kCKVhCF1oDxFYgQrxXmIrS5oaWulkvRcPz+QBDMsUr2crbF4VGgGT6+uQhSwJFdUAQ2A//Vq+uT83eJrkzFgXA==
dependencies:
tslib "^1.11.1"
"@aws-crypto/sha256-browser@^1.0.0":
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "1.2.1"
resolved "https://registry.yarnpkg.com/@aws-crypto/sha256-browser/-/sha256-browser-1.2.1.tgz#b75b89a63039f97667e61ac92c9c4ee04f35fec0"
integrity sha512-WX/Wp6sXPhcBWx/w1aSJv3bDJL0ut5Ik6hl7yfqA1pn3cfsahl4rgHzRRXqYfJ+hnhnCqdgadS17wyBbVPsK+w==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
"@aws-crypto/ie11-detection" "^1.0.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-crypto/sha256-js" "^1.2.1"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
"@aws-crypto/supports-web-crypto" "^1.0.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-crypto/util" "^1.2.1"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
"@aws-sdk/types" "^3.1.0"
"@aws-sdk/util-locate-window" "^3.0.0"
tslib "^1.11.1"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-crypto/sha256-js@^1.0.0", "@aws-crypto/sha256-js@^1.2.1":
version "1.2.1"
resolved "https://registry.yarnpkg.com/@aws-crypto/sha256-js/-/sha256-js-1.2.1.tgz#88c6c0cfff7f269b21740c71157987837da502df"
integrity sha512-KtZ4qFDWZy6pKcky6RvwSytR/I8vPX9Z47pXh9sOuTcxjjtcegzS2uupg9vo0vbFcAWkSHVOEmNPh6ygiC3VFQ==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-crypto/util" "^1.2.1"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
"@aws-sdk/types" "^3.1.0"
tslib "^1.11.1"
"@aws-crypto/supports-web-crypto@^1.0.0":
version "1.0.0"
resolved "https://registry.yarnpkg.com/@aws-crypto/supports-web-crypto/-/supports-web-crypto-1.0.0.tgz#c40901bc17ac1e875e248df16a2b47ad8bfd9a93"
integrity sha512-IHLfv+WmVH89EW4n6a5eE8/hUlz6qkWGMn/v4r5ZgzcXdTC5nolii2z3k46y01hWRiC2PPhOdeSLzMUCUMco7g==
dependencies:
tslib "^1.11.1"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-crypto/util@^1.2.1":
version "1.2.1"
resolved "https://registry.yarnpkg.com/@aws-crypto/util/-/util-1.2.1.tgz#9bd31a37843aca63829a8fcae6b897283bf6ff12"
integrity sha512-H6Qrl28lzGGXZgLkdP7DQpJ3D3jJagQJugziThcqZCJVUT0HABHJt9EQMiiuf93KcUV/MMoisl56UfCxCFfmWQ==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/types" "^3.1.0"
"@aws-sdk/util-utf8-browser" "^3.0.0"
tslib "^1.11.1"
"@aws-sdk/abort-controller@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/abort-controller/-/abort-controller-3.32.0.tgz#92be8d442141432ee83eb522170047fd8ea77bee"
integrity sha512-fGGlLbGzbfT8lWMt26Cr4lXpYN8rofraIK3mW9cUnV4dwFO/4UJw9m35GU/YNsC1MLzTI9Q1e08kZP+1yubvaw==
dependencies:
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
"@aws-sdk/client-ses@^3.31.0":
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/client-ses/-/client-ses-3.32.0.tgz#0fd3bf5f5dfc24e5b99a083c544a0e9adc863e4f"
integrity sha512-iIRwB6ZN1ZBDhTNF0vNlD52qDMcjST7F7V4NDM4dNK3cE8RccclObru3seBnZasJbSnCC+lh1y+FdcJRWu75Sw==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
"@aws-crypto/sha256-browser" "^1.0.0"
"@aws-crypto/sha256-js" "^1.0.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/client-sts" "3.32.0"
"@aws-sdk/config-resolver" "3.32.0"
"@aws-sdk/credential-provider-node" "3.32.0"
"@aws-sdk/fetch-http-handler" "3.32.0"
"@aws-sdk/hash-node" "3.32.0"
"@aws-sdk/invalid-dependency" "3.32.0"
"@aws-sdk/middleware-content-length" "3.32.0"
"@aws-sdk/middleware-host-header" "3.32.0"
"@aws-sdk/middleware-logger" "3.32.0"
"@aws-sdk/middleware-retry" "3.32.0"
"@aws-sdk/middleware-serde" "3.32.0"
"@aws-sdk/middleware-signing" "3.32.0"
"@aws-sdk/middleware-stack" "3.32.0"
"@aws-sdk/middleware-user-agent" "3.32.0"
"@aws-sdk/node-config-provider" "3.32.0"
"@aws-sdk/node-http-handler" "3.32.0"
"@aws-sdk/protocol-http" "3.32.0"
"@aws-sdk/smithy-client" "3.32.0"
"@aws-sdk/types" "3.32.0"
"@aws-sdk/url-parser" "3.32.0"
"@aws-sdk/util-base64-browser" "3.32.0"
"@aws-sdk/util-base64-node" "3.32.0"
"@aws-sdk/util-body-length-browser" "3.32.0"
"@aws-sdk/util-body-length-node" "3.32.0"
"@aws-sdk/util-user-agent-browser" "3.32.0"
"@aws-sdk/util-user-agent-node" "3.32.0"
"@aws-sdk/util-utf8-browser" "3.32.0"
"@aws-sdk/util-utf8-node" "3.32.0"
"@aws-sdk/util-waiter" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
entities "2.2.0"
fast-xml-parser "3.19.0"
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/client-sso@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/client-sso/-/client-sso-3.32.0.tgz#67090eddc9fbab177c3781f8c94ad1d63aaacd91"
integrity sha512-ZcVHeg0orPrijuSmmBYpmKm0XdzeYINwvIDqgsTxrhJ9m25KvpUI7oH6nUa2m/j6trTiWJ/rqE5eFuMQJJ1tYQ==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
"@aws-crypto/sha256-browser" "^1.0.0"
"@aws-crypto/sha256-js" "^1.0.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/config-resolver" "3.32.0"
"@aws-sdk/fetch-http-handler" "3.32.0"
"@aws-sdk/hash-node" "3.32.0"
"@aws-sdk/invalid-dependency" "3.32.0"
"@aws-sdk/middleware-content-length" "3.32.0"
"@aws-sdk/middleware-host-header" "3.32.0"
"@aws-sdk/middleware-logger" "3.32.0"
"@aws-sdk/middleware-retry" "3.32.0"
"@aws-sdk/middleware-serde" "3.32.0"
"@aws-sdk/middleware-stack" "3.32.0"
"@aws-sdk/middleware-user-agent" "3.32.0"
"@aws-sdk/node-config-provider" "3.32.0"
"@aws-sdk/node-http-handler" "3.32.0"
"@aws-sdk/protocol-http" "3.32.0"
"@aws-sdk/smithy-client" "3.32.0"
"@aws-sdk/types" "3.32.0"
"@aws-sdk/url-parser" "3.32.0"
"@aws-sdk/util-base64-browser" "3.32.0"
"@aws-sdk/util-base64-node" "3.32.0"
"@aws-sdk/util-body-length-browser" "3.32.0"
"@aws-sdk/util-body-length-node" "3.32.0"
"@aws-sdk/util-user-agent-browser" "3.32.0"
"@aws-sdk/util-user-agent-node" "3.32.0"
"@aws-sdk/util-utf8-browser" "3.32.0"
"@aws-sdk/util-utf8-node" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/client-sts@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/client-sts/-/client-sts-3.32.0.tgz#27951415767abf389bcf470b0e8f42263689c71a"
integrity sha512-7CzgkEEhgATg+JIKNtQdJQ/MXg04o00sMHe2u72lCynP3UXYOPJMvGTb4wbnpf6XrGtEStRxpbKnMYzlN1wkBA==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
"@aws-crypto/sha256-browser" "^1.0.0"
"@aws-crypto/sha256-js" "^1.0.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/config-resolver" "3.32.0"
"@aws-sdk/credential-provider-node" "3.32.0"
"@aws-sdk/fetch-http-handler" "3.32.0"
"@aws-sdk/hash-node" "3.32.0"
"@aws-sdk/invalid-dependency" "3.32.0"
"@aws-sdk/middleware-content-length" "3.32.0"
"@aws-sdk/middleware-host-header" "3.32.0"
"@aws-sdk/middleware-logger" "3.32.0"
"@aws-sdk/middleware-retry" "3.32.0"
"@aws-sdk/middleware-sdk-sts" "3.32.0"
"@aws-sdk/middleware-serde" "3.32.0"
"@aws-sdk/middleware-signing" "3.32.0"
"@aws-sdk/middleware-stack" "3.32.0"
"@aws-sdk/middleware-user-agent" "3.32.0"
"@aws-sdk/node-config-provider" "3.32.0"
"@aws-sdk/node-http-handler" "3.32.0"
"@aws-sdk/protocol-http" "3.32.0"
"@aws-sdk/smithy-client" "3.32.0"
"@aws-sdk/types" "3.32.0"
"@aws-sdk/url-parser" "3.32.0"
"@aws-sdk/util-base64-browser" "3.32.0"
"@aws-sdk/util-base64-node" "3.32.0"
"@aws-sdk/util-body-length-browser" "3.32.0"
"@aws-sdk/util-body-length-node" "3.32.0"
"@aws-sdk/util-user-agent-browser" "3.32.0"
"@aws-sdk/util-user-agent-node" "3.32.0"
"@aws-sdk/util-utf8-browser" "3.32.0"
"@aws-sdk/util-utf8-node" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
entities "2.2.0"
fast-xml-parser "3.19.0"
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/config-resolver@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/config-resolver/-/config-resolver-3.32.0.tgz#c91ae83c78617823a317f27cc5ca388b8ed73f85"
integrity sha512-nSZY/y06B2l5YUL5mieTAPYeaEmFy5zYXMH4E04GBqaXGoPNPuc0O6oFvtiIzzxVyn4rolCaDNx50HriWiUWRQ==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/signature-v4" "3.32.0"
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/credential-provider-env@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-env/-/credential-provider-env-3.32.0.tgz#445a8657c56264c533f11e2fef46039d753c3352"
integrity sha512-L/YL20wmgXY3R+6lZ94aIomPVIwxj4obfZkjSEncFZwBeB1A7UPSOsqrXFwrag5rPwgfyzy6Dgz1sIUYcdH1XQ==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/property-provider" "3.32.0"
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/credential-provider-imds@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-imds/-/credential-provider-imds-3.32.0.tgz#931c2f4511381fb306262d0bad1cb08872ba01b0"
integrity sha512-jRXqE0nQta91KVNKtVl3Pqc/vveGEaLfWvqhkJEbhVX+myI5pzTLxINNyTR111oBvoq1sFIeqJQY0KT3qn5BMA==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/node-config-provider" "3.32.0"
"@aws-sdk/property-provider" "3.32.0"
"@aws-sdk/types" "3.32.0"
"@aws-sdk/url-parser" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/credential-provider-ini@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-ini/-/credential-provider-ini-3.32.0.tgz#25f5a1407651ea6ccb3ff5bc7f10fdeb65f404d9"
integrity sha512-lX1I+DkW2CS0EA8KS/3IBGc6/4rKygGo5h70cSnxPL+8Sc/Tk7jhLNB9f/tN1mIQNOeOhs1irma8XyYfcscfTg==
dependencies:
"@aws-sdk/credential-provider-env" "3.32.0"
"@aws-sdk/credential-provider-imds" "3.32.0"
"@aws-sdk/credential-provider-sso" "3.32.0"
"@aws-sdk/credential-provider-web-identity" "3.32.0"
"@aws-sdk/property-provider" "3.32.0"
"@aws-sdk/shared-ini-file-loader" "3.32.0"
"@aws-sdk/types" "3.32.0"
"@aws-sdk/util-credentials" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/credential-provider-node@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-node/-/credential-provider-node-3.32.0.tgz#7ef932ed374257e4477b9362b27f291f770723ba"
integrity sha512-Y10+D6huLP85MqPtKV7tDaV2V+uVyIvH6JXDuOVqAQXcwNCEY6+TeCoIeFVWZB2lbDmq20Dd19YN05VKgng6dA==
dependencies:
"@aws-sdk/credential-provider-env" "3.32.0"
"@aws-sdk/credential-provider-imds" "3.32.0"
"@aws-sdk/credential-provider-ini" "3.32.0"
"@aws-sdk/credential-provider-process" "3.32.0"
"@aws-sdk/credential-provider-sso" "3.32.0"
"@aws-sdk/credential-provider-web-identity" "3.32.0"
"@aws-sdk/property-provider" "3.32.0"
"@aws-sdk/shared-ini-file-loader" "3.32.0"
"@aws-sdk/types" "3.32.0"
"@aws-sdk/util-credentials" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/credential-provider-process@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-process/-/credential-provider-process-3.32.0.tgz#06317464f136de52179e4b8a408b874cd2624e59"
integrity sha512-9DbcunIMW6Xmpq9mDlNlZ59q23X37uEfi9aESX1fBtu6r2cfbNKPZyY1984GsDLA3jEnXj+LhNympeAD2psAew==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/property-provider" "3.32.0"
"@aws-sdk/shared-ini-file-loader" "3.32.0"
"@aws-sdk/types" "3.32.0"
"@aws-sdk/util-credentials" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/credential-provider-sso@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-sso/-/credential-provider-sso-3.32.0.tgz#2a6285aaf9b57384876580e4e775bd547f1b52e9"
integrity sha512-MQhGhbA8ElHazddEJKtbn+dPq/JyvW9Qz3eK+UUpk+damtvk4ojV2QTwnNlyRTxfjnEHKOL783aTNpef9Fm8TA==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/client-sso" "3.32.0"
"@aws-sdk/property-provider" "3.32.0"
"@aws-sdk/shared-ini-file-loader" "3.32.0"
"@aws-sdk/types" "3.32.0"
"@aws-sdk/util-credentials" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/credential-provider-web-identity@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/credential-provider-web-identity/-/credential-provider-web-identity-3.32.0.tgz#e787741779bc0a5f929837bf281e5f8646f5bf52"
integrity sha512-0aqG2ioVoekXgTdlYhcbOM3HDsgq7J1SRwib/jpRy/gKa+EeYwk79NI6SnMpSQH8ThHwSK5LCe0SCBj8G5mCCg==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/property-provider" "3.32.0"
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/fetch-http-handler@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/fetch-http-handler/-/fetch-http-handler-3.32.0.tgz#f05f33a7915986b10a47abb6c12fa474e30c46cc"
integrity sha512-gPozFdAjIyj7XiUemJHuwKIFpd3bpA+P5GjYhnWRW/iV2vlmR+q4M8EcgxWyf55ME8ZTj9CpEMGED8u8Hpkrzg==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/protocol-http" "3.32.0"
"@aws-sdk/querystring-builder" "3.32.0"
"@aws-sdk/types" "3.32.0"
"@aws-sdk/util-base64-browser" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/hash-node@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/hash-node/-/hash-node-3.32.0.tgz#e457ecdcb426b0396737fa68349f8f176a8407c6"
integrity sha512-SQf10cM67WuZ1rFKqvxzgKS/rD6B0jM/1CUGHR2p6HfxlWQyGn4ea4fpyqDzZ53D0msmYPx06LmIQtmcc0kMgQ==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/types" "3.32.0"
"@aws-sdk/util-buffer-from" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/invalid-dependency@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/invalid-dependency/-/invalid-dependency-3.32.0.tgz#4a763ffcfad40cc2f457871c266116e85ee731a2"
integrity sha512-ISX2d4sXeZSOYk5Bger9VAVigEE0Jgb2xucjqplcg9+Q0/Tm4PwPJTXgYXpc/fGxkVIy535fl/lrHnZZT/tTHA==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/is-array-buffer@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/is-array-buffer/-/is-array-buffer-3.32.0.tgz#da63d6d7ede63a64d1a4ddf024058f3d45b82076"
integrity sha512-ywBtlNwQzA3971o+cG2WptNhARFQBSM7PX+l/LJA/XwczE0ZPcTVACbSDu+Aqphz0XjFZ8FDoYMTdbZZeVR4wQ==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/middleware-content-length@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-content-length/-/middleware-content-length-3.32.0.tgz#cc9d10fb3101eee9f84972b3c9e2df5ae4e9819b"
integrity sha512-6paddPqlx86OyGCtf2IFVQd4eJWRotpYLCfEcaxno/ihoybhOgSSL3kvRMy77Y168jYjB88kilACzEVrOg8gYA==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/protocol-http" "3.32.0"
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/middleware-host-header@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-host-header/-/middleware-host-header-3.32.0.tgz#904e0c7584a0b4cdd3b23ab98577f5bbe9f8e93f"
integrity sha512-zL2zj+HU/t4hU/btzyuKU7+Ct3GuyGUCaex1wE1wilLgiMQWlHx6tAVyA6lT3Zie4helHiIEnf1wYShm+Kmv4w==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/protocol-http" "3.32.0"
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/middleware-logger@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-logger/-/middleware-logger-3.32.0.tgz#bd9f28e737b6e09691048d17cb05d4bd92a04ef2"
integrity sha512-d6HH0SMI0m4U9lHk35zAbovop3ivHreZvcH5jw0A64izZQt5eqRbre+R0sfK+UjC1bARo1Wb+SaHcSDmxrqrJg==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/middleware-retry@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-retry/-/middleware-retry-3.32.0.tgz#abf0f9176057e6737a900494fdf34bc6fd3777c2"
integrity sha512-i5Uz/Z67kq/whrW+ZROgqz2NKNVZIGIk1V6tFte48jw1L2PMu+AQkgwKufY30p7oxOn0/v1qu2VMz0BBFYVeoQ==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/protocol-http" "3.32.0"
"@aws-sdk/service-error-classification" "3.32.0"
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
uuid "^8.3.2"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/middleware-sdk-sts@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-sdk-sts/-/middleware-sdk-sts-3.32.0.tgz#5af4425f2d278758dd44b131ae5e704330ff5694"
integrity sha512-rxiTjNRfpLx3wYa19sj0zpjIBIs9UYBLh8IbXKfeSS5PywewBCVwBoE8XBmLzzp+9xSwpSYuOPDuIK8rauZ3Sw==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/middleware-signing" "3.32.0"
"@aws-sdk/property-provider" "3.32.0"
"@aws-sdk/protocol-http" "3.32.0"
"@aws-sdk/signature-v4" "3.32.0"
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/middleware-serde@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-serde/-/middleware-serde-3.32.0.tgz#27a1d9eff70ae2f860f4565549c32baef415d17b"
integrity sha512-y3bFjq8Fm9jd0EKbDyohrHtpZLMO2GLabvpNTcQpt/2YOv8wAMPWpCllJXdFAGRav5xkzMJItYFNDuLB5foHyQ==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/middleware-signing@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-signing/-/middleware-signing-3.32.0.tgz#e579c9062309f76da43574412804a521d536308c"
integrity sha512-lqpGaBlKud71c/TkfBq/kABmA7tjO93BfzYsqjiDfA+1Ab9ALZaTzw9YwAJZ7TuqW8frrcY1mC41pq749FCE3g==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/property-provider" "3.32.0"
"@aws-sdk/protocol-http" "3.32.0"
"@aws-sdk/signature-v4" "3.32.0"
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/middleware-stack@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-stack/-/middleware-stack-3.32.0.tgz#93db863df93bacf438fc6e70b3ac686660e4787b"
integrity sha512-tklpaAeAKGQmdbj98unhr/cSh5nJCkPJFuK2R1+LOY57IiQSzKRg+CEF3wDU9DH/ILv6r/z5wxVlXxO8T0b+3Q==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/middleware-user-agent@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/middleware-user-agent/-/middleware-user-agent-3.32.0.tgz#669dceeb3ee9c098c1f09636acbc7cb3c20ebaf4"
integrity sha512-lg4Y8Z6EwiNpHEPoOfQtchJEm41xiVyr3wFoVWNShhRncn39FMTVJGx3uqAgh/HLSoDZ4W8MNfm3jUnvUb1rEw==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/protocol-http" "3.32.0"
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/node-config-provider@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/node-config-provider/-/node-config-provider-3.32.0.tgz#e90ca2c714ff99c2a707c53305e1b39975d7e589"
integrity sha512-7Ro3loMlm5DA6IGFbSmBqoopgYojm5lQhuZksSI2xPXCBHyu3ym6a39ikjVsEmSQrJdXRiB77XM94fM+jGxjCg==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/property-provider" "3.32.0"
"@aws-sdk/shared-ini-file-loader" "3.32.0"
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/node-http-handler@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/node-http-handler/-/node-http-handler-3.32.0.tgz#8332fd9373387d3e72a82f40ea14862dd24499a1"
integrity sha512-LHO+ikctC+FdPINoh84T5ooioEPjrzYrXpRXa1tufTfVN6DmtaFxukBa0XAGv/PGyL5obfHmi1ErPFSLwBfr9A==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/abort-controller" "3.32.0"
"@aws-sdk/protocol-http" "3.32.0"
"@aws-sdk/querystring-builder" "3.32.0"
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/property-provider@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/property-provider/-/property-provider-3.32.0.tgz#6eb7a2f0f86e56a1ca04aea61ef9e54f8dec0a0b"
integrity sha512-RucvDIm2UX45xz0UvypO/KRKR0FmmLgYg3I++Twjl2aA2TGh/xR8AImbhmL6P1u98e9agkSnZVJHBMfMPbqALg==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/protocol-http@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/protocol-http/-/protocol-http-3.32.0.tgz#e9214cc36662f8d038333a4e5bd1b3cbfa00aee2"
integrity sha512-5ORPDE+LGjSoeeaR/LIVVwJN51AvaHo+lQe9gH1jpS6/0nGXlcHOgAPRSz8+gr5rVFvwUx8GnjNSqxChRnfbAQ==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/querystring-builder@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/querystring-builder/-/querystring-builder-3.32.0.tgz#e60184f9359d9a614d2fd09a2d79c60ea7cfd0d5"
integrity sha512-L+C7Nqg/h3gN9TksUrbT1h75+Cdj2tb4OOWcjv4z8Ud88Rc9ZXLEL2cAjKuAKJqWkVHEunm3X2Nm92x3bUNKoQ==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/types" "3.32.0"
"@aws-sdk/util-uri-escape" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/querystring-parser@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/querystring-parser/-/querystring-parser-3.32.0.tgz#deb27745b024dd726fe53e2fe0af16c52940c0a1"
integrity sha512-iuoVZ469fn0iU4MELLuUDoS9FJeW5UG2rejk6k395QAPSjHQa/6NbBGt0cKUOWloMxli3c8VEprZbnl/QVpujA==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/service-error-classification@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/service-error-classification/-/service-error-classification-3.32.0.tgz#6264d6efe22787de04bdd5d1f7c8b73bf9c68739"
integrity sha512-hzshKuW6x9Qe43wF0dtAS1W/NzeZUUXb/FlV+733Jw+MZlZxVaCiYSTGi8azK1coLNZ5JhesmrRbT5JitoOe/w==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/shared-ini-file-loader@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/shared-ini-file-loader/-/shared-ini-file-loader-3.32.0.tgz#c0d1c3271321f778eb971e838dee062517cabf7c"
integrity sha512-d5Djy/mudtIiwk3nRoPm/+7OEwYWgxprLlJN7PB2ehwaolQHOZVEkJtoJ/e5hFEWZ96T7QwsHbEvCrSMNjDRkQ==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/signature-v4@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/signature-v4/-/signature-v4-3.32.0.tgz#4c3afc88fe0469b5d1e460665b295f9ba281f34d"
integrity sha512-o+8VkO+aitSU8VBLPY+/IJyAjpYi6FP2HZeN/mLf7WwBlosJIYqzCawwgoY79+gwTBwk3qBDNWnDWEWfgxhU+A==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/is-array-buffer" "3.32.0"
"@aws-sdk/types" "3.32.0"
"@aws-sdk/util-hex-encoding" "3.32.0"
"@aws-sdk/util-uri-escape" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/smithy-client@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/smithy-client/-/smithy-client-3.32.0.tgz#0f65ea4e65e2fd66cb6f315aa25eb490d7cf54a2"
integrity sha512-FjGujKpctsI18vJGVvZ9FmqAWffvdmT0o6nL3vD8hWoi4O2x05FGpx5rrAPo+wwhOga6ejuKtj3T9lhjU9c2vw==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/middleware-stack" "3.32.0"
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/types@3.32.0", "@aws-sdk/types@^3.1.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/types/-/types-3.32.0.tgz#67f5324e70272c17b67e19fb5c9647b08d9e40ed"
integrity sha512-ZkB+jFk6FZ9wA9wvQTqv6ao2sPSVeMlUF349NecPGLtpy2c/+RPxO10NmJ8yG9jFfmB0OXLnEPrDR7VinxTHNw==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/url-parser@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/url-parser/-/url-parser-3.32.0.tgz#0774ba821faba6a604db2ab024c096d239244a9f"
integrity sha512-K7hvWjFTAqfBhg9nP7zdfGqGY4ioOAqfDXCt+LYtoAkVcdyic+LcUgAB9pwxujN0SZ2hJYaBj93ERA/qJu/FVw==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/querystring-parser" "3.32.0"
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/util-base64-browser@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/util-base64-browser/-/util-base64-browser-3.32.0.tgz#595adfa53f9bda80cc740177b2eb04432662a275"
integrity sha512-fWheT9FmpKWbSqyk+IpiXFADUXOHhEIBf8ipDK4Rghy6NtlipJFYOeg6ACoafRG+1BV9M2zz3WqS3Xfnck3Muw==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/util-base64-node@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/util-base64-node/-/util-base64-node-3.32.0.tgz#eff85d68aa371c8c37e387b603b8ebf65b58db9f"
integrity sha512-Fy3rGPUjWVtuiosUhcKtnuhsCLs7upDWWk1D35op2hRgyUXypYdSD1+mdJyQTUFOrw5P2MlbrvBAbQA3TYv0KA==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/util-buffer-from" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/util-body-length-browser@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/util-body-length-browser/-/util-body-length-browser-3.32.0.tgz#9f67060ef770515d04b42f61ed555ab318892845"
integrity sha512-9Poj9JXMiyEM3mQdM0SgZGl7hjb8KvPS+HO3+BPoC5aDD5d10KXmC3rIxxV4YHM7wMbZZco7qhoyF9fCnXOiaQ==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/util-body-length-node@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/util-body-length-node/-/util-body-length-node-3.32.0.tgz#7ff8cc6e48ae723592a810f4eea73fbe9ed495e4"
integrity sha512-9o4ZhjkGsLBN2WIYHWEuHk4f/oFa17IIh8Errjhub/17MKd5uX5cPVw/Bs4tNIzdFh/mz+bcbOeEnBQirUpoPg==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/util-buffer-from@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/util-buffer-from/-/util-buffer-from-3.32.0.tgz#6a6309629ddc2b28a899ef05aba474fb38716d59"
integrity sha512-Vt6JQ48jYwnvPMJxv51Eh/DAS2ox/nNETxQjnpMnlKKkXmyxeH1nSQB47rgXkfmw4luvaRdiWCpx5XnU4dMgbQ==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/is-array-buffer" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/util-credentials@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/util-credentials/-/util-credentials-3.32.0.tgz#728cddfe3c6980f83a88fe71516654b0cc0a6801"
integrity sha512-iHk7opjLLw8gjJdu2ut4GC+KptsTFVABRg5NNVHE0VDjd2h7kaRFKiAsEgBqD8lqEU+06n+8mOjxKN1reRfnAw==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/shared-ini-file-loader" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/util-hex-encoding@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/util-hex-encoding/-/util-hex-encoding-3.32.0.tgz#78be4c186a6a3a59636471833d94bed4efbf6246"
integrity sha512-N8h5Ci74S+cahVJ0P4BWo4N1kSqsIYYzYylc5lNrrLH6oc34tg48yjJK4mKF3B0jkPZ01sb7yAufS89cPmOtgg==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
tslib "^2.3.0"
"@aws-sdk/util-locate-window@^3.0.0":
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/util-locate-window/-/util-locate-window-3.32.0.tgz#655fe4fbd7e3cbc05b630984c5813c6d9c4cee01"
integrity sha512-P5sOlu7AhzxhyUtKj4aYK35MrXFrt64XivwgAUo7h+ZUx6iWUEflpurMqm2dExUYNVnpGaeTKkNX8qdvbnDGZw==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/util-uri-escape@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/util-uri-escape/-/util-uri-escape-3.32.0.tgz#f5b43fced7e65012cd124028ff721fd22af09bb1"
integrity sha512-iFNCobc5OCVtTcNTFTUGB1ib5p+EOLV2s6KYej66dRUxBdioi4a2X63Exx/jOP7jS6TRTc5pTF6B+Z0uKjMe9w==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/util-user-agent-browser@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/util-user-agent-browser/-/util-user-agent-browser-3.32.0.tgz#6bcd9d4d4bd2419467ee34ea036ba84988960130"
integrity sha512-CaDg+lQaZLUwYtMq20FVgK8xz51zNGtolGblpM4ng6pZceH7EKSOgC5/E1VUb7O53vhpVlyVVFM1GD50QFOzcw==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
bowser "^2.11.0"
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/util-user-agent-node@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/util-user-agent-node/-/util-user-agent-node-3.32.0.tgz#6c838120764b2e9c061b78746acdea6fac4539d9"
integrity sha512-QmZGPSRXLNTo4QFLrYXRZu/sOWoWXvIugrTOv3acLlgj+/Vt8UdHWuhPJSgrFhQo1mtvvHixAMq10ELR5j/qNw==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/node-config-provider" "3.32.0"
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/util-utf8-browser@3.32.0", "@aws-sdk/util-utf8-browser@^3.0.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/util-utf8-browser/-/util-utf8-browser-3.32.0.tgz#049c26cfacf1db19e3b0c1841ece7d9b900a59bf"
integrity sha512-KjyGj1TFmR5siw5960hKaicdtyQJJDXgiXm0CM7PMXKLgrT8C2/PmVrpF2qYDGpGgfXVRgZNHNMv3XNMAw9vlw==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/util-utf8-node@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/util-utf8-node/-/util-utf8-node-3.32.0.tgz#24afeeba614eceb8ac9d6e38e7e13dbcb3aab0e6"
integrity sha512-a+CkvoVe4mCXWau+vyEn++Wjj9LhE3vrbqwt7R0knm/ep0SEnMnwEG0KFVogBK6Zfwf2tqAzT/0JFFZvd3DXTg==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/util-buffer-from" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/util-waiter@3.32.0":
version "3.32.0"
resolved "https://registry.yarnpkg.com/@aws-sdk/util-waiter/-/util-waiter-3.32.0.tgz#53f3764b6209fe4d406c85a2b1b04d23105a3f02"
integrity sha512-kd8RI2A8JO/55FL2AIzDHEd7b5KThU7+l7798fTUt2/2iWjIGDm8srGFCvlQFoo1zcgqtJCHz21x1gRNF2XvzA==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@aws-sdk/abort-controller" "3.32.0"
"@aws-sdk/types" "3.32.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib "^2.3.0"
Update dependency eslint to v7.20.0
2021-02-16 15:50:23 +03:00
"@babel/code-frame@7.12.11":
version "7.12.11"
resolved "https://registry.yarnpkg.com/@babel/code-frame/-/code-frame-7.12.11.tgz#f4ad435aa263db935b8f10f2c552d23fb716a63f"
integrity sha512-Zt1yodBx1UcyiePMSkWnU4hPqhwq7hGi2nFL1LeA3EUl+q2LQx16MISgJ0+z7dnmgvP9QtIleuETGOiOH1RcIw==
dependencies:
"@babel/highlight" "^7.10.4"
Lock file maintenance
2021-07-05 04:25:22 +03:00
"@babel/code-frame@^7.0.0", "@babel/code-frame@^7.14.5":
version "7.14.5"
resolved "https://registry.yarnpkg.com/@babel/code-frame/-/code-frame-7.14.5.tgz#23b08d740e83f49c5e59945fbf1b43e80bbf4edb"
integrity sha512-9pzDqyc6OLDaqe+zbACgFkb6fKMNG6CObKpnYXChRsvYGyEdc7CA2BaqeOM+vOtCS5ndmJicPJhKAwYRI6UfFw==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
Lock file maintenance
2021-07-05 04:25:22 +03:00
"@babel/highlight" "^7.14.5"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Lock file maintenance
2021-08-09 03:03:02 +03:00
"@babel/compat-data@^7.15.0":
version "7.15.0"
resolved "https://registry.yarnpkg.com/@babel/compat-data/-/compat-data-7.15.0.tgz#2dbaf8b85334796cafbb0f5793a90a2fc010b176"
integrity sha512-0NqAC1IJE0S0+lL1SWFMxMkz1pKCNCjI4tr2Zx4LJSXxCLAdr6KyArnY+sno5m3yH9g737ygOyPABDsnXkpxiA==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
"@babel/core@^7.12.16":
Lock file maintenance
2021-09-06 03:36:57 +03:00
version "7.15.5"
resolved "https://registry.yarnpkg.com/@babel/core/-/core-7.15.5.tgz#f8ed9ace730722544609f90c9bb49162dc3bf5b9"
integrity sha512-pYgXxiwAgQpgM1bNkZsDEq85f0ggXMA5L7c+o3tskGMh2BunCI9QUwB9Z4jpvXUOuMdyGKiGKQiRe11VS6Jzvg==
Lock file maintenance
2021-07-05 04:25:22 +03:00
dependencies:
"@babel/code-frame" "^7.14.5"
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/generator" "^7.15.4"
"@babel/helper-compilation-targets" "^7.15.4"
"@babel/helper-module-transforms" "^7.15.4"
"@babel/helpers" "^7.15.4"
"@babel/parser" "^7.15.5"
"@babel/template" "^7.15.4"
"@babel/traverse" "^7.15.4"
"@babel/types" "^7.15.4"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
convert-source-map "^1.7.0"
debug "^4.1.0"
gensync "^1.0.0-beta.2"
json5 "^2.1.2"
semver "^6.3.0"
source-map "^0.5.0"
"@babel/eslint-parser@^7.12.16":
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "7.15.7"
resolved "https://registry.yarnpkg.com/@babel/eslint-parser/-/eslint-parser-7.15.7.tgz#2dc3d0ff0ea22bb1e08d93b4eeb1149bf1c75f2d"
integrity sha512-yJkHyomClm6A2Xzb8pdAo4HzYMSXFn1O5zrCYvbFP0yQFvHueLedV8WiEno8yJOKStjUXzBZzJFeWQ7b3YMsqQ==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
dependencies:
Lock file maintenance
2021-07-05 04:25:22 +03:00
eslint-scope "^5.1.1"
Lock file maintenance
2021-06-01 18:19:18 +03:00
eslint-visitor-keys "^2.1.0"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
semver "^6.3.0"
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/generator@^7.15.4":
version "7.15.4"
resolved "https://registry.yarnpkg.com/@babel/generator/-/generator-7.15.4.tgz#85acb159a267ca6324f9793986991ee2022a05b0"
integrity sha512-d3itta0tu+UayjEORPNz6e1T3FtvWlP5N4V5M+lhp/CxT4oAA7/NcScnpRyspUMLK6tu9MNHmQHxRykuN2R7hw==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
dependencies:
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/types" "^7.15.4"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
jsesc "^2.5.1"
source-map "^0.5.0"
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/helper-compilation-targets@^7.15.4":
version "7.15.4"
resolved "https://registry.yarnpkg.com/@babel/helper-compilation-targets/-/helper-compilation-targets-7.15.4.tgz#cf6d94f30fbefc139123e27dd6b02f65aeedb7b9"
integrity sha512-rMWPCirulnPSe4d+gwdWXLfAXTTBj8M3guAf5xFQJ0nvFY7tfNAFnWdqaHegHlgDZOCT4qvhF3BYlSJag8yhqQ==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
dependencies:
Lock file maintenance
2021-08-09 03:03:02 +03:00
"@babel/compat-data" "^7.15.0"
Lock file maintenance
2021-07-05 04:25:22 +03:00
"@babel/helper-validator-option" "^7.14.5"
Lock file maintenance
2021-06-01 18:19:18 +03:00
browserslist "^4.16.6"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
semver "^6.3.0"
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/helper-function-name@^7.15.4":
version "7.15.4"
resolved "https://registry.yarnpkg.com/@babel/helper-function-name/-/helper-function-name-7.15.4.tgz#845744dafc4381a4a5fb6afa6c3d36f98a787ebc"
integrity sha512-Z91cOMM4DseLIGOnog+Z8OI6YseR9bua+HpvLAQ2XayUGU+neTtX+97caALaLdyu53I/fjhbeCnWnRH1O3jFOw==
Lock file maintenance
2021-07-05 04:25:22 +03:00
dependencies:
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/helper-get-function-arity" "^7.15.4"
"@babel/template" "^7.15.4"
"@babel/types" "^7.15.4"
Lock file maintenance
2021-07-05 04:25:22 +03:00
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/helper-get-function-arity@^7.15.4":
version "7.15.4"
resolved "https://registry.yarnpkg.com/@babel/helper-get-function-arity/-/helper-get-function-arity-7.15.4.tgz#098818934a137fce78b536a3e015864be1e2879b"
integrity sha512-1/AlxSF92CmGZzHnC515hm4SirTxtpDnLEJ0UyEMgTMZN+6bxXKg04dKhiRx5Enel+SUA1G1t5Ed/yQia0efrA==
Lock file maintenance
2021-07-05 04:25:22 +03:00
dependencies:
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/types" "^7.15.4"
Lock file maintenance
2021-07-05 04:25:22 +03:00
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/helper-hoist-variables@^7.15.4":
version "7.15.4"
resolved "https://registry.yarnpkg.com/@babel/helper-hoist-variables/-/helper-hoist-variables-7.15.4.tgz#09993a3259c0e918f99d104261dfdfc033f178df"
integrity sha512-VTy085egb3jUGVK9ycIxQiPbquesq0HUQ+tPO0uv5mPEBZipk+5FkRKiWq5apuyTE9FUrjENB0rCf8y+n+UuhA==
Lock file maintenance
2021-07-05 04:25:22 +03:00
dependencies:
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/types" "^7.15.4"
Lock file maintenance
2021-07-05 04:25:22 +03:00
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/helper-member-expression-to-functions@^7.15.4":
version "7.15.4"
resolved "https://registry.yarnpkg.com/@babel/helper-member-expression-to-functions/-/helper-member-expression-to-functions-7.15.4.tgz#bfd34dc9bba9824a4658b0317ec2fd571a51e6ef"
integrity sha512-cokOMkxC/BTyNP1AlY25HuBWM32iCEsLPI4BHDpJCHHm1FU2E7dKWWIXJgQgSFiu4lp8q3bL1BIKwqkSUviqtA==
Lock file maintenance
2021-07-05 04:25:22 +03:00
dependencies:
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/types" "^7.15.4"
Lock file maintenance
2021-07-05 04:25:22 +03:00
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/helper-module-imports@^7.15.4":
version "7.15.4"
resolved "https://registry.yarnpkg.com/@babel/helper-module-imports/-/helper-module-imports-7.15.4.tgz#e18007d230632dea19b47853b984476e7b4e103f"
integrity sha512-jeAHZbzUwdW/xHgHQ3QmWR4Jg6j15q4w/gCfwZvtqOxoo5DKtLHk8Bsf4c5RZRC7NmLEs+ohkdq8jFefuvIxAA==
Lock file maintenance
2021-07-05 04:25:22 +03:00
dependencies:
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/types" "^7.15.4"
Lock file maintenance
2021-07-05 04:25:22 +03:00
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/helper-module-transforms@^7.15.4":
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "7.15.7"
resolved "https://registry.yarnpkg.com/@babel/helper-module-transforms/-/helper-module-transforms-7.15.7.tgz#7da80c8cbc1f02655d83f8b79d25866afe50d226"
integrity sha512-ZNqjjQG/AuFfekFTY+7nY4RgBSklgTu970c7Rj3m/JOhIu5KPBUuTA9AY6zaKcUvk4g6EbDXdBnhi35FAssdSw==
Lock file maintenance
2021-07-05 04:25:22 +03:00
dependencies:
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/helper-module-imports" "^7.15.4"
"@babel/helper-replace-supers" "^7.15.4"
"@babel/helper-simple-access" "^7.15.4"
"@babel/helper-split-export-declaration" "^7.15.4"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@babel/helper-validator-identifier" "^7.15.7"
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/template" "^7.15.4"
"@babel/traverse" "^7.15.4"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@babel/types" "^7.15.6"
Lock file maintenance
2021-07-05 04:25:22 +03:00
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/helper-optimise-call-expression@^7.15.4":
version "7.15.4"
resolved "https://registry.yarnpkg.com/@babel/helper-optimise-call-expression/-/helper-optimise-call-expression-7.15.4.tgz#f310a5121a3b9cc52d9ab19122bd729822dee171"
integrity sha512-E/z9rfbAOt1vDW1DR7k4SzhzotVV5+qMciWV6LaG1g4jeFrkDlJedjtV4h0i4Q/ITnUu+Pk08M7fczsB9GXBDw==
Lock file maintenance
2021-07-05 04:25:22 +03:00
dependencies:
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/types" "^7.15.4"
Lock file maintenance
2021-07-05 04:25:22 +03:00
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/helper-replace-supers@^7.15.4":
version "7.15.4"
resolved "https://registry.yarnpkg.com/@babel/helper-replace-supers/-/helper-replace-supers-7.15.4.tgz#52a8ab26ba918c7f6dee28628b07071ac7b7347a"
integrity sha512-/ztT6khaXF37MS47fufrKvIsiQkx1LBRvSJNzRqmbyeZnTwU9qBxXYLaaT/6KaxfKhjs2Wy8kG8ZdsFUuWBjzw==
Lock file maintenance
2021-07-05 04:25:22 +03:00
dependencies:
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/helper-member-expression-to-functions" "^7.15.4"
"@babel/helper-optimise-call-expression" "^7.15.4"
"@babel/traverse" "^7.15.4"
"@babel/types" "^7.15.4"
Lock file maintenance
2021-07-05 04:25:22 +03:00
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/helper-simple-access@^7.15.4":
version "7.15.4"
resolved "https://registry.yarnpkg.com/@babel/helper-simple-access/-/helper-simple-access-7.15.4.tgz#ac368905abf1de8e9781434b635d8f8674bcc13b"
integrity sha512-UzazrDoIVOZZcTeHHEPYrr1MvTR/K+wgLg6MY6e1CJyaRhbibftF6fR2KU2sFRtI/nERUZR9fBd6aKgBlIBaPg==
Lock file maintenance
2021-07-05 04:25:22 +03:00
dependencies:
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/types" "^7.15.4"
Lock file maintenance
2021-07-05 04:25:22 +03:00
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/helper-split-export-declaration@^7.15.4":
version "7.15.4"
resolved "https://registry.yarnpkg.com/@babel/helper-split-export-declaration/-/helper-split-export-declaration-7.15.4.tgz#aecab92dcdbef6a10aa3b62ab204b085f776e257"
integrity sha512-HsFqhLDZ08DxCpBdEVtKmywj6PQbwnF6HHybur0MAnkAKnlS6uHkwnmRIkElB2Owpfb4xL4NwDmDLFubueDXsw==
Lock file maintenance
2021-07-05 04:25:22 +03:00
dependencies:
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/types" "^7.15.4"
Lock file maintenance
2021-07-05 04:25:22 +03:00
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@babel/helper-validator-identifier@^7.14.5", "@babel/helper-validator-identifier@^7.14.9", "@babel/helper-validator-identifier@^7.15.7":
version "7.15.7"
resolved "https://registry.yarnpkg.com/@babel/helper-validator-identifier/-/helper-validator-identifier-7.15.7.tgz#220df993bfe904a4a6b02ab4f3385a5ebf6e2389"
integrity sha512-K4JvCtQqad9OY2+yTU8w+E82ywk/fe+ELNlt1G8z3bVGlZfn/hOcQQsUhGhW/N+tb3fxK800wLtKOE/aM0m72w==
Lock file maintenance
2021-07-05 04:25:22 +03:00
"@babel/helper-validator-option@^7.14.5":
version "7.14.5"
resolved "https://registry.yarnpkg.com/@babel/helper-validator-option/-/helper-validator-option-7.14.5.tgz#6e72a1fff18d5dfcb878e1e62f1a021c4b72d5a3"
integrity sha512-OX8D5eeX4XwcroVW45NMvoYaIuFI+GQpA2a8Gi+X/U/cDUIRsV37qQfF905F0htTRCREQIB4KqPeaveRJUl3Ow==
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/helpers@^7.15.4":
version "7.15.4"
resolved "https://registry.yarnpkg.com/@babel/helpers/-/helpers-7.15.4.tgz#5f40f02050a3027121a3cf48d497c05c555eaf43"
integrity sha512-V45u6dqEJ3w2rlryYYXf6i9rQ5YMNu4FLS6ngs8ikblhu2VdR1AqAd6aJjBzmf2Qzh6KOLqKHxEN9+TFbAkAVQ==
Lock file maintenance
2021-07-05 04:25:22 +03:00
dependencies:
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/template" "^7.15.4"
"@babel/traverse" "^7.15.4"
"@babel/types" "^7.15.4"
Lock file maintenance
2021-07-05 04:25:22 +03:00
"@babel/highlight@^7.10.4", "@babel/highlight@^7.14.5":
version "7.14.5"
resolved "https://registry.yarnpkg.com/@babel/highlight/-/highlight-7.14.5.tgz#6861a52f03966405001f6aa534a01a24d99e8cd9"
integrity sha512-qf9u2WFWVV0MppaL877j2dBtQIDgmidgjGk5VIMw3OadXvYaXn66U1BFlH2t4+t3i+8PhedppRv+i40ABzd+gg==
dependencies:
"@babel/helper-validator-identifier" "^7.14.5"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
chalk "^2.0.0"
js-tokens "^4.0.0"
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/parser@^7.15.4", "@babel/parser@^7.15.5":
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "7.15.7"
resolved "https://registry.yarnpkg.com/@babel/parser/-/parser-7.15.7.tgz#0c3ed4a2eb07b165dfa85b3cc45c727334c4edae"
integrity sha512-rycZXvQ+xS9QyIcJ9HXeDWf1uxqlbVFAUq0Rq0dbc50Zb/+wUe/ehyfzGfm9KZZF0kBejYgxltBXocP+gKdL2g==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
Added support for graceful job shutdown and worker threads refs #12402 - With bumped version of job-manager it offloads job procesing into separate worker thread. Having jobs run out of main Ghost process even loop allows for safe job execution, which does not block Ghost from serving requests or performing other functions without a delay - Added experimental data access to 'testmode' jobs. This should serve as an illustration of how to access data from the job layer
2020-11-23 07:17:49 +03:00
"@babel/runtime@^7.10.5", "@babel/runtime@^7.12.5":
Lock file maintenance
2021-09-06 03:36:57 +03:00
version "7.15.4"
resolved "https://registry.yarnpkg.com/@babel/runtime/-/runtime-7.15.4.tgz#fd17d16bfdf878e6dd02d19753a39fa8a8d9c84a"
integrity sha512-99catp6bHCaxr4sJ/DbTGgHS4+Rs2RVd2g7iOap6SLGPDknRK9ztKNsE/Fg6QhSeh1FGE5f6gHGQmvvn3I3xhw==
Added support for jobs defined as modules no issue - These changes should allow easy testing of scheduled jobs and provide an implementation example for future jobs within Ghost - Added experimental support to run jobs based on functions defined in modules - Extendeded testmode "schedule" endpoint with an optional job name parameter which picks up job from "jobs" folder - Adjusted scheduleJob method use and passed "schedule" as first parameter - Bumped job-manager version to allow for all new functionality
2020-11-10 07:29:35 +03:00
dependencies:
regenerator-runtime "^0.13.4"
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/template@^7.15.4":
version "7.15.4"
resolved "https://registry.yarnpkg.com/@babel/template/-/template-7.15.4.tgz#51898d35dcf3faa670c4ee6afcfd517ee139f194"
integrity sha512-UgBAfEa1oGuYgDIPM2G+aHa4Nlo9Lh6mGD2bDBGMTbYnc38vulXPuC1MGjYILIEmlwl6Rd+BPR9ee3gm20CBtg==
Lock file maintenance
2021-07-05 04:25:22 +03:00
dependencies:
"@babel/code-frame" "^7.14.5"
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/parser" "^7.15.4"
"@babel/types" "^7.15.4"
Lock file maintenance
2021-07-05 04:25:22 +03:00
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/traverse@^7.15.4":
version "7.15.4"
resolved "https://registry.yarnpkg.com/@babel/traverse/-/traverse-7.15.4.tgz#ff8510367a144bfbff552d9e18e28f3e2889c22d"
integrity sha512-W6lQD8l4rUbQR/vYgSuCAE75ADyyQvOpFVsvPPdkhf6lATXAsQIG9YdtOcu8BB1dZ0LKu+Zo3c1wEcbKeuhdlA==
Lock file maintenance
2021-07-05 04:25:22 +03:00
dependencies:
"@babel/code-frame" "^7.14.5"
Lock file maintenance
2021-09-06 03:36:57 +03:00
"@babel/generator" "^7.15.4"
"@babel/helper-function-name" "^7.15.4"
"@babel/helper-hoist-variables" "^7.15.4"
"@babel/helper-split-export-declaration" "^7.15.4"
"@babel/parser" "^7.15.4"
"@babel/types" "^7.15.4"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
debug "^4.1.0"
globals "^11.1.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@babel/types@^7.15.4", "@babel/types@^7.15.6":
version "7.15.6"
resolved "https://registry.yarnpkg.com/@babel/types/-/types-7.15.6.tgz#99abdc48218b2881c058dd0a7ab05b99c9be758f"
integrity sha512-BPU+7QhqNjmWyDO0/vitH/CuhpV8ZmK1wpKva8nuyNF5MJfuRNWMc+hc14+u9xT93kvykMdncrJT19h74uB1Ig==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
dependencies:
Lock file maintenance
2021-08-02 05:46:09 +03:00
"@babel/helper-validator-identifier" "^7.14.9"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
to-fast-properties "^2.0.0"
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
"@bcoe/v8-coverage@^0.2.3":
version "0.2.3"
resolved "https://registry.yarnpkg.com/@bcoe/v8-coverage/-/v8-coverage-0.2.3.tgz#75a2e8b51cb758a7553d6804a5932d7aace75c39"
integrity sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==
Bumped selected dependencies to unpin sub-dependencies no issue - we've been unpinning dependencies in our libraries to remove duplicates - this commit bumps packages from the Utils repo and NQL, all of which contain changes to unpin their own dependencies
2021-04-19 12:46:47 +03:00
"@breejs/later@^4.0.2":
Added scheduled job support in testmode no issue - We need an ability to early test scheduled jobs to refine the new feature and it's API. Should be used with caution - To schedule an example scheduled job every 30 seconds run following request: `curl http://localhost:2368/ghost/api/schedule/every%2030%20seconds`
2020-11-05 07:46:57 +03:00
version "4.0.2"
resolved "https://registry.yarnpkg.com/@breejs/later/-/later-4.0.2.tgz#38c85cc98b717c7a196f87238090adaea01f8c9e"
integrity sha512-EN0SlbyYouBdtZis1htdsgGlwFePzkXPwdIeqaBaavxkJT1G2/bitc2LSixjv45z2njXslxlJI1mW2O/Gmrb+A==
Update dependency @tryghost/members-api to v0.27.0
2020-08-17 23:04:08 +03:00
"@distributed-systems/callsite@^1.1.0", "@distributed-systems/callsite@^1.1.1":
version "1.1.1"
resolved "https://registry.yarnpkg.com/@distributed-systems/callsite/-/callsite-1.1.1.tgz#56a9e1a1d16ae6264ea3f51eea3782848fc27a88"
integrity sha512-YSA3kWjClnLmFKNpdQCZlMQoWI4N6KpR/T4MaREEQczaehcagsVorT3YDV17KR6zuJXDs7f+kkSt1o/D6SufAQ==
dependencies:
ee-log "^3.0.0"
section-tests "^1.3.0"
Update dependency ghost-ignition to v4.4.1
2021-01-21 21:16:29 +03:00
"@elastic/elasticsearch@^7.10.0":
Lock file maintenance
2021-09-06 03:36:57 +03:00
version "7.14.1"
resolved "https://registry.yarnpkg.com/@elastic/elasticsearch/-/elasticsearch-7.14.1.tgz#da2f86a550e75c093cc1114115e8719cc7edbfc7"
integrity sha512-pnbh8ddXdxlQdZZfMCwxIIv8KscdhJysVI4ZAc9pBl/cUrLinAj+0gIyTgWA30cOFoKZSLlB9ZXGx6R0SJkIwg==
Update dependency ghost-ignition to v4.4.1
2021-01-21 21:16:29 +03:00
dependencies:
Lock file maintenance
2021-05-05 18:56:03 +03:00
debug "^4.3.1"
Update dependency ghost-ignition to v4.4.1
2021-01-21 21:16:29 +03:00
hpagent "^0.1.1"
Lock file maintenance
2021-05-05 18:56:03 +03:00
ms "^2.1.3"
Lock file maintenance
2021-06-01 18:19:18 +03:00
secure-json-parse "^2.4.0"
Update dependency ghost-ignition to v4.4.1
2021-01-21 21:16:29 +03:00
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
"@ember-data/rfc395-data@^0.0.4":
version "0.0.4"
resolved "https://registry.yarnpkg.com/@ember-data/rfc395-data/-/rfc395-data-0.0.4.tgz#ecb86efdf5d7733a76ff14ea651a1b0ed1f8a843"
integrity sha512-tGRdvgC9/QMQSuSuJV45xoyhI0Pzjm7A9o/MVVA3HakXIImJbbzx/k/6dO9CUEQXIyS2y0fW6C1XaYOG7rY0FQ==
Update dependency eslint to v7.31.0
2021-07-19 04:06:44 +03:00
"@eslint/eslintrc@^0.4.3":
version "0.4.3"
resolved "https://registry.yarnpkg.com/@eslint/eslintrc/-/eslintrc-0.4.3.tgz#9e42981ef035beb3dd49add17acb96e8ff6f394c"
integrity sha512-J6KFFz5QCYUJq3pf0mjEcCJVERbzv71PUIDczuh9JkwGEzced6CO5ADLHB1rbf/+oPBtoPfMYNOpGDzCANlbXw==
Update dependency eslint to v7.8.0
2020-09-01 02:03:55 +03:00
dependencies:
ajv "^6.12.4"
debug "^4.1.1"
Update dependency eslint to v7.8.1
2020-09-02 00:02:23 +03:00
espree "^7.3.0"
Update dependency eslint to v7.28.0
2021-06-05 02:10:06 +03:00
globals "^13.9.0"
Update dependency eslint to v7.8.1
2020-09-02 00:02:23 +03:00
ignore "^4.0.6"
Update dependency eslint to v7.8.0
2020-09-01 02:03:55 +03:00
import-fresh "^3.2.1"
Update dependency eslint to v7.8.1
2020-09-02 00:02:23 +03:00
js-yaml "^3.13.1"
minimatch "^3.0.4"
Update dependency eslint to v7.8.0
2020-09-01 02:03:55 +03:00
strip-json-comments "^3.1.1"
Lock file maintenance
2021-08-30 06:24:29 +03:00
"@gar/promisify@^1.0.1":
version "1.1.2"
resolved "https://registry.yarnpkg.com/@gar/promisify/-/promisify-1.1.2.tgz#30aa825f11d438671d585bd44e7fd564535fc210"
integrity sha512-82cpyJyKRoQoRi+14ibCeGPu0CwypgtBAdBhq1WfvagpCZNKqwXbKwXllYSMG91DhmG4jt9gN8eP6lGOtozuaw==
Update Test & linting packages
2021-07-05 03:37:17 +03:00
"@humanwhocodes/config-array@^0.5.0":
version "0.5.0"
resolved "https://registry.yarnpkg.com/@humanwhocodes/config-array/-/config-array-0.5.0.tgz#1407967d4c6eecd7388f83acf1eaf4d0c6e58ef9"
integrity sha512-FagtKFz74XrTl7y6HCzQpwDfXP0yhxe9lHLD1UZxjvZIcbyRz8zTFF/yYNfSfzU414eDwZ1SrO0Qvtyf+wFMQg==
dependencies:
"@humanwhocodes/object-schema" "^1.2.0"
debug "^4.1.1"
minimatch "^3.0.4"
"@humanwhocodes/object-schema@^1.2.0":
version "1.2.0"
resolved "https://registry.yarnpkg.com/@humanwhocodes/object-schema/-/object-schema-1.2.0.tgz#87de7af9c231826fdd68ac7258f77c429e0e5fcf"
integrity sha512-wdppn25U8z/2yiaT6YGquE6X8sSv7hNMWSXYSSU1jGv/yd6XqjXgTDJ8KP4NgjTXfJ3GbRjeeb8RTV7a/VpM+w==
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
"@istanbuljs/schema@^0.1.2":
version "0.1.3"
resolved "https://registry.yarnpkg.com/@istanbuljs/schema/-/schema-0.1.3.tgz#e45e384e4b8ec16bce2fd903af78450f6bf7ec98"
integrity sha512-ZXRY4jNvVgSVQ8DL3LTcakaAtXwTVUxE81hslsyD2AtoXW/wVob10HkOJ1X/pAlcI7D+2YoZKg5do8G/w6RYgA==
Update dependency @lodder/grunt-postcss to v3.0.1
2021-04-14 13:11:35 +03:00
"@lodder/grunt-postcss@3.0.1":
version "3.0.1"
resolved "https://registry.yarnpkg.com/@lodder/grunt-postcss/-/grunt-postcss-3.0.1.tgz#38724fa80de5605419049113b9564782a7bbf7c6"
integrity sha512-boAIrpGJQYxiZ/qI7BRhxNHzNsv6kPlqRpr4XhnTHNjf2RYAqDTL5CMRUcExv8crVduKkhOSSr+pnIQrI3pwYg==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
dependencies:
Update dependency @lodder/grunt-postcss to v3.0.1
2021-04-14 13:11:35 +03:00
diff "^5.0.0"
Update dependency @lodder/grunt-postcss to v3
2020-10-20 11:41:14 +03:00
maxmin "^3.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
"@metascraper/helpers@^5.24.7":
version "5.24.7"
resolved "https://registry.yarnpkg.com/@metascraper/helpers/-/helpers-5.24.7.tgz#c947438d82facd2eb5df1ad4008dffa032634e2d"
integrity sha512-6pVFzV5E7rLnaOrTkhZs9SQfxaCOt8YrvYYY2kT4exW+dmhPHY2Gsm5+ezaqiWbzAol0y1GDdihweprBDgnZGg==
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
dependencies:
audio-extensions "0.0.0"
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
chrono-node "2.3.2"
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
condense-whitespace "~2.0.0"
Update metascraper to v5.24.6
2021-09-13 11:35:39 +03:00
entities "~3.0.1"
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
file-extension "~4.0.5"
has-values "~2.0.1"
image-extensions "~1.1.0"
is-relative-url "~3.0.0"
is-uri "~1.2.0"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
iso-639-3 "~2.2.0"
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
isostring "0.0.1"
Update metascraper to v5.24.2
2021-08-16 14:12:26 +03:00
jsdom "~17.0.0"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
lodash "~4.17.21"
memoize-one "~5.2.1"
microsoft-capitalize "~1.0.5"
Update metascraper to v5.24.6
2021-09-13 11:35:39 +03:00
mime-types "~2.1.32"
Update metascraper to v5.22.2
2021-06-23 14:32:05 +03:00
normalize-url "~6.1.0"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
smartquotes "~2.3.2"
url-regex-safe "~2.0.2"
Update metascraper to v5.22.1
2021-06-09 18:53:54 +03:00
video-extensions "~1.2.0"
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
Updated @tryghost/bookshelf-plugins & @nexes/nql (#13212) refs https://github.com/TryGhost/Team/issues/944 This updates both libraries to include support for custom foreign keys on relations, as well as relations with a "virtual" table, defined by a query. This will allow us to filter members based on aggregates of their events, as well as on properties of their stripe subscriptions which are linked not by the `id` column but by thir external stripe id, e.g. `customer_id`.
2021-08-04 19:01:23 +03:00
"@nexes/mongo-knex@0.5.0":
version "0.5.0"
resolved "https://registry.yarnpkg.com/@nexes/mongo-knex/-/mongo-knex-0.5.0.tgz#58566614ca240bdf84a270117d72b46511b17743"
integrity sha512-6wiTbJpy7I2xsxuvwavuwDEtJfoiaxAy4PGPFEiVziQyH3SjOFbwyqnlrKPvhNHCj2YFQHcE8rnJ3JawJVtXOA==
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
dependencies:
Update dependency @nexes/nql to v0.5.2
2021-04-19 17:14:58 +03:00
debug "^4.3.1"
lodash "^4.17.21"
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
Update dependency @nexes/nql to v0.5.2
2021-04-19 17:14:58 +03:00
"@nexes/mongo-utils@^0.3.1":
Bumped selected dependencies to unpin sub-dependencies no issue - we've been unpinning dependencies in our libraries to remove duplicates - this commit bumps packages from the Utils repo and NQL, all of which contain changes to unpin their own dependencies
2021-04-19 12:46:47 +03:00
version "0.3.1"
resolved "https://registry.yarnpkg.com/@nexes/mongo-utils/-/mongo-utils-0.3.1.tgz#3a1b89ec4585478dbb41277dc1fdb2689deb3b9d"
integrity sha512-SpDr6i98GeGA2vajQtliAsUqvFbawmzC6wgaC9/+9P8R0/o+71WTzvyPNYHnXNDqy0dpxq2FX78DdN6FTSKjKA==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
dependencies:
lodash "^4.17.11"
Update dependency @nexes/nql to v0.5.2
2021-04-19 17:14:58 +03:00
"@nexes/nql-lang@^0.0.1":
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
version "0.0.1"
✨Added advanced filtering to Dynamic Routing (#9757) refs #9601, refs #9742 - Upgraded NQL to 0.1.0 - The new version of NQL supports aliases e.g. `tag: tags.slug`, which makes it possible to define `filter=tag:support` - Furthermore, this allows us to support advanced filtering like tag:[a,b] - In dynamic routing, we use mingo via NQL which has a slightly different feature set to GQL in the API: - AND NOT, OR and other advanced logic combos DO work on joined tables - Counts are not yet supported - The Dynamic Routing beta docs should describe that API filtering and Dynamic Routing filtering is different
2018-08-03 14:15:16 +03:00
resolved "https://registry.yarnpkg.com/@nexes/nql-lang/-/nql-lang-0.0.1.tgz#a13c023873f9bc11b9e4e284449c6cfbeccc8011"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-oTwCOHP5vBG55OKERJxs++zMgBE=
✨Added advanced filtering to Dynamic Routing (#9757) refs #9601, refs #9742 - Upgraded NQL to 0.1.0 - The new version of NQL supports aliases e.g. `tag: tags.slug`, which makes it possible to define `filter=tag:support` - Furthermore, this allows us to support advanced filtering like tag:[a,b] - In dynamic routing, we use mingo via NQL which has a slightly different feature set to GQL in the API: - AND NOT, OR and other advanced logic combos DO work on joined tables - Counts are not yet supported - The Dynamic Routing beta docs should describe that API filtering and Dynamic Routing filtering is different
2018-08-03 14:15:16 +03:00
Updated @tryghost/bookshelf-plugins & @nexes/nql (#13212) refs https://github.com/TryGhost/Team/issues/944 This updates both libraries to include support for custom foreign keys on relations, as well as relations with a "virtual" table, defined by a query. This will allow us to filter members based on aggregates of their events, as well as on properties of their stripe subscriptions which are linked not by the `id` column but by thir external stripe id, e.g. `customer_id`.
2021-08-04 19:01:23 +03:00
"@nexes/nql@0.6.0":
version "0.6.0"
resolved "https://registry.yarnpkg.com/@nexes/nql/-/nql-0.6.0.tgz#aec2d36d0ff5300b79e950a37f8c29b195f8152b"
integrity sha512-iI5fQPVfBAX9iM6P3S35XQhp7z7OS+7Ju7GMJGPxouBSDOkppNKh3zc4QGnrt9oMwbUN4hkZ2dsMwLs9VLmDAQ==
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
dependencies:
Updated @tryghost/bookshelf-plugins & @nexes/nql (#13212) refs https://github.com/TryGhost/Team/issues/944 This updates both libraries to include support for custom foreign keys on relations, as well as relations with a "virtual" table, defined by a query. This will allow us to filter members based on aggregates of their events, as well as on properties of their stripe subscriptions which are linked not by the `id` column but by thir external stripe id, e.g. `customer_id`.
2021-08-04 19:01:23 +03:00
"@nexes/mongo-knex" "0.5.0"
Update dependency @nexes/nql to v0.5.2
2021-04-19 17:14:58 +03:00
"@nexes/mongo-utils" "^0.3.1"
"@nexes/nql-lang" "^0.0.1"
mingo "^2.2.2"
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
Lock file maintenance
2021-08-30 06:24:29 +03:00
"@npmcli/fs@^1.0.0":
version "1.0.0"
resolved "https://registry.yarnpkg.com/@npmcli/fs/-/fs-1.0.0.tgz#589612cfad3a6ea0feafcb901d29c63fd52db09f"
integrity sha512-8ltnOpRR/oJbOp8vaGUnipOi3bqkcW+sLHFlyXIr08OGHmVJLB1Hn7QtGXbYcpVtH1gAYZTlmDXtE4YV0+AMMQ==
dependencies:
"@gar/promisify" "^1.0.1"
semver "^7.3.5"
Lock file maintenance
2021-06-01 18:19:18 +03:00
"@npmcli/move-file@^1.0.1":
version "1.1.2"
resolved "https://registry.yarnpkg.com/@npmcli/move-file/-/move-file-1.1.2.tgz#1a82c3e372f7cae9253eb66d72543d6b8685c674"
integrity sha512-1SUf/Cg2GzGDyaf15aR9St9TWlb+XvbZXWpDx8YKs7MLzMH/BCeopv+y9vzrzgkfykCGuWOlSu3mZhj2+FQcrg==
dependencies:
mkdirp "^1.0.4"
rimraf "^3.0.2"
Update dependency jwks-rsa to v2
2021-04-15 19:03:37 +03:00
"@panva/asn1.js@^1.0.0":
version "1.0.0"
resolved "https://registry.yarnpkg.com/@panva/asn1.js/-/asn1.js-1.0.0.tgz#dd55ae7b8129e02049f009408b97c61ccf9032f6"
integrity sha512-UdkG3mLEqXgnlKsWanWcgb6dOjUzJ+XC5f+aWw30qrtjxeNUSfKX1cd5FBzOaXQumoe9nIqeZUvrRJS03HCCtw==
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
"@segment/loosely-validate-event@^2.0.0":
version "2.0.0"
resolved "https://registry.yarnpkg.com/@segment/loosely-validate-event/-/loosely-validate-event-2.0.0.tgz#87dfc979e5b4e7b82c5f1d8b722dfd5d77644681"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-ZMCSfztDBqwotkl848ODgVcAmN4OItEWDCkshcKz0/W6gGSQayuuCtWV/MlodFivAZD793d6UgANd6wCXUfrIw==
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
dependencies:
component-type "^1.2.1"
join-component "^1.1.0"
Update dependency @sentry/node to v6.13.2
2021-09-21 19:32:20 +03:00
"@sentry/core@6.13.2":
version "6.13.2"
resolved "https://registry.yarnpkg.com/@sentry/core/-/core-6.13.2.tgz#2ce164f81667aa89cd116f807d772b4718434583"
integrity sha512-snXNNFLwlS7yYxKTX4DBXebvJK+6ikBWN6noQ1CHowvM3ReFBlrdrs0Z0SsSFEzXm2S4q7f6HHbm66GSQZ/8FQ==
dependencies:
"@sentry/hub" "6.13.2"
"@sentry/minimal" "6.13.2"
"@sentry/types" "6.13.2"
"@sentry/utils" "6.13.2"
Update dependency @sentry/node to v6.11.0
2021-08-06 17:30:33 +03:00
tslib "^1.9.3"
Update dependency @sentry/node to v6.13.2
2021-09-21 19:32:20 +03:00
"@sentry/hub@6.13.2":
version "6.13.2"
resolved "https://registry.yarnpkg.com/@sentry/hub/-/hub-6.13.2.tgz#ebc66fd55c96c7686a53ffd3521b6a63f883bb79"
integrity sha512-sppSuJdNMiMC/vFm/dQowCBh11uTrmvks00fc190YWgxHshodJwXMdpc+pN61VSOmy2QA4MbQ5aMAgHzPzel3A==
Update dependency @sentry/node to v6.11.0
2021-08-06 17:30:33 +03:00
dependencies:
Update dependency @sentry/node to v6.13.2
2021-09-21 19:32:20 +03:00
"@sentry/types" "6.13.2"
"@sentry/utils" "6.13.2"
Update dependency @sentry/node to v6.11.0
2021-08-06 17:30:33 +03:00
tslib "^1.9.3"
Update dependency @sentry/node to v6.13.2
2021-09-21 19:32:20 +03:00
"@sentry/minimal@6.13.2":
version "6.13.2"
resolved "https://registry.yarnpkg.com/@sentry/minimal/-/minimal-6.13.2.tgz#de3ecc62b9463bf56ccdbcf4c75f7ea1aeeebc11"
integrity sha512-6iJfEvHzzpGBHDfLxSHcGObh73XU1OSQKWjuhDOe7UQDyI4BQmTfcXAC+Fr8sm8C/tIsmpVi/XJhs8cubFdSMw==
Update dependency @sentry/node to v6.11.0
2021-08-06 17:30:33 +03:00
dependencies:
Update dependency @sentry/node to v6.13.2
2021-09-21 19:32:20 +03:00
"@sentry/hub" "6.13.2"
"@sentry/types" "6.13.2"
Update dependency @sentry/node to v6.11.0
2021-08-06 17:30:33 +03:00
tslib "^1.9.3"
Update dependency @sentry/node to v6.13.2
2021-09-21 19:32:20 +03:00
"@sentry/node@6.13.2":
version "6.13.2"
resolved "https://registry.yarnpkg.com/@sentry/node/-/node-6.13.2.tgz#6f5ee51eacad19b59e6ffb70b2d0e14396fd6233"
integrity sha512-0Vw22amG143MTiNaSny66YGU3+uW7HxyGI9TLGE7aJY1nNmC0DE+OgqQYGBRCrrPu+VFXRDxrOg9b15A1gKqjA==
Update dependency @sentry/node to v6.11.0
2021-08-06 17:30:33 +03:00
dependencies:
Update dependency @sentry/node to v6.13.2
2021-09-21 19:32:20 +03:00
"@sentry/core" "6.13.2"
"@sentry/hub" "6.13.2"
"@sentry/tracing" "6.13.2"
"@sentry/types" "6.13.2"
"@sentry/utils" "6.13.2"
Update dependency @sentry/node to v6.11.0
2021-08-06 17:30:33 +03:00
cookie "^0.4.1"
https-proxy-agent "^5.0.0"
lru_map "^0.3.3"
tslib "^1.9.3"
Update dependency @sentry/node to v6.13.2
2021-09-21 19:32:20 +03:00
"@sentry/tracing@6.13.2":
version "6.13.2"
resolved "https://registry.yarnpkg.com/@sentry/tracing/-/tracing-6.13.2.tgz#512389ba459f48ae75e14f1528ab062dc46e4956"
integrity sha512-bHJz+C/nd6biWTNcYAu91JeRilsvVgaye4POkdzWSmD0XoLWHVMrpCQobGpXe7onkp2noU3YQjhqgtBqPHtnpw==
Update dependency @sentry/node to v6.11.0
2021-08-06 17:30:33 +03:00
dependencies:
Update dependency @sentry/node to v6.13.2
2021-09-21 19:32:20 +03:00
"@sentry/hub" "6.13.2"
"@sentry/minimal" "6.13.2"
"@sentry/types" "6.13.2"
"@sentry/utils" "6.13.2"
Update dependency @sentry/node to v6.11.0
2021-08-06 17:30:33 +03:00
tslib "^1.9.3"
Update dependency @sentry/node to v6.13.2
2021-09-21 19:32:20 +03:00
"@sentry/types@6.13.2":
version "6.13.2"
resolved "https://registry.yarnpkg.com/@sentry/types/-/types-6.13.2.tgz#8388d5b92ea8608936e7aae842801dc90e0184e6"
integrity sha512-6WjGj/VjjN8LZDtqJH5ikeB1o39rO1gYS6anBxiS3d0sXNBb3Ux0pNNDFoBxQpOhmdDHXYS57MEptX9EV82gmg==
Update dependency @sentry/node to v6.11.0
2021-08-06 17:30:33 +03:00
Update dependency @sentry/node to v6.13.2
2021-09-21 19:32:20 +03:00
"@sentry/utils@6.13.2":
version "6.13.2"
resolved "https://registry.yarnpkg.com/@sentry/utils/-/utils-6.13.2.tgz#fb8010e7b67cc8c084d8067d64ef25289269cda5"
integrity sha512-foF4PbxqPMWNbuqdXkdoOmKm3quu3PP7Q7j/0pXkri4DtCuvF/lKY92mbY0V9rHS/phCoj+3/Se5JvM2ymh2/w==
Update dependency @sentry/node to v6.11.0
2021-08-06 17:30:33 +03:00
dependencies:
Update dependency @sentry/node to v6.13.2
2021-09-21 19:32:20 +03:00
"@sentry/types" "6.13.2"
Update dependency @sentry/node to v6.11.0
2021-08-06 17:30:33 +03:00
tslib "^1.9.3"
Switched to extracted `@tryghost/mobiledoc-dom-renderer` package no issue - moved `mobiledoc.renderers.mobiledocHtmlRenderer` to `mobiledoc.mobiledocHtmlRenderer` so that it's easier for the getter to access the parent objects getters - removed all tests and dependencies that now live in @tryghost/mobiledoc-dom-renderer - kept the `mobiledocHtmlRenderer` test because that's testing that we've correctly wired up our cards and atoms and the output is what we expect
2020-04-08 20:21:15 +03:00
"@simple-dom/document@^1.4.0":
version "1.4.0"
resolved "https://registry.yarnpkg.com/@simple-dom/document/-/document-1.4.0.tgz#af60855f957f284d436983798ef1006cca1a1678"
integrity sha512-/RUeVH4kuD3rzo5/91+h4Z1meLSLP66eXqpVAw/4aZmYozkeqUkMprq0znL4psX/adEed5cBgiNJcfMz/eKZLg==
dependencies:
"@simple-dom/interface" "^1.4.0"
"@simple-dom/interface@^1.4.0":
version "1.4.0"
resolved "https://registry.yarnpkg.com/@simple-dom/interface/-/interface-1.4.0.tgz#e8feea579232017f89b0138e2726facda6fbb71f"
integrity sha512-l5qumKFWU0S+4ZzMaLXFU8tQZsicHEMEyAxI5kDFGhJsRqDwe0a7/iPA/GdxlGyDKseQQAgIz5kzU7eXTrlSpA==
"@simple-dom/parser@^1.4.0":
version "1.4.0"
resolved "https://registry.yarnpkg.com/@simple-dom/parser/-/parser-1.4.0.tgz#b1fee1a23f48a37d6bdd98f5242db0cab5b67abc"
integrity sha512-TNjDkOehueRIKr1df416qk9ELj+qWuVVJNIT25y1aZg3pQvxv4UPGrgaDFte7dsWBTbF3V8NYPNQ5FDUZQ8Wlg==
dependencies:
"@simple-dom/interface" "^1.4.0"
"@simple-dom/serializer@^1.4.0":
version "1.4.0"
resolved "https://registry.yarnpkg.com/@simple-dom/serializer/-/serializer-1.4.0.tgz#98470f357f418d72b1a1ec78d68191e60aefe215"
integrity sha512-mI1yRahsVs8atXLiQksineDsFEFqeG7RHwnnBTDOK6inbzl4tZQgjR+Z7edjgIJq5j5RhZvwPI6EuCji9B3eQw==
dependencies:
"@simple-dom/interface" "^1.4.0"
"@simple-dom/void-map@^1.4.0":
version "1.4.0"
resolved "https://registry.yarnpkg.com/@simple-dom/void-map/-/void-map-1.4.0.tgz#f15f07568fe1076740407266aa5e6eac249bc78c"
integrity sha512-VDhLEyVCbuhOBBgHol9ShzIv9O8UCzdXeH4FoXu2DOcu/nnvTjLTck+BgXsCLv5ynDiUdoqsREEVFnoyPpFKVw==
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
"@sindresorhus/is@^0.14.0":
version "0.14.0"
resolved "https://registry.yarnpkg.com/@sindresorhus/is/-/is-0.14.0.tgz#9fb3a3cf3132328151f353de4632e01e52102bea"
integrity sha512-9NET910DNaIPngYnLLPeg+Ogzqsi9uM4mSboU5y6p8S5DzMTVEsJZrawi+BoDNUVBa2DhJqQYUFvMDfgU062LQ==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
"@sindresorhus/is@^4.0.0":
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "4.2.0"
resolved "https://registry.yarnpkg.com/@sindresorhus/is/-/is-4.2.0.tgz#667bfc6186ae7c9e0b45a08960c551437176e1ca"
integrity sha512-VkE3KLBmJwcCaVARtQpfuKcKv8gcBmUubrfHGF84dXuuW6jgsRYxPtzcIhPyK9WAPpRt2/xY6zkD9MnRaJzSyw==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
Update dependency sinon to v11
2021-05-25 00:44:33 +03:00
"@sinonjs/commons@^1.6.0", "@sinonjs/commons@^1.7.0", "@sinonjs/commons@^1.8.3":
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "1.8.3"
resolved "https://registry.yarnpkg.com/@sinonjs/commons/-/commons-1.8.3.tgz#3802ddd21a50a949b6721ddd72da36e67e7f1b2d"
integrity sha512-xkNcLAn/wZaX14RPlwizcKicDk9G3F8m2nU3L7Ukm5zBgTwiT0wsoFAHx9Jq56fJA1z/7uKGtCRu16sOUCLIHQ==
Update dependency sinon to v9.0.2
2020-04-08 14:48:38 +03:00
dependencies:
type-detect "4.0.8"
Update dependency sinon to v11.1.2
2021-07-27 15:52:52 +03:00
"@sinonjs/fake-timers@^7.0.4", "@sinonjs/fake-timers@^7.1.2":
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "7.1.2"
resolved "https://registry.yarnpkg.com/@sinonjs/fake-timers/-/fake-timers-7.1.2.tgz#2524eae70c4910edccf99b2f4e6efc5894aff7b5"
integrity sha512-iQADsW4LBMISqZ6Ci1dupJL9pprqwcVFTcOsEmQOEhW+KLCVn/Y4Jrvg2k19fIHCp+iFprriYPTdRcQR8NbUPg==
Update dependency sinon to v9.0.2
2020-04-08 14:48:38 +03:00
dependencies:
"@sinonjs/commons" "^1.7.0"
Update dependency sinon to v11
2021-05-25 00:44:33 +03:00
"@sinonjs/samsam@^6.0.2":
version "6.0.2"
resolved "https://registry.yarnpkg.com/@sinonjs/samsam/-/samsam-6.0.2.tgz#a0117d823260f282c04bff5f8704bdc2ac6910bb"
integrity sha512-jxPRPp9n93ci7b8hMfJOFDPRLFYadN6FSpeROFTR4UNF4i5b+EK6m4QXPO46BDhFgRy1JuS87zAnFOzCUwMJcQ==
Update dependency sinon to v9.0.3
2020-08-11 11:01:30 +03:00
dependencies:
"@sinonjs/commons" "^1.6.0"
lodash.get "^4.4.2"
type-detect "^4.0.8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
"@sinonjs/text-encoding@^0.7.1":
version "0.7.1"
resolved "https://registry.yarnpkg.com/@sinonjs/text-encoding/-/text-encoding-0.7.1.tgz#8da5c6530915653f3a1f38fd5f101d8c3f8079c5"
integrity sha512-+iTbntw2IZPb/anVDbypzfQa+ay64MW0Zo8aJ8gZPWMMK6/OubMVb6lUPMagqjOPnmtauXnFCACVl3O7ogjeqQ==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
"@szmarczak/http-timer@^1.1.2":
version "1.1.2"
resolved "https://registry.yarnpkg.com/@szmarczak/http-timer/-/http-timer-1.1.2.tgz#b1665e2c461a2cd92f4c1bbf50d5454de0d4b421"
integrity sha512-XIB2XbzHTN6ieIjfIMV9hlVcfPU26s2vafYWQcZHWXHOxiaRZYEDKEwdl129Zyg50+foYV2jCgtrqSA6qNuNSA==
dependencies:
defer-to-connect "^1.0.1"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
"@szmarczak/http-timer@^4.0.5":
Lock file maintenance
2021-07-19 12:27:19 +03:00
version "4.0.6"
resolved "https://registry.yarnpkg.com/@szmarczak/http-timer/-/http-timer-4.0.6.tgz#b4a914bb62e7c272d4e5989fe4440f812ab1d807"
integrity sha512-4BAffykYOgO+5nzBWYwE3W90sBgLJoUPRWWcL8wlyiM8IB8ipJz3UMJ9KXQd1RKQXpKp8Tutn80HZtWsu2u76w==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
dependencies:
defer-to-connect "^2.0.0"
Update metascraper to v5.21.10
2021-05-25 02:29:32 +03:00
"@tootallnate/once@1":
version "1.1.2"
resolved "https://registry.yarnpkg.com/@tootallnate/once/-/once-1.1.2.tgz#ccb91445360179a04e7fe6aff78c00ffc1eeaf82"
integrity sha512-RbzJvlNzmRq5c3O09UipeuXno4tA1FE6ikOjxZK0tuxVv3412l64l5t1W5pj4+rJq9vpkm/kwiR07aZXnsKPxw==
Update dependency @tryghost/adapter-manager to v0.2.16
2021-09-30 21:14:49 +03:00
"@tryghost/adapter-manager@0.2.16":
version "0.2.16"
resolved "https://registry.yarnpkg.com/@tryghost/adapter-manager/-/adapter-manager-0.2.16.tgz#0f3653a0cea598d83a46be0df0e6def54f1c9a4f"
integrity sha512-XpVlRRHh08fXnlqYC2Al0gEzOg2nDHv549yqqygkFnZm6tBp0qJtwPANiWXFK3j5Ja9RjfXY0EPyiyKXplJVuA==
Added adapter-manager service no-issue This services handles the registration and retrieval of adapters, it normalises the config to look like: { [adapterType]: { active: adapterName, [adapterName]: adapterConfig } }
2020-04-05 19:52:46 +03:00
dependencies:
Update dependency @tryghost/adapter-manager to v0.2.16
2021-09-30 21:14:49 +03:00
"@tryghost/errors" "^0.2.15"
Added adapter-manager service no-issue This services handles the registration and retrieval of adapters, it normalises the config to look like: { [adapterType]: { active: adapterName, [adapterName]: adapterConfig } }
2020-04-05 19:52:46 +03:00
Allowed for a 'sent' status in canary Admin Post API refs https://github.com/TryGhost/Team/issues/892 - When a published email-only post is edited on the client it sends through a "sent" status over to the backend over PUT endpoint. It's a valid new status that should be accepted by the validation
2021-09-01 09:55:03 +03:00
"@tryghost/admin-api-schema@2.6.0":
version "2.6.0"
resolved "https://registry.yarnpkg.com/@tryghost/admin-api-schema/-/admin-api-schema-2.6.0.tgz#608337f600728529a4c4627850da86664a7e7cbb"
integrity sha512-HKLlnYokpDziEouh63mreTagLMjPlXl16Eux2xxsWauiYo7Vuikjw6DnQ4XjsZP/jb2Uz46wJwjLRBpkJxegTA==
Extracted Admin API JSON schemas into @tryghost/admin-api-schema (#12237) closes https://github.com/TryGhost/Ghost/issues/10628 - JSON Schemas were extracted into a separate module to allow other clients to reuse them (for example documentation). Having them in a separate package also slims down the amount of code needed to be maintained in the core. - Updated canary API input validators to use admin-api-schema module - Removed canary schemas that moved into admin-api-schema package - Updated v2 API input validators to use admin-api-schema package - Removed v2 schemas that moved into admin-api-schema package - Updated tests to contain needed information in apiConfig to pick up correct validation - Added @tryghost/admin-api-schema package dependency
2020-09-30 06:25:12 +03:00
dependencies:
Updated JSON schema for Products & Members Admin API refs https://github.com/TryGhost/Team/issues/616 This adds the schema for the Products Admin API to be used as the input validation, and adds support for the `products` property on the Members Admin API Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-04-20 14:22:55 +03:00
"@tryghost/errors" "^0.2.10"
Extracted Admin API JSON schemas into @tryghost/admin-api-schema (#12237) closes https://github.com/TryGhost/Ghost/issues/10628 - JSON Schemas were extracted into a separate module to allow other clients to reuse them (for example documentation). Having them in a separate package also slims down the amount of code needed to be maintained in the core. - Updated canary API input validators to use admin-api-schema module - Removed canary schemas that moved into admin-api-schema package - Updated v2 API input validators to use admin-api-schema package - Removed v2 schemas that moved into admin-api-schema package - Updated tests to contain needed information in apiConfig to pick up correct validation - Added @tryghost/admin-api-schema package dependency
2020-09-30 06:25:12 +03:00
lodash "^4.17.11"
Update dependency @tryghost/bookshelf-plugins to v0.3.1
2021-09-14 19:07:30 +03:00
"@tryghost/bookshelf-collision@^0.1.4":
version "0.1.4"
resolved "https://registry.yarnpkg.com/@tryghost/bookshelf-collision/-/bookshelf-collision-0.1.4.tgz#18e63682631e14de45d3caff29a4fa3bfb3cc053"
integrity sha512-GvEkxYujEsdMqIdQzZifuhyNy3ohu1irudgTSja/gnB7zG5pCAMxTmx39pG7X+tGOSCpJ02c/mqkSyOepmSI5w==
Extracted Bookshelf plugins from Ghost to Framework repo refs: - https://github.com/TryGhost/framework/commit/cf15f60085ea4ec8dab8be386ada0646f1c71954 - https://github.com/TryGhost/framework/commit/dd20cc649bf77263c059a910fa250723b813474b - https://github.com/TryGhost/framework/commit/ccf27f7009c00e24571566f0a44fe417605982c8 - https://github.com/TryGhost/framework/commit/abf146d61f6963c2269a7522665400232340bcf7 - https://github.com/TryGhost/framework/commit/2b54c92a145dfbc8aa1202a92a7660e847807e69 - https://github.com/TryGhost/framework/commit/bb029a53f6825112042edc31e2708ebde72bb9e1 - https://github.com/TryGhost/framework/commit/95bd7ee675e4e5d2cbfe83c8c9f32f633c225ad5 - https://github.com/TryGhost/framework/commit/9018b4df221ad8fef8c736195576bda2c8e64429 - https://github.com/TryGhost/framework/commit/df01a6e5f41319e4e0b24e688da5be7ad0b5a3f8 - https://github.com/TryGhost/framework/commit/d313726b3463ee1cb8504a5f59dd559c50b03cad - these plugins were in a state where they were independent enough to be pulled out into their own packages, which is what we did in the referenced commits above - each package is named like `@tryghost/bookshelf-<plugin>` - to avoid requiring multiple packages into Ghost, we've also created a wrapper package called `@tryghost/bookshelf-plugins` which re-exports all these plugins, so the changes in Ghost are very simple - https://github.com/TryGhost/framework/commit/dbebdd43b5309df27e422e898b96ffd6cc8d7bf6 - this commit deletes the plugins + tests, and replaces with our new package with some minor code changes
2021-06-15 13:57:47 +03:00
dependencies:
"@tryghost/errors" "^0.2.12"
lodash "^4.17.21"
moment-timezone "^0.5.33"
Update dependency @tryghost/bookshelf-plugins to v0.3.1
2021-09-14 19:07:30 +03:00
"@tryghost/bookshelf-custom-query@^0.1.4":
Moved NQL relations and expansions into the models (#13204) refs https://github.com/TryGhost/framework/pull/19 The @tryghost/bookshelf-filter plugin no longer bundles hardcoded relations and expansion definitions, instead leaving it up to the library consumer to implement. This PR adds the preexisting relations and expansions to the relevant models, in order to preserve our existing filtering functionality.
2021-08-04 17:30:53 +03:00
version "0.1.4"
Update dependency @tryghost/bookshelf-plugins to v0.3.1
2021-09-14 19:07:30 +03:00
resolved "https://registry.yarnpkg.com/@tryghost/bookshelf-custom-query/-/bookshelf-custom-query-0.1.4.tgz#1876bdb18fa09b7fc38fd05d46a9261680902c69"
integrity sha512-QqSPnBSOgrvi/24IywY3ij+8yhiWobQ+NR3ajMDeEDgx2BiYXr9D8rBbGJc1oyE9lKwf7j1bAWmz6MTgXI6xKg==
"@tryghost/bookshelf-eager-load@^0.1.5":
version "0.1.5"
resolved "https://registry.yarnpkg.com/@tryghost/bookshelf-eager-load/-/bookshelf-eager-load-0.1.5.tgz#758237692d8271664317520ae12d0d59ee414ecc"
integrity sha512-s3BwgekiAQZBagjADYb3b5Waw/tPI33MzWzIU9/NE/qX87ZeM8ip7o8pmMogbjDiJTNiXPMEM7qqMDKYfwKbpA==
Extracted Bookshelf plugins from Ghost to Framework repo refs: - https://github.com/TryGhost/framework/commit/cf15f60085ea4ec8dab8be386ada0646f1c71954 - https://github.com/TryGhost/framework/commit/dd20cc649bf77263c059a910fa250723b813474b - https://github.com/TryGhost/framework/commit/ccf27f7009c00e24571566f0a44fe417605982c8 - https://github.com/TryGhost/framework/commit/abf146d61f6963c2269a7522665400232340bcf7 - https://github.com/TryGhost/framework/commit/2b54c92a145dfbc8aa1202a92a7660e847807e69 - https://github.com/TryGhost/framework/commit/bb029a53f6825112042edc31e2708ebde72bb9e1 - https://github.com/TryGhost/framework/commit/95bd7ee675e4e5d2cbfe83c8c9f32f633c225ad5 - https://github.com/TryGhost/framework/commit/9018b4df221ad8fef8c736195576bda2c8e64429 - https://github.com/TryGhost/framework/commit/df01a6e5f41319e4e0b24e688da5be7ad0b5a3f8 - https://github.com/TryGhost/framework/commit/d313726b3463ee1cb8504a5f59dd559c50b03cad - these plugins were in a state where they were independent enough to be pulled out into their own packages, which is what we did in the referenced commits above - each package is named like `@tryghost/bookshelf-<plugin>` - to avoid requiring multiple packages into Ghost, we've also created a wrapper package called `@tryghost/bookshelf-plugins` which re-exports all these plugins, so the changes in Ghost are very simple - https://github.com/TryGhost/framework/commit/dbebdd43b5309df27e422e898b96ffd6cc8d7bf6 - this commit deletes the plugins + tests, and replaces with our new package with some minor code changes
2021-06-15 13:57:47 +03:00
dependencies:
Update dependency @tryghost/bookshelf-plugins to v0.3.1
2021-09-14 19:07:30 +03:00
"@tryghost/debug" "^0.1.5"
Extracted Bookshelf plugins from Ghost to Framework repo refs: - https://github.com/TryGhost/framework/commit/cf15f60085ea4ec8dab8be386ada0646f1c71954 - https://github.com/TryGhost/framework/commit/dd20cc649bf77263c059a910fa250723b813474b - https://github.com/TryGhost/framework/commit/ccf27f7009c00e24571566f0a44fe417605982c8 - https://github.com/TryGhost/framework/commit/abf146d61f6963c2269a7522665400232340bcf7 - https://github.com/TryGhost/framework/commit/2b54c92a145dfbc8aa1202a92a7660e847807e69 - https://github.com/TryGhost/framework/commit/bb029a53f6825112042edc31e2708ebde72bb9e1 - https://github.com/TryGhost/framework/commit/95bd7ee675e4e5d2cbfe83c8c9f32f633c225ad5 - https://github.com/TryGhost/framework/commit/9018b4df221ad8fef8c736195576bda2c8e64429 - https://github.com/TryGhost/framework/commit/df01a6e5f41319e4e0b24e688da5be7ad0b5a3f8 - https://github.com/TryGhost/framework/commit/d313726b3463ee1cb8504a5f59dd559c50b03cad - these plugins were in a state where they were independent enough to be pulled out into their own packages, which is what we did in the referenced commits above - each package is named like `@tryghost/bookshelf-<plugin>` - to avoid requiring multiple packages into Ghost, we've also created a wrapper package called `@tryghost/bookshelf-plugins` which re-exports all these plugins, so the changes in Ghost are very simple - https://github.com/TryGhost/framework/commit/dbebdd43b5309df27e422e898b96ffd6cc8d7bf6 - this commit deletes the plugins + tests, and replaces with our new package with some minor code changes
2021-06-15 13:57:47 +03:00
lodash "^4.17.21"
Update dependency @tryghost/bookshelf-plugins to v0.3.1
2021-09-14 19:07:30 +03:00
"@tryghost/bookshelf-filter@^0.3.1":
version "0.3.1"
resolved "https://registry.yarnpkg.com/@tryghost/bookshelf-filter/-/bookshelf-filter-0.3.1.tgz#650d30356ec2b445ec1e9cc93634f5fa76adee85"
integrity sha512-046AeHc8f5x7Kw3R9iaweNhzjKLnG4kb5v6+wUTF5oxuo2PWJqvj0wfgHhkN36dcHPo3MoBaTmVVPRIU/8QrAQ==
Extracted Bookshelf plugins from Ghost to Framework repo refs: - https://github.com/TryGhost/framework/commit/cf15f60085ea4ec8dab8be386ada0646f1c71954 - https://github.com/TryGhost/framework/commit/dd20cc649bf77263c059a910fa250723b813474b - https://github.com/TryGhost/framework/commit/ccf27f7009c00e24571566f0a44fe417605982c8 - https://github.com/TryGhost/framework/commit/abf146d61f6963c2269a7522665400232340bcf7 - https://github.com/TryGhost/framework/commit/2b54c92a145dfbc8aa1202a92a7660e847807e69 - https://github.com/TryGhost/framework/commit/bb029a53f6825112042edc31e2708ebde72bb9e1 - https://github.com/TryGhost/framework/commit/95bd7ee675e4e5d2cbfe83c8c9f32f633c225ad5 - https://github.com/TryGhost/framework/commit/9018b4df221ad8fef8c736195576bda2c8e64429 - https://github.com/TryGhost/framework/commit/df01a6e5f41319e4e0b24e688da5be7ad0b5a3f8 - https://github.com/TryGhost/framework/commit/d313726b3463ee1cb8504a5f59dd559c50b03cad - these plugins were in a state where they were independent enough to be pulled out into their own packages, which is what we did in the referenced commits above - each package is named like `@tryghost/bookshelf-<plugin>` - to avoid requiring multiple packages into Ghost, we've also created a wrapper package called `@tryghost/bookshelf-plugins` which re-exports all these plugins, so the changes in Ghost are very simple - https://github.com/TryGhost/framework/commit/dbebdd43b5309df27e422e898b96ffd6cc8d7bf6 - this commit deletes the plugins + tests, and replaces with our new package with some minor code changes
2021-06-15 13:57:47 +03:00
dependencies:
Updated @tryghost/bookshelf-plugins & @nexes/nql (#13212) refs https://github.com/TryGhost/Team/issues/944 This updates both libraries to include support for custom foreign keys on relations, as well as relations with a "virtual" table, defined by a query. This will allow us to filter members based on aggregates of their events, as well as on properties of their stripe subscriptions which are linked not by the `id` column but by thir external stripe id, e.g. `customer_id`.
2021-08-04 19:01:23 +03:00
"@nexes/nql" "0.6.0"
Update dependency @tryghost/bookshelf-plugins to v0.3.1
2021-09-14 19:07:30 +03:00
"@tryghost/debug" "^0.1.5"
Extracted Bookshelf plugins from Ghost to Framework repo refs: - https://github.com/TryGhost/framework/commit/cf15f60085ea4ec8dab8be386ada0646f1c71954 - https://github.com/TryGhost/framework/commit/dd20cc649bf77263c059a910fa250723b813474b - https://github.com/TryGhost/framework/commit/ccf27f7009c00e24571566f0a44fe417605982c8 - https://github.com/TryGhost/framework/commit/abf146d61f6963c2269a7522665400232340bcf7 - https://github.com/TryGhost/framework/commit/2b54c92a145dfbc8aa1202a92a7660e847807e69 - https://github.com/TryGhost/framework/commit/bb029a53f6825112042edc31e2708ebde72bb9e1 - https://github.com/TryGhost/framework/commit/95bd7ee675e4e5d2cbfe83c8c9f32f633c225ad5 - https://github.com/TryGhost/framework/commit/9018b4df221ad8fef8c736195576bda2c8e64429 - https://github.com/TryGhost/framework/commit/df01a6e5f41319e4e0b24e688da5be7ad0b5a3f8 - https://github.com/TryGhost/framework/commit/d313726b3463ee1cb8504a5f59dd559c50b03cad - these plugins were in a state where they were independent enough to be pulled out into their own packages, which is what we did in the referenced commits above - each package is named like `@tryghost/bookshelf-<plugin>` - to avoid requiring multiple packages into Ghost, we've also created a wrapper package called `@tryghost/bookshelf-plugins` which re-exports all these plugins, so the changes in Ghost are very simple - https://github.com/TryGhost/framework/commit/dbebdd43b5309df27e422e898b96ffd6cc8d7bf6 - this commit deletes the plugins + tests, and replaces with our new package with some minor code changes
2021-06-15 13:57:47 +03:00
"@tryghost/errors" "^0.2.12"
"@tryghost/tpl" "^0.1.1"
Update dependency @tryghost/bookshelf-plugins to v0.3.1
2021-09-14 19:07:30 +03:00
"@tryghost/bookshelf-has-posts@^0.1.6":
version "0.1.6"
resolved "https://registry.yarnpkg.com/@tryghost/bookshelf-has-posts/-/bookshelf-has-posts-0.1.6.tgz#ac5bc5ebd787d337ee8fa34e145951883d653eb0"
integrity sha512-NRqeOx+KtAzyAJB1ikBR0ABj1FpgCxjZ4w8pVPuUzxGUcSVQHvRq5J1hnCh4+ZgCBIvZvSkVVvBTkTdXQeybMQ==
Extracted Bookshelf plugins from Ghost to Framework repo refs: - https://github.com/TryGhost/framework/commit/cf15f60085ea4ec8dab8be386ada0646f1c71954 - https://github.com/TryGhost/framework/commit/dd20cc649bf77263c059a910fa250723b813474b - https://github.com/TryGhost/framework/commit/ccf27f7009c00e24571566f0a44fe417605982c8 - https://github.com/TryGhost/framework/commit/abf146d61f6963c2269a7522665400232340bcf7 - https://github.com/TryGhost/framework/commit/2b54c92a145dfbc8aa1202a92a7660e847807e69 - https://github.com/TryGhost/framework/commit/bb029a53f6825112042edc31e2708ebde72bb9e1 - https://github.com/TryGhost/framework/commit/95bd7ee675e4e5d2cbfe83c8c9f32f633c225ad5 - https://github.com/TryGhost/framework/commit/9018b4df221ad8fef8c736195576bda2c8e64429 - https://github.com/TryGhost/framework/commit/df01a6e5f41319e4e0b24e688da5be7ad0b5a3f8 - https://github.com/TryGhost/framework/commit/d313726b3463ee1cb8504a5f59dd559c50b03cad - these plugins were in a state where they were independent enough to be pulled out into their own packages, which is what we did in the referenced commits above - each package is named like `@tryghost/bookshelf-<plugin>` - to avoid requiring multiple packages into Ghost, we've also created a wrapper package called `@tryghost/bookshelf-plugins` which re-exports all these plugins, so the changes in Ghost are very simple - https://github.com/TryGhost/framework/commit/dbebdd43b5309df27e422e898b96ffd6cc8d7bf6 - this commit deletes the plugins + tests, and replaces with our new package with some minor code changes
2021-06-15 13:57:47 +03:00
dependencies:
Update dependency @tryghost/bookshelf-plugins to v0.3.1
2021-09-14 19:07:30 +03:00
"@tryghost/debug" "^0.1.5"
Extracted Bookshelf plugins from Ghost to Framework repo refs: - https://github.com/TryGhost/framework/commit/cf15f60085ea4ec8dab8be386ada0646f1c71954 - https://github.com/TryGhost/framework/commit/dd20cc649bf77263c059a910fa250723b813474b - https://github.com/TryGhost/framework/commit/ccf27f7009c00e24571566f0a44fe417605982c8 - https://github.com/TryGhost/framework/commit/abf146d61f6963c2269a7522665400232340bcf7 - https://github.com/TryGhost/framework/commit/2b54c92a145dfbc8aa1202a92a7660e847807e69 - https://github.com/TryGhost/framework/commit/bb029a53f6825112042edc31e2708ebde72bb9e1 - https://github.com/TryGhost/framework/commit/95bd7ee675e4e5d2cbfe83c8c9f32f633c225ad5 - https://github.com/TryGhost/framework/commit/9018b4df221ad8fef8c736195576bda2c8e64429 - https://github.com/TryGhost/framework/commit/df01a6e5f41319e4e0b24e688da5be7ad0b5a3f8 - https://github.com/TryGhost/framework/commit/d313726b3463ee1cb8504a5f59dd559c50b03cad - these plugins were in a state where they were independent enough to be pulled out into their own packages, which is what we did in the referenced commits above - each package is named like `@tryghost/bookshelf-<plugin>` - to avoid requiring multiple packages into Ghost, we've also created a wrapper package called `@tryghost/bookshelf-plugins` which re-exports all these plugins, so the changes in Ghost are very simple - https://github.com/TryGhost/framework/commit/dbebdd43b5309df27e422e898b96ffd6cc8d7bf6 - this commit deletes the plugins + tests, and replaces with our new package with some minor code changes
2021-06-15 13:57:47 +03:00
lodash "^4.17.21"
Update dependency @tryghost/bookshelf-plugins to v0.3.1
2021-09-14 19:07:30 +03:00
"@tryghost/bookshelf-include-count@^0.1.5":
version "0.1.5"
resolved "https://registry.yarnpkg.com/@tryghost/bookshelf-include-count/-/bookshelf-include-count-0.1.5.tgz#d09fa200421490b4605a4e4983b2a7e3b061c192"
integrity sha512-D03EQxIW3q56pN3IWOZ5vf3t+MIkCHpTO8ulWSZmAdIemH5V3924tbVZpweN4T/ci2qr6vQDrKhx7Ndawy/umQ==
Extracted Bookshelf plugins from Ghost to Framework repo refs: - https://github.com/TryGhost/framework/commit/cf15f60085ea4ec8dab8be386ada0646f1c71954 - https://github.com/TryGhost/framework/commit/dd20cc649bf77263c059a910fa250723b813474b - https://github.com/TryGhost/framework/commit/ccf27f7009c00e24571566f0a44fe417605982c8 - https://github.com/TryGhost/framework/commit/abf146d61f6963c2269a7522665400232340bcf7 - https://github.com/TryGhost/framework/commit/2b54c92a145dfbc8aa1202a92a7660e847807e69 - https://github.com/TryGhost/framework/commit/bb029a53f6825112042edc31e2708ebde72bb9e1 - https://github.com/TryGhost/framework/commit/95bd7ee675e4e5d2cbfe83c8c9f32f633c225ad5 - https://github.com/TryGhost/framework/commit/9018b4df221ad8fef8c736195576bda2c8e64429 - https://github.com/TryGhost/framework/commit/df01a6e5f41319e4e0b24e688da5be7ad0b5a3f8 - https://github.com/TryGhost/framework/commit/d313726b3463ee1cb8504a5f59dd559c50b03cad - these plugins were in a state where they were independent enough to be pulled out into their own packages, which is what we did in the referenced commits above - each package is named like `@tryghost/bookshelf-<plugin>` - to avoid requiring multiple packages into Ghost, we've also created a wrapper package called `@tryghost/bookshelf-plugins` which re-exports all these plugins, so the changes in Ghost are very simple - https://github.com/TryGhost/framework/commit/dbebdd43b5309df27e422e898b96ffd6cc8d7bf6 - this commit deletes the plugins + tests, and replaces with our new package with some minor code changes
2021-06-15 13:57:47 +03:00
dependencies:
Update dependency @tryghost/bookshelf-plugins to v0.3.1
2021-09-14 19:07:30 +03:00
"@tryghost/debug" "^0.1.5"
Extracted Bookshelf plugins from Ghost to Framework repo refs: - https://github.com/TryGhost/framework/commit/cf15f60085ea4ec8dab8be386ada0646f1c71954 - https://github.com/TryGhost/framework/commit/dd20cc649bf77263c059a910fa250723b813474b - https://github.com/TryGhost/framework/commit/ccf27f7009c00e24571566f0a44fe417605982c8 - https://github.com/TryGhost/framework/commit/abf146d61f6963c2269a7522665400232340bcf7 - https://github.com/TryGhost/framework/commit/2b54c92a145dfbc8aa1202a92a7660e847807e69 - https://github.com/TryGhost/framework/commit/bb029a53f6825112042edc31e2708ebde72bb9e1 - https://github.com/TryGhost/framework/commit/95bd7ee675e4e5d2cbfe83c8c9f32f633c225ad5 - https://github.com/TryGhost/framework/commit/9018b4df221ad8fef8c736195576bda2c8e64429 - https://github.com/TryGhost/framework/commit/df01a6e5f41319e4e0b24e688da5be7ad0b5a3f8 - https://github.com/TryGhost/framework/commit/d313726b3463ee1cb8504a5f59dd559c50b03cad - these plugins were in a state where they were independent enough to be pulled out into their own packages, which is what we did in the referenced commits above - each package is named like `@tryghost/bookshelf-<plugin>` - to avoid requiring multiple packages into Ghost, we've also created a wrapper package called `@tryghost/bookshelf-plugins` which re-exports all these plugins, so the changes in Ghost are very simple - https://github.com/TryGhost/framework/commit/dbebdd43b5309df27e422e898b96ffd6cc8d7bf6 - this commit deletes the plugins + tests, and replaces with our new package with some minor code changes
2021-06-15 13:57:47 +03:00
lodash "^4.17.21"
Update dependency @tryghost/bookshelf-plugins to v0.3.1
2021-09-14 19:07:30 +03:00
"@tryghost/bookshelf-order@^0.1.4":
version "0.1.4"
resolved "https://registry.yarnpkg.com/@tryghost/bookshelf-order/-/bookshelf-order-0.1.4.tgz#829d0099e33abf0c599e8b592368475f9628c916"
integrity sha512-hV8qT3+el/VcufvxgBFqfF+B//XVZmWWY5+/yQb6aNw048D+Rqt6x6hiezuOeeXL/cnzPWJHHacfvH7qDlI1OQ==
Extracted Bookshelf plugins from Ghost to Framework repo refs: - https://github.com/TryGhost/framework/commit/cf15f60085ea4ec8dab8be386ada0646f1c71954 - https://github.com/TryGhost/framework/commit/dd20cc649bf77263c059a910fa250723b813474b - https://github.com/TryGhost/framework/commit/ccf27f7009c00e24571566f0a44fe417605982c8 - https://github.com/TryGhost/framework/commit/abf146d61f6963c2269a7522665400232340bcf7 - https://github.com/TryGhost/framework/commit/2b54c92a145dfbc8aa1202a92a7660e847807e69 - https://github.com/TryGhost/framework/commit/bb029a53f6825112042edc31e2708ebde72bb9e1 - https://github.com/TryGhost/framework/commit/95bd7ee675e4e5d2cbfe83c8c9f32f633c225ad5 - https://github.com/TryGhost/framework/commit/9018b4df221ad8fef8c736195576bda2c8e64429 - https://github.com/TryGhost/framework/commit/df01a6e5f41319e4e0b24e688da5be7ad0b5a3f8 - https://github.com/TryGhost/framework/commit/d313726b3463ee1cb8504a5f59dd559c50b03cad - these plugins were in a state where they were independent enough to be pulled out into their own packages, which is what we did in the referenced commits above - each package is named like `@tryghost/bookshelf-<plugin>` - to avoid requiring multiple packages into Ghost, we've also created a wrapper package called `@tryghost/bookshelf-plugins` which re-exports all these plugins, so the changes in Ghost are very simple - https://github.com/TryGhost/framework/commit/dbebdd43b5309df27e422e898b96ffd6cc8d7bf6 - this commit deletes the plugins + tests, and replaces with our new package with some minor code changes
2021-06-15 13:57:47 +03:00
dependencies:
lodash "^4.17.21"
Update dependency @tryghost/bookshelf-plugins to v0.3.1
2021-09-14 19:07:30 +03:00
"@tryghost/bookshelf-pagination@^0.1.5":
version "0.1.5"
resolved "https://registry.yarnpkg.com/@tryghost/bookshelf-pagination/-/bookshelf-pagination-0.1.5.tgz#b597cd1c105bfdabbb53c1370205acdeb3366781"
integrity sha512-U2SA2NKbpir4cYUKx3s2x2UuL1Q+1FI2lv/jkufSvjvBVel3HwVOuJNCvsTwlu31mCZ/t7Vh+OBpPv4zvaac+w==
Extracted Bookshelf plugins from Ghost to Framework repo refs: - https://github.com/TryGhost/framework/commit/cf15f60085ea4ec8dab8be386ada0646f1c71954 - https://github.com/TryGhost/framework/commit/dd20cc649bf77263c059a910fa250723b813474b - https://github.com/TryGhost/framework/commit/ccf27f7009c00e24571566f0a44fe417605982c8 - https://github.com/TryGhost/framework/commit/abf146d61f6963c2269a7522665400232340bcf7 - https://github.com/TryGhost/framework/commit/2b54c92a145dfbc8aa1202a92a7660e847807e69 - https://github.com/TryGhost/framework/commit/bb029a53f6825112042edc31e2708ebde72bb9e1 - https://github.com/TryGhost/framework/commit/95bd7ee675e4e5d2cbfe83c8c9f32f633c225ad5 - https://github.com/TryGhost/framework/commit/9018b4df221ad8fef8c736195576bda2c8e64429 - https://github.com/TryGhost/framework/commit/df01a6e5f41319e4e0b24e688da5be7ad0b5a3f8 - https://github.com/TryGhost/framework/commit/d313726b3463ee1cb8504a5f59dd559c50b03cad - these plugins were in a state where they were independent enough to be pulled out into their own packages, which is what we did in the referenced commits above - each package is named like `@tryghost/bookshelf-<plugin>` - to avoid requiring multiple packages into Ghost, we've also created a wrapper package called `@tryghost/bookshelf-plugins` which re-exports all these plugins, so the changes in Ghost are very simple - https://github.com/TryGhost/framework/commit/dbebdd43b5309df27e422e898b96ffd6cc8d7bf6 - this commit deletes the plugins + tests, and replaces with our new package with some minor code changes
2021-06-15 13:57:47 +03:00
dependencies:
"@tryghost/errors" "^0.2.12"
"@tryghost/tpl" "^0.1.1"
Update metascraper
2021-07-12 03:37:41 +03:00
lodash "^4.17.21"
Extracted Bookshelf plugins from Ghost to Framework repo refs: - https://github.com/TryGhost/framework/commit/cf15f60085ea4ec8dab8be386ada0646f1c71954 - https://github.com/TryGhost/framework/commit/dd20cc649bf77263c059a910fa250723b813474b - https://github.com/TryGhost/framework/commit/ccf27f7009c00e24571566f0a44fe417605982c8 - https://github.com/TryGhost/framework/commit/abf146d61f6963c2269a7522665400232340bcf7 - https://github.com/TryGhost/framework/commit/2b54c92a145dfbc8aa1202a92a7660e847807e69 - https://github.com/TryGhost/framework/commit/bb029a53f6825112042edc31e2708ebde72bb9e1 - https://github.com/TryGhost/framework/commit/95bd7ee675e4e5d2cbfe83c8c9f32f633c225ad5 - https://github.com/TryGhost/framework/commit/9018b4df221ad8fef8c736195576bda2c8e64429 - https://github.com/TryGhost/framework/commit/df01a6e5f41319e4e0b24e688da5be7ad0b5a3f8 - https://github.com/TryGhost/framework/commit/d313726b3463ee1cb8504a5f59dd559c50b03cad - these plugins were in a state where they were independent enough to be pulled out into their own packages, which is what we did in the referenced commits above - each package is named like `@tryghost/bookshelf-<plugin>` - to avoid requiring multiple packages into Ghost, we've also created a wrapper package called `@tryghost/bookshelf-plugins` which re-exports all these plugins, so the changes in Ghost are very simple - https://github.com/TryGhost/framework/commit/dbebdd43b5309df27e422e898b96ffd6cc8d7bf6 - this commit deletes the plugins + tests, and replaces with our new package with some minor code changes
2021-06-15 13:57:47 +03:00
Update dependency @tryghost/bookshelf-plugins to v0.3.1
2021-09-14 19:07:30 +03:00
"@tryghost/bookshelf-plugins@0.3.1":
version "0.3.1"
resolved "https://registry.yarnpkg.com/@tryghost/bookshelf-plugins/-/bookshelf-plugins-0.3.1.tgz#e4be8fff40a8b3b9efb30f317afab6d0a3a43c2a"
integrity sha512-hnGh7Ue6f6VBKDQa+f/rktBWGpCavikGCN6fQTcaqPfc60f2B1+Jp6JCTs3KQYR/EXelj5Wmkxxfmxd/cnpeHw==
dependencies:
"@tryghost/bookshelf-collision" "^0.1.4"
"@tryghost/bookshelf-custom-query" "^0.1.4"
"@tryghost/bookshelf-eager-load" "^0.1.5"
"@tryghost/bookshelf-filter" "^0.3.1"
"@tryghost/bookshelf-has-posts" "^0.1.6"
"@tryghost/bookshelf-include-count" "^0.1.5"
"@tryghost/bookshelf-order" "^0.1.4"
"@tryghost/bookshelf-pagination" "^0.1.5"
"@tryghost/bookshelf-search" "^0.1.4"
"@tryghost/bookshelf-transaction-events" "^0.1.4"
"@tryghost/bookshelf-search@^0.1.4":
version "0.1.4"
resolved "https://registry.yarnpkg.com/@tryghost/bookshelf-search/-/bookshelf-search-0.1.4.tgz#c237d488ddac1c8c065bfdb5f8140f684be9fdf5"
integrity sha512-2EEmyyArpkEpka8m59UzxzdchSb/PCbjlaHpJ9FsB2bdEkY2qCYFCCzWM4WiybLibKlkrNlLUxwnx5ThhPi9ZA==
Extracted Bookshelf plugins from Ghost to Framework repo refs: - https://github.com/TryGhost/framework/commit/cf15f60085ea4ec8dab8be386ada0646f1c71954 - https://github.com/TryGhost/framework/commit/dd20cc649bf77263c059a910fa250723b813474b - https://github.com/TryGhost/framework/commit/ccf27f7009c00e24571566f0a44fe417605982c8 - https://github.com/TryGhost/framework/commit/abf146d61f6963c2269a7522665400232340bcf7 - https://github.com/TryGhost/framework/commit/2b54c92a145dfbc8aa1202a92a7660e847807e69 - https://github.com/TryGhost/framework/commit/bb029a53f6825112042edc31e2708ebde72bb9e1 - https://github.com/TryGhost/framework/commit/95bd7ee675e4e5d2cbfe83c8c9f32f633c225ad5 - https://github.com/TryGhost/framework/commit/9018b4df221ad8fef8c736195576bda2c8e64429 - https://github.com/TryGhost/framework/commit/df01a6e5f41319e4e0b24e688da5be7ad0b5a3f8 - https://github.com/TryGhost/framework/commit/d313726b3463ee1cb8504a5f59dd559c50b03cad - these plugins were in a state where they were independent enough to be pulled out into their own packages, which is what we did in the referenced commits above - each package is named like `@tryghost/bookshelf-<plugin>` - to avoid requiring multiple packages into Ghost, we've also created a wrapper package called `@tryghost/bookshelf-plugins` which re-exports all these plugins, so the changes in Ghost are very simple - https://github.com/TryGhost/framework/commit/dbebdd43b5309df27e422e898b96ffd6cc8d7bf6 - this commit deletes the plugins + tests, and replaces with our new package with some minor code changes
2021-06-15 13:57:47 +03:00
Update dependency @tryghost/bookshelf-plugins to v0.3.1
2021-09-14 19:07:30 +03:00
"@tryghost/bookshelf-transaction-events@^0.1.4":
version "0.1.4"
resolved "https://registry.yarnpkg.com/@tryghost/bookshelf-transaction-events/-/bookshelf-transaction-events-0.1.4.tgz#03fce5bd6b5f694724ee6fb61ce2c2f2e97a6318"
integrity sha512-HbHV8lF6ylOcag/M7dpw5eagi8pkLR1gRKHjEUQVBaBKZLXt0XKRZNYEJyu3sLUY/VBpXmIpuAok2YM/RaJucA==
Extracted Bookshelf plugins from Ghost to Framework repo refs: - https://github.com/TryGhost/framework/commit/cf15f60085ea4ec8dab8be386ada0646f1c71954 - https://github.com/TryGhost/framework/commit/dd20cc649bf77263c059a910fa250723b813474b - https://github.com/TryGhost/framework/commit/ccf27f7009c00e24571566f0a44fe417605982c8 - https://github.com/TryGhost/framework/commit/abf146d61f6963c2269a7522665400232340bcf7 - https://github.com/TryGhost/framework/commit/2b54c92a145dfbc8aa1202a92a7660e847807e69 - https://github.com/TryGhost/framework/commit/bb029a53f6825112042edc31e2708ebde72bb9e1 - https://github.com/TryGhost/framework/commit/95bd7ee675e4e5d2cbfe83c8c9f32f633c225ad5 - https://github.com/TryGhost/framework/commit/9018b4df221ad8fef8c736195576bda2c8e64429 - https://github.com/TryGhost/framework/commit/df01a6e5f41319e4e0b24e688da5be7ad0b5a3f8 - https://github.com/TryGhost/framework/commit/d313726b3463ee1cb8504a5f59dd559c50b03cad - these plugins were in a state where they were independent enough to be pulled out into their own packages, which is what we did in the referenced commits above - each package is named like `@tryghost/bookshelf-<plugin>` - to avoid requiring multiple packages into Ghost, we've also created a wrapper package called `@tryghost/bookshelf-plugins` which re-exports all these plugins, so the changes in Ghost are very simple - https://github.com/TryGhost/framework/commit/dbebdd43b5309df27e422e898b96ffd6cc8d7bf6 - this commit deletes the plugins + tests, and replaces with our new package with some minor code changes
2021-06-15 13:57:47 +03:00
Update dependency @tryghost/bootstrap-socket to v0.2.11
2021-09-30 21:15:03 +03:00
"@tryghost/bootstrap-socket@0.2.11":
version "0.2.11"
resolved "https://registry.yarnpkg.com/@tryghost/bootstrap-socket/-/bootstrap-socket-0.2.11.tgz#8b406db7386c10801bdb17d9d559f354f4d31486"
integrity sha512-YXlTguhbL+3BFwWt3UbN5MwtCkwzBt0/KK+C+TCuVLtraBvkZV+4sroP/uY1QcCCbbdQNkhL78LI+uzpNTZFgQ==
Moved bootstap-socket code to @tryghost/bootstrap-socket - this code has zero deps and is much easier to reason about standalone
2020-08-07 19:13:04 +03:00
Change to use @tryghost/logging no issue Logging is now controlled by a logginrc.js file in the root of the project - and now we can just import @tryghost/logging everywhere
2021-06-15 17:36:27 +03:00
"@tryghost/bunyan-rotating-filestream@0.0.7", "@tryghost/bunyan-rotating-filestream@^0.0.7":
Update to latest Ghost Ignition no issue
2021-03-04 15:10:32 +03:00
version "0.0.7"
resolved "https://registry.yarnpkg.com/@tryghost/bunyan-rotating-filestream/-/bunyan-rotating-filestream-0.0.7.tgz#3957de91e4e9b58999f0bbe19242080543dcfc4a"
integrity sha512-dswM+dxG8J7WpVoSjzAdoWXqqB5Dg0C2T7Zh6eoUvl5hkA8yWWJi/fS4jNXlHF700lWQ0g8/t+leJ7SGSWd+aw==
dependencies:
long-timeout "^0.1.1"
Update dependency @tryghost/color-utils to v0.1.2 (#13269) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-01 11:11:21 +03:00
"@tryghost/color-utils@0.1.2":
version "0.1.2"
resolved "https://registry.yarnpkg.com/@tryghost/color-utils/-/color-utils-0.1.2.tgz#40024c077618fd9cbe6f72f48e0b84905167ef9b"
integrity sha512-MeC6QZ6IzudpkpwLcXPs85QT0CprWK7fB7yFR9Ss8ceAEYd9hm6IznLCK+7Uh2xjXgDocrnw8UEfebt4fkr0UA==
Added accent color button styles to labs email template refs https://github.com/TryGhost/Team/issues/928 - duplicated email template so email-cta changes can go into the labs version - added `accentContrastColor` to template settings for using white/black depending on the accent color - added `.gh-btn-accent` styles to the email template (email-cta card already uses those for the button)
2021-07-29 17:25:09 +03:00
dependencies:
color "^3.2.1"
Update dependency @tryghost/config-url-helpers to v0.1.2
2021-09-30 21:15:18 +03:00
"@tryghost/config-url-helpers@0.1.2":
version "0.1.2"
resolved "https://registry.yarnpkg.com/@tryghost/config-url-helpers/-/config-url-helpers-0.1.2.tgz#2c870f35313d7f83ef625291361a5dc345afdfbe"
integrity sha512-WhmLjMe8QWh5ZHtzVwTyk13qqRn494pOnrH8Usy+8zgF0mYQwtgkC9XhUo7nZDYg/QPqsG9zTW7l0XKdgb4Q7A==
Added config-url-helpers to config - getSubdir, getSiteUrl & getAdminUrl were currently part of @tryghost/url-utils - They have been split out into their own library, and refactored so that they expect to be bound to nconf - With this commit we can do e.g. config.getSubdir() rather than needing @tryghost/url-utils - These functions will be passed to url-utils via DI - This is the first step in breaking down url-utils into smaller pieces - This commit only does a single change in Gruntfile.js to use the new funtions - this will be rolled out slowly
2021-06-17 14:15:44 +03:00
Update dependency @tryghost/constants to v0.1.9
2021-09-22 20:05:02 +03:00
"@tryghost/constants@0.1.9":
version "0.1.9"
resolved "https://registry.yarnpkg.com/@tryghost/constants/-/constants-0.1.9.tgz#1c3ecb42feffdff4cb2ad684938a209ac69ebeaf"
integrity sha512-tCRFl+d5tYUyAHKGXt+eEm7f7Vpb0a8VXGenpo1q20PEPY7lVsHkFJ+8mwebQWUmELrXKfYkDgjuQDZizQxArA==
Replaced constants file with @tryghost/constants - extracted constants file into a new package - replaced all local requires of the file with new package
2020-08-11 14:51:16 +03:00
Added route for updating custom theme settings refs https://github.com/TryGhost/Team/issues/1070 - bumped `@tryghost/custom-theme-settings-service` for access to `.updateSettings()` - added `PUT /custom_theme_settings` route that delegates to `customThemeSettingsService.updateSettings()` to perform the db and cache updates - invalidates the cache in Ghost because a theme setting change will mean the front-end output will change
2021-09-28 18:09:39 +03:00
"@tryghost/custom-theme-settings-service@0.0.5":
version "0.0.5"
resolved "https://registry.yarnpkg.com/@tryghost/custom-theme-settings-service/-/custom-theme-settings-service-0.0.5.tgz#f62e301190ec73f94660740d5781469dceb1be05"
integrity sha512-vtIiO47EsDjSXULszkAgMdPZMCeXhS1oFXylFpl0ap2/PuRgl+csdVnqtybYXkjvgDMSuoNrDmTKvzVm7NdoKQ==
Added syncing and theme exposure of custom theme settings (#13354) refs https://github.com/TryGhost/Team/issues/1070 - added `@tryghost/custom-theme-settings-service` as a dependency - `core/server/services/custom-theme-settings` creates an instance of the new service passing in the model used for storing the setting keys/values and a cache instance - requiring `core/shared/services/custom-theme-settings-cache` creates a cache instance, it has no dependencies so can be required anywhere and the first require will initialize the shared instance - updated the theme activation bridge to trigger the theme settings service to sync the newly activated theme settings and populate the cache - updated theme validation to pass `labs` through as an option so that we get custom theme settings back as part of the checked theme as that's what is passed to the custom theme settings service
2021-09-23 14:44:39 +03:00
dependencies:
"@tryghost/debug" "^0.1.5"
"@tryghost/errors" "^0.2.14"
Added route for updating custom theme settings refs https://github.com/TryGhost/Team/issues/1070 - bumped `@tryghost/custom-theme-settings-service` for access to `.updateSettings()` - added `PUT /custom_theme_settings` route that delegates to `customThemeSettingsService.updateSettings()` to perform the db and cache updates - invalidates the cache in Ghost because a theme setting change will mean the front-end output will change
2021-09-28 18:09:39 +03:00
"@tryghost/tpl" "^0.1.4"
Added syncing and theme exposure of custom theme settings (#13354) refs https://github.com/TryGhost/Team/issues/1070 - added `@tryghost/custom-theme-settings-service` as a dependency - `core/server/services/custom-theme-settings` creates an instance of the new service passing in the model used for storing the setting keys/values and a cache instance - requiring `core/shared/services/custom-theme-settings-cache` creates a cache instance, it has no dependencies so can be required anywhere and the first require will initialize the shared instance - updated the theme activation bridge to trigger the theme settings service to sync the newly activated theme settings and populate the cache - updated theme validation to pass `labs` through as an option so that we get custom theme settings back as part of the checked theme as that's what is passed to the custom theme settings service
2021-09-23 14:44:39 +03:00
Added member analytics events handling refs https://github.com/TryGhost/Team/issues/1064 refs https://github.com/TryGhost/Team/issues/1056 refs https://github.com/TryGhost/Team/issues/1054 refs https://github.com/TryGhost/Team/issues/1055 - adds handling for new member analytic events including new ingress endpoint - introduces member-analytics packages and code
2021-09-22 15:50:56 +03:00
"@tryghost/debug@0.1.5", "@tryghost/debug@^0.1.2", "@tryghost/debug@^0.1.4", "@tryghost/debug@^0.1.5":
Update dependency @tryghost/bookshelf-plugins to v0.3.1
2021-09-14 19:07:30 +03:00
version "0.1.5"
resolved "https://registry.yarnpkg.com/@tryghost/debug/-/debug-0.1.5.tgz#dc001fa7c39ccce71aeb4dc9b5b0efc92bde05dc"
integrity sha512-XMB1GgjdfO4ZrMQ1rPSIy+0kSKHKMuBjBpUBPBv3TTDQSyZ3OR/7q0xHmr3MhTeBRZi9lrZUBjrbjbiqEj9wCA==
dependencies:
"@tryghost/root-utils" "^0.3.4"
debug "^4.3.1"
Added initial support for Offers 1-day version refs https://github.com/TryGhost/Team/issues/1090 This updates the members-api to allow passing an Offer ID when creating a Stripe Checkout Session. This will be used for the 1-day version of Offers.
2021-09-28 15:43:36 +03:00
"@tryghost/domain-events@^0.1.2":
version "0.1.2"
resolved "https://registry.yarnpkg.com/@tryghost/domain-events/-/domain-events-0.1.2.tgz#95e88241c3a92675a8b18f9f61aa0a7847dae2ef"
integrity sha512-em1SDyYLmkP6AoBnsemZ50muEMsET3WXPOC0fNPMmGWRPmAY22T0gh4dk0ueysHTrbzVO8jH3rqibXamo2g1WA==
Added member analytics events handling refs https://github.com/TryGhost/Team/issues/1064 refs https://github.com/TryGhost/Team/issues/1056 refs https://github.com/TryGhost/Team/issues/1054 refs https://github.com/TryGhost/Team/issues/1055 - adds handling for new member analytic events including new ingress endpoint - introduces member-analytics packages and code
2021-09-22 15:50:56 +03:00
Change to use @tryghost/logging no issue Logging is now controlled by a logginrc.js file in the root of the project - and now we can just import @tryghost/logging everywhere
2021-06-15 17:36:27 +03:00
"@tryghost/elasticsearch-bunyan@0.1.1", "@tryghost/elasticsearch-bunyan@^0.1.1":
Updated Ghost-Ignition to latest version
2021-03-03 20:47:56 +03:00
version "0.1.1"
resolved "https://registry.yarnpkg.com/@tryghost/elasticsearch-bunyan/-/elasticsearch-bunyan-0.1.1.tgz#5a36d81dd020825dd563b1357ae6c249580c46f5"
integrity sha512-ILhumzdwJNoRG44S0FkgzZQlkCYioTKWEiY+FFFQpTFWwZ3Jd5a6us5k8tEsd+Wf2rZOvul/ehV45j2c2l1BMw==
dependencies:
"@elastic/elasticsearch" "^7.10.0"
Update dependency @tryghost/email-analytics-provider-mailgun to v1.0.1
2021-09-23 04:49:37 +03:00
"@tryghost/email-analytics-provider-mailgun@1.0.1":
version "1.0.1"
resolved "https://registry.yarnpkg.com/@tryghost/email-analytics-provider-mailgun/-/email-analytics-provider-mailgun-1.0.1.tgz#5b3a76eddbd3cf3b5f700e69c29e8a8d50713d22"
integrity sha512-kLUOXsnEcY1JU2hLp6ZQyzTUDML6rDO+Cr+yFcLd3DurxN5e+07obxQUlj3U261pKzLLF9gfnYFWPbLeuCKT2g==
Extracted email analytics library code to external packages (#12541) closes https://github.com/TryGhost/Team/issues/493 - all functionality except that directly related to Ghost's database and business logic now lives in external packages - @tryghost/email-analytics-service - @tryghost/email-analytics-provider-mailgun
2021-03-02 10:26:33 +03:00
dependencies:
Update dependency @tryghost/email-analytics-provider-mailgun to v1.0.1
2021-09-23 04:49:37 +03:00
"@tryghost/email-analytics-service" "^1.0.1"
Extracted email analytics library code to external packages (#12541) closes https://github.com/TryGhost/Team/issues/493 - all functionality except that directly related to Ghost's database and business logic now lives in external packages - @tryghost/email-analytics-service - @tryghost/email-analytics-provider-mailgun
2021-03-02 10:26:33 +03:00
mailgun-js "^0.22.0"
moment "^2.29.1"
Update dependency @tryghost/email-analytics-service to v1.0.1
2021-09-23 13:22:40 +03:00
"@tryghost/email-analytics-service@1.0.1", "@tryghost/email-analytics-service@^1.0.1":
Update dependency @tryghost/email-analytics-provider-mailgun to v1.0.1
2021-09-23 04:49:37 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/@tryghost/email-analytics-service/-/email-analytics-service-1.0.1.tgz#41f883784cb41b7d1f40d89aaf0012d0ab1d1092"
integrity sha512-EAIs2OUmqvrR6iBsXUARmOJUFYp84yRim0UOSi3sE5noK8m9UB87FlJiBxAIGKP32tJgn+hvzRs++Pn//FJiaA==
dependencies:
ghost-ignition "^4.2.4"
lodash "^4.17.20"
Update dependency @tryghost/errors to v0.2.15
2021-10-01 10:44:59 +03:00
"@tryghost/errors@0.2.15", "@tryghost/errors@^0.2.15":
version "0.2.15"
resolved "https://registry.yarnpkg.com/@tryghost/errors/-/errors-0.2.15.tgz#5e63ba786198317fe5187a1748b8222fd75283b7"
integrity sha512-Dn0mNeRNBRwD09pkJSyaNIt1cRCsrj50KIqpkV0UuOFstdxE5kN3zwNSX1IjLV46SfW+Oab4FO3LQVGPJk/+sA==
Update dependency @tryghost/errors to v0.2.10
2021-04-13 18:31:43 +03:00
dependencies:
Upgrade @tryghost/errors to use @tryghost/ignition-errors no issue Part of the de-coupling project - takes us closer to an Ignition-free Ghost.
2021-06-17 13:07:00 +03:00
"@tryghost/ignition-errors" "^0.1.0"
Bumped selected dependencies to unpin sub-dependencies no issue - we've been unpinning dependencies in our libraries to remove duplicates - this commit bumps packages from the Utils repo and NQL, all of which contain changes to unpin their own dependencies
2021-04-19 12:46:47 +03:00
lodash "^4.17.21"
Update dependency @tryghost/errors to v0.2.10
2021-04-13 18:31:43 +03:00
Update dependency @tryghost/errors to v0.2.14
2021-09-22 18:33:59 +03:00
"@tryghost/errors@^0.2.10", "@tryghost/errors@^0.2.11", "@tryghost/errors@^0.2.12", "@tryghost/errors@^0.2.13", "@tryghost/errors@^0.2.9":
version "0.2.13"
resolved "https://registry.yarnpkg.com/@tryghost/errors/-/errors-0.2.13.tgz#819550c347f5634706b5a4834dd2db0e7cb0a6f2"
integrity sha512-RXREWxDy69LC5t8sW6UuSnUNED1ZT9wKTNCJ2VDdrdS1CTaxmZroaWoKOrGjrQDx/M2IBHJSNZHbnRtkHoJ4hw==
Added member analytics events handling refs https://github.com/TryGhost/Team/issues/1064 refs https://github.com/TryGhost/Team/issues/1056 refs https://github.com/TryGhost/Team/issues/1054 refs https://github.com/TryGhost/Team/issues/1055 - adds handling for new member analytic events including new ingress endpoint - introduces member-analytics packages and code
2021-09-22 15:50:56 +03:00
dependencies:
"@tryghost/ignition-errors" "^0.1.0"
lodash "^4.17.21"
Update dependency @tryghost/errors to v0.2.15
2021-10-01 10:44:59 +03:00
"@tryghost/errors@^0.2.14":
version "0.2.14"
resolved "https://registry.yarnpkg.com/@tryghost/errors/-/errors-0.2.14.tgz#473baacd07eb6b0a8877ad8a6a006c657ea81f33"
integrity sha512-EYaOjI8wVrykgS/WkIW/GhSo2vDaXn710SSfS4e7tehAtFoU/XwzFR4yCYzBAMHaZaciSdT2VmssGlPXZib7Lw==
Update dependency @tryghost/limit-service to v0.6.3
2021-09-30 21:17:07 +03:00
dependencies:
"@tryghost/ignition-errors" "^0.1.0"
lodash "^4.17.21"
Update dependency @tryghost/helpers to v1.1.52
2021-09-06 14:29:33 +03:00
"@tryghost/helpers@1.1.52":
version "1.1.52"
resolved "https://registry.yarnpkg.com/@tryghost/helpers/-/helpers-1.1.52.tgz#e30bd367ea62d1b27e59abfa8e8ed8c3e072b74e"
integrity sha512-9RFj49Wleb5SNhjxcg/eEscJv6tkrwW356vS+/QRUaGRGwd2DYPm+jejMI3OTOyANDbK+ZtpYH8crCJefg9jBA==
Updated to use count words/images helpers from SDK (#10686) refs #10618 - Added @tryghost/helpers dependency to use Ghost-SDK helpers - Updated countWords, countImages helpers and removed local copy
2019-04-16 05:30:01 +03:00
dependencies:
lodash-es "^4.17.11"
Update dependency @tryghost/html-to-mobiledoc to v0.7.17
2021-08-06 14:57:55 +03:00
"@tryghost/html-to-mobiledoc@0.7.17":
version "0.7.17"
resolved "https://registry.yarnpkg.com/@tryghost/html-to-mobiledoc/-/html-to-mobiledoc-0.7.17.tgz#52b1bbe85f425c149f18cbd5a2db54cb57b44c15"
integrity sha512-IYDmNK+23ThmCG/u5tlA4E7VvBYVKw9RZOA+EtpgJu9c/zCUid5RoE3PpPKcZbA0qFoxyXMRw6oCzuY0GSRsow==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Updated selected Utils packages to unpin dependencies no issue - I recently unpinned dependencies in the Utils monorepo so we can avoid multiple versions of the same package - this commit bumps all the packages that I published, that do not have other changes. Other team members should merge these
2021-04-16 15:59:15 +03:00
"@tryghost/kg-parser-plugins" "^1.1.7"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
"@tryghost/mobiledoc-kit" "^0.12.4-ghost.1"
Updated selected Utils packages to unpin dependencies no issue - I recently unpinned dependencies in the Utils monorepo so we can avoid multiple versions of the same package - this commit bumps all the packages that I published, that do not have other changes. Other team members should merge these
2021-04-16 15:59:15 +03:00
jsdom "^16.5.3"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Supported 'comped' status in MemberRepository refs https://github.com/TryGhost/Team/issues/790 This makes the create, update & linkSubscription methods correctly handle the comped status for members.
2021-07-06 13:19:51 +03:00
"@tryghost/ignition-errors@^0.1.0", "@tryghost/ignition-errors@^0.1.2":
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "0.1.5"
resolved "https://registry.yarnpkg.com/@tryghost/ignition-errors/-/ignition-errors-0.1.5.tgz#1ad5bc9e169df71360ecc8294571b41d212b0f00"
integrity sha512-Cx1nQdrz4NFzEqWxbS20sKfcrIdG0dzyd+7pTuc1ErWMFIe3/nO37Q8yxMSp66HkJ5KYj/tOH8r3pkQRc+whdQ==
Upgrade @tryghost/errors to use @tryghost/ignition-errors no issue Part of the de-coupling project - takes us closer to an Ignition-free Ghost.
2021-06-17 13:07:00 +03:00
dependencies:
lodash "^4.17.21"
Lock file maintenance
2021-07-05 04:25:22 +03:00
uuid "^8.3.2"
Upgrade @tryghost/errors to use @tryghost/ignition-errors no issue Part of the de-coupling project - takes us closer to an Ignition-free Ghost.
2021-06-17 13:07:00 +03:00
Update dependency @tryghost/image-transform to v1.0.15
2021-10-01 10:45:12 +03:00
"@tryghost/image-transform@1.0.15":
version "1.0.15"
resolved "https://registry.yarnpkg.com/@tryghost/image-transform/-/image-transform-1.0.15.tgz#e285ffa9db70df253a76916d0fbc2a98603d3150"
integrity sha512-9yS+L++ujX41uXwNG4muLFVT3ck+EY5cc6yxwqQOKfMX4z5y7woWD8lQfZq0wlpWnr7zPEALUbIpz5kV5eH3fQ==
Replaced image manipulation w/ @tryghost/image-transform (#11687) - moved image.manipulation lib to a new package called @tryghost/image-transform - new package has an updated API signature, so the method calls have changed but the underlying code is identical - removed the optional sharp dependency from Ghost, as this is now optionally required by the image-transform module
2020-03-25 20:33:03 +03:00
dependencies:
Update dependency @tryghost/image-transform to v1.0.15
2021-10-01 10:45:12 +03:00
"@tryghost/errors" "^0.2.15"
Update dependency @tryghost/image-transform to v1.0.11
2021-04-21 11:12:19 +03:00
bluebird "^3.7.2"
fs-extra "^9.1.0"
Replaced image manipulation w/ @tryghost/image-transform (#11687) - moved image.manipulation lib to a new package called @tryghost/image-transform - new package has an updated API signature, so the method calls have changed but the underlying code is identical - removed the optional sharp dependency from Ghost, as this is now optionally required by the image-transform module
2020-03-25 20:33:03 +03:00
optionalDependencies:
Update dependency @tryghost/image-transform to v1.0.14
2021-09-22 18:34:15 +03:00
sharp "^0.29.0"
Replaced image manipulation w/ @tryghost/image-transform (#11687) - moved image.manipulation lib to a new package called @tryghost/image-transform - new package has an updated API signature, so the method calls have changed but the underlying code is identical - removed the optional sharp dependency from Ghost, as this is now optionally required by the image-transform module
2020-03-25 20:33:03 +03:00
Update dependency @tryghost/job-manager to v0.8.9
2021-09-30 21:16:54 +03:00
"@tryghost/job-manager@0.8.9":
version "0.8.9"
resolved "https://registry.yarnpkg.com/@tryghost/job-manager/-/job-manager-0.8.9.tgz#d50759347dffc8c3b087ea1c64410f4ab3220bb6"
integrity sha512-B7CmgF5P03n6v1hYa1gGs9wPtYHdym0brpWac4FgfUvvXErCTe70kp2kDGPMp57OBnQ1cT/n2UJdzgk30RN/Nw==
Added job-manager & wired up shutdown and testmode - Bottom line - we need to manage shutting down gracefully when doing long-running tasks - To achieve that, we're going to use job queues In this commit: - added new @tryghost/job-manager dependency - added a minimal job service, that handles in passing things like logging and (maybe later) config - job service is wired up to server shutdown, so that the queue finishes before the server exits - also added a new job endpoint to testmode so that it's easy to test job behaviour without needing to do real work
2020-08-11 23:26:34 +03:00
dependencies:
Bumped selected dependencies to unpin sub-dependencies no issue - we've been unpinning dependencies in our libraries to remove duplicates - this commit bumps packages from the Utils repo and NQL, all of which contain changes to unpin their own dependencies
2021-04-19 12:46:47 +03:00
"@breejs/later" "^4.0.2"
bree "^6.2.0"
cron-validate "^1.4.3"
fastq "^1.11.0"
p-wait-for "^3.2.0"
Added job-manager & wired up shutdown and testmode - Bottom line - we need to manage shutting down gracefully when doing long-running tasks - To achieve that, we're going to use job queues In this commit: - added new @tryghost/job-manager dependency - added a minimal job service, that handles in passing things like logging and (maybe later) config - job service is wired up to server shutdown, so that the queue finishes before the server exits - also added a new job endpoint to testmode so that it's easy to test job behaviour without needing to do real work
2020-08-11 23:26:34 +03:00
Bumped @tryghost/kg-* dependencies no issue - includes bump to minimum version of `markdown-it` for consistency between Ghost and Admin markdown rendering
2021-09-13 11:34:18 +03:00
"@tryghost/kg-card-factory@3.0.4":
version "3.0.4"
resolved "https://registry.yarnpkg.com/@tryghost/kg-card-factory/-/kg-card-factory-3.0.4.tgz#6fc28d674487c9983a280bd397064ebdfd0cfb7e"
integrity sha512-/75nqe2Z9rRYIkuEgVVnWiAJDp+d3uawsBJNo7G2Sp6lTWY16tVD8qoidNJ0tc2q0cRYKFCcVlnXAG6UY/Pt6Q==
Replaced mobiledoc cards with @tryghost/kg-default-cards no issue - moved card definitions to a new library `@tryghost/kg-default-cards` - moved `createCard` factory function to a new library `@tryghost/kg-card-factory`
2020-03-25 22:53:11 +03:00
Lock file maintenance
2021-06-01 18:19:18 +03:00
"@tryghost/kg-clean-basic-html@^1.0.18":
version "1.0.18"
resolved "https://registry.yarnpkg.com/@tryghost/kg-clean-basic-html/-/kg-clean-basic-html-1.0.18.tgz#2d626c5da951551cf09c28a55ac23df801d2e880"
integrity sha512-5jUY/McF01hDi6BsdKOsBhtdhmuCv1djYYj7eVOFGFcdmLkxRHOJWqmRfJTCVdfeU5hnOu+D6XcNsDxmTJXLKQ==
✨ Added caption and language extraction for code blocks when converting HTML via API no issue - update @tryghost/html-to-mobiledoc to v0.3.0 - uses updated @tryghost/kg-parser-plugins that is now shared with Ghost-Admin
2019-05-03 13:55:38 +03:00
Bumped Koenig-related packages refs https://github.com/TryGhost/Team/issues/910 - fixed missing `alt` attributes on images in bookmark cards - added `email-cta` card - dropped node 10 support
2021-07-20 14:20:36 +03:00
"@tryghost/kg-default-atoms@3.0.0":
version "3.0.0"
resolved "https://registry.yarnpkg.com/@tryghost/kg-default-atoms/-/kg-default-atoms-3.0.0.tgz#da92ddc8c7d513d641ec1fdd2c8c19e71f6b3616"
integrity sha512-1f9CM49QYVyx7vWnCA22soX71veVhRWUtV4sPmy9Qf92zLHTZwQ9O9W1hs8jVesNBPRdVU5t/dWHsydx2n7Tmg==
Switched to extracted `@tryghost/kg-default-atoms` package no issue - removed code that now lives in the external Koenig monorepo
2020-04-08 16:49:14 +03:00
Bumped @tryghost/kg-* dependencies no issue - includes bump to minimum version of `markdown-it` for consistency between Ghost and Admin markdown rendering
2021-09-13 11:34:18 +03:00
"@tryghost/kg-default-cards@5.0.7":
version "5.0.7"
resolved "https://registry.yarnpkg.com/@tryghost/kg-default-cards/-/kg-default-cards-5.0.7.tgz#9a2f4b7294950760411faa3f8d23a67c2bd64900"
integrity sha512-pJfPIl19naEhubk3YYgiTai4pNxdMK6YNf5bwsolw9k/krHFBTB1dd5iMZnWc26oOeevZOARKGHQoyasubSDxw==
Replaced mobiledoc cards with @tryghost/kg-default-cards no issue - moved card definitions to a new library `@tryghost/kg-default-cards` - moved `createCard` factory function to a new library `@tryghost/kg-card-factory`
2020-03-25 22:53:11 +03:00
dependencies:
Bumped @tryghost/kg-* dependencies no issue - includes bump to minimum version of `markdown-it` for consistency between Ghost and Admin markdown rendering
2021-09-13 11:34:18 +03:00
"@tryghost/kg-markdown-html-renderer" "^5.0.5"
Bumped Koenig-related packages refs https://github.com/TryGhost/Team/issues/910 - fixed missing `alt` attributes on images in bookmark cards - added `email-cta` card - dropped node 10 support
2021-07-20 14:20:36 +03:00
"@tryghost/url-utils" "^2.0.0"
🐛 Fixed bookmark card display in member emails when using Outlook closes https://github.com/TryGhost/Ghost/issues/12148 - updates `@tryghost/kg-default-cards`, new version includes Outlook-specific bookmark card template and styling
2020-08-22 13:13:54 +03:00
handlebars "^4.7.6"
Bumped Koenig-related packages refs https://github.com/TryGhost/Team/issues/910 - fixed missing `alt` attributes on images in bookmark cards - added `email-cta` card - dropped node 10 support
2021-07-20 14:20:36 +03:00
juice "^8.0.0"
Replaced mobiledoc cards with @tryghost/kg-default-cards no issue - moved card definitions to a new library `@tryghost/kg-default-cards` - moved `createCard` factory function to a new library `@tryghost/kg-card-factory`
2020-03-25 22:53:11 +03:00
Bumped @tryghost/kg-* dependencies no issue - includes bump to minimum version of `markdown-it` for consistency between Ghost and Admin markdown rendering
2021-09-13 11:34:18 +03:00
"@tryghost/kg-markdown-html-renderer@5.0.5", "@tryghost/kg-markdown-html-renderer@^5.0.5":
version "5.0.5"
resolved "https://registry.yarnpkg.com/@tryghost/kg-markdown-html-renderer/-/kg-markdown-html-renderer-5.0.5.tgz#c25e54711bcf998fba80e8257838f7d555ded85d"
integrity sha512-C9zror3QbPAKolb04JgHreScx+tTUsB453AenhhyEiyFFJzOyxBqCUL/rtYjhR6kfM38c87we5/dsOphwNbBEA==
🐛 Fixed images not having `srcset` or `sizes` attributes (#12800) closes https://github.com/TryGhost/Team/issues/567 - bumped `@tryghost/kg-default-cards` with a version containing a bugfix for detecting absolute URLs as local content images when they match the site url supplied as an option when rendering - this bug surfaced because of the change in https://github.com/TryGhost/Ghost/pull/12787 - the renderer is now seeing absolute URLs when passed content from the model layer rather than `__GHOST_URL__` URLs. We didn't hit it in 3.x because that was passing content with relative URLs.
2021-03-21 01:17:43 +03:00
dependencies:
Bumped @tryghost/kg-* dependencies no issue - includes bump to minimum version of `markdown-it` for consistency between Ghost and Admin markdown rendering
2021-09-13 11:34:18 +03:00
markdown-it "^12.2.0"
Bumped Koenig packages no issue - includes sub-dependency bumps for `markdown-it` packages for markdown renderer bug fixes and to keep Ghost and Admin markdown rendering in sync
2021-06-01 11:40:09 +03:00
markdown-it-footnote "^3.0.3"
markdown-it-image-lazy-loading "^1.1.0"
🐛 Fixed images not having `srcset` or `sizes` attributes (#12800) closes https://github.com/TryGhost/Team/issues/567 - bumped `@tryghost/kg-default-cards` with a version containing a bugfix for detecting absolute URLs as local content images when they match the site url supplied as an option when rendering - this bug surfaced because of the change in https://github.com/TryGhost/Ghost/pull/12787 - the renderer is now seeing absolute URLs when passed content from the model layer rather than `__GHOST_URL__` URLs. We didn't hit it in 3.x because that was passing content with relative URLs.
2021-03-21 01:17:43 +03:00
markdown-it-lazy-headers "^0.1.3"
markdown-it-mark "^3.0.0"
semver "^7.3.4"
Update dependency @tryghost/kg-mobiledoc-html-renderer to v5.1.1 (#13251) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-01 11:12:09 +03:00
"@tryghost/kg-mobiledoc-html-renderer@5.1.1":
version "5.1.1"
resolved "https://registry.yarnpkg.com/@tryghost/kg-mobiledoc-html-renderer/-/kg-mobiledoc-html-renderer-5.1.1.tgz#b218ec340fe2cdd8c542c1eaf332b73a4df19f58"
integrity sha512-zvrTWFDWI7hTxwAwhsp7lMjr+HirCX0c6YxkmRBcLxcSZrihkB5RcCQRoWmyV9d047T7RXE072Zfh3Y7dGQOXg==
Switched to extracted `@tryghost/mobiledoc-dom-renderer` package no issue - moved `mobiledoc.renderers.mobiledocHtmlRenderer` to `mobiledoc.mobiledocHtmlRenderer` so that it's easier for the getter to access the parent objects getters - removed all tests and dependencies that now live in @tryghost/mobiledoc-dom-renderer - kept the `mobiledocHtmlRenderer` test because that's testing that we've correctly wired up our cards and atoms and the output is what we expect
2020-04-08 20:21:15 +03:00
dependencies:
mobiledoc-dom-renderer "^0.7.0"
✨ Improved header id auto generation for newly created content refs https://github.com/TryGhost/Ghost/issues/12646 - bumps mobiledoc and markdown renderer versions with [new header id algorithms](https://github.com/TryGhost/Koenig/commit/5f0c2fb8bc22042caf9948781ccc26d003e22533) Uses the newly added [`ghostVersion` support](https://github.com/TryGhost/Koenig/commit/0eadc22ddd943071c7bc087bf4429fa4842820cd) to conditionally switch to new header id behaviour when rendering 4.0 or later mobiledoc. - rather than trying unsuccessfully to "improve" readability of anchor links by removing or replacing chars the anchor ID generation will now strip certain special chars, replace spaces with `-` and then url-encode the header text - ids in source code will have percent-encoding but when links or urls are displayed by browsers they will appear as native characters - relies on native browser behaviour so all languages are supported
2021-02-16 14:05:16 +03:00
semver "^7.3.4"
Switched to extracted `@tryghost/mobiledoc-dom-renderer` package no issue - moved `mobiledoc.renderers.mobiledocHtmlRenderer` to `mobiledoc.mobiledocHtmlRenderer` so that it's easier for the getter to access the parent objects getters - removed all tests and dependencies that now live in @tryghost/mobiledoc-dom-renderer - kept the `mobiledocHtmlRenderer` test because that's testing that we've correctly wired up our cards and atoms and the output is what we expect
2020-04-08 20:21:15 +03:00
simple-dom "^1.4.0"
Updated selected Utils packages to unpin dependencies no issue - I recently unpinned dependencies in the Utils monorepo so we can avoid multiple versions of the same package - this commit bumps all the packages that I published, that do not have other changes. Other team members should merge these
2021-04-16 15:59:15 +03:00
"@tryghost/kg-parser-plugins@^1.1.7":
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "1.1.8"
resolved "https://registry.yarnpkg.com/@tryghost/kg-parser-plugins/-/kg-parser-plugins-1.1.8.tgz#ce722ed3f8376c8f38d88f0c40ed5d9c04203f7b"
integrity sha512-VCIahwP0F0U3l/9lVHcW86PPWLuGW7g3TuxAN9NV8crkJZVxVwNEfYTn7bDiRIELYgQIG7jrH6jMlbm6q6ZueA==
✨ Added caption and language extraction for code blocks when converting HTML via API no issue - update @tryghost/html-to-mobiledoc to v0.3.0 - uses updated @tryghost/kg-parser-plugins that is now shared with Ghost-Admin
2019-05-03 13:55:38 +03:00
dependencies:
Lock file maintenance
2021-06-01 18:19:18 +03:00
"@tryghost/kg-clean-basic-html" "^1.0.18"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update dependency @tryghost/limit-service to v0.6.3
2021-09-30 21:17:07 +03:00
"@tryghost/limit-service@0.6.3":
version "0.6.3"
resolved "https://registry.yarnpkg.com/@tryghost/limit-service/-/limit-service-0.6.3.tgz#e9485e00d96f4055149df66292b18e9cf84dac22"
integrity sha512-kHqkj1XvcoTJhm15RvLd66JlMv9cyeHFamxdm+FQmUSMf2G9OH/Q1CARGr4l7RrJetn7Ty+gQsW8AD72U843lA==
Added limit service refs: https://github.com/TryGhost/Team/issues/510 - added and wired up the new limit service, which is a lazy-loaded service - this handles the case that there are host limits set in config, and wraps all the logic needed for detecting exceeded limits & throwing limit errors - expects limits to be set in config under `host_settings.limits` - supported limits are managed in the limit service, outside of core
2021-03-03 15:35:45 +03:00
dependencies:
Update dependency @tryghost/limit-service to v0.6.3
2021-09-30 21:17:07 +03:00
"@tryghost/errors" "^0.2.15"
Added limit service refs: https://github.com/TryGhost/Team/issues/510 - added and wired up the new limit service, which is a lazy-loaded service - this handles the case that there are host limits set in config, and wraps all the logic needed for detecting exceeded limits & throwing limit errors - expects limits to be set in config under `host_settings.limits` - supported limits are managed in the limit service, outside of core
2021-03-03 15:35:45 +03:00
lodash "^4.17.21"
Added support for max periodic limit check refs https://github.com/TryGhost/Team/issues/588 - This is a new type of limit allowing to measure resource use (e.g. sent emails) per period (e.g. subscription, billing, cycle, etc) - To enable periodical limit add following values under `hostSettings.limits`: ``` "emails": { "maxPeriodic": 10, "error": "Your plan supports up to {{max}} emails. Please upgrade to reenable sending emails." } ``` and following under `hostSettings.subscription`: ``` "subscription": { "start": "2020-04-02T15:53:55.000Z", "interval": "month" } ``` - Above config would allow checking if 10 emails per month starting on the 2nd of every month has been reached untill now
2021-05-07 17:41:49 +03:00
luxon "^1.26.0"
Added limit service refs: https://github.com/TryGhost/Team/issues/510 - added and wired up the new limit service, which is a lazy-loaded service - this handles the case that there are host limits set in config, and wraps all the logic needed for detecting exceeded limits & throwing limit errors - expects limits to be set in config under `host_settings.limits` - supported limits are managed in the limit service, outside of core
2021-03-03 15:35:45 +03:00
Update dependency @tryghost/update-check-service to v0.2.2
2021-09-22 18:13:04 +03:00
"@tryghost/logging@0.1.7", "@tryghost/logging@^0.1.7":
Update dependency @tryghost/logging to v0.1.7
2021-09-14 22:33:49 +03:00
version "0.1.7"
resolved "https://registry.yarnpkg.com/@tryghost/logging/-/logging-0.1.7.tgz#22fbff99bc880402691e8836f550348df1c797d8"
integrity sha512-8EM2lCT9E7zt6SlGwlAlQQ7Nwoq2vXgU9C5KFBV/2rbMgnsVsNOwdPGgixozxNNczxYFkTHF5mpQg/+3oV2GjQ==
dependencies:
"@tryghost/bunyan-rotating-filestream" "^0.0.7"
"@tryghost/elasticsearch-bunyan" "^0.1.1"
"@tryghost/root-utils" "^0.3.4"
bunyan "^1.8.15"
bunyan-loggly "^1.4.2"
fs-extra "^9.1.0"
gelf-stream "^1.1.1"
json-stringify-safe "^5.0.1"
lodash "^4.17.21"
moment "^2.29.1"
prettyjson "^1.2.1"
Update dependency @tryghost/magic-link to v1.0.13 (#13370) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-28 17:09:07 +03:00
"@tryghost/magic-link@1.0.13", "@tryghost/magic-link@^1.0.13":
Added initial support for Offers 1-day version refs https://github.com/TryGhost/Team/issues/1090 This updates the members-api to allow passing an Offer ID when creating a Stripe Checkout Session. This will be used for the 1-day version of Offers.
2021-09-28 15:43:36 +03:00
version "1.0.13"
resolved "https://registry.yarnpkg.com/@tryghost/magic-link/-/magic-link-1.0.13.tgz#6780e4a1951d2262ffbf48757a6e9d22b84873c4"
integrity sha512-B2yJWHJKkrauEUXm++oKJekJPvNBHrlixa4kHfdj9mqzT8hj6PwO9XBS1038uv8csNeQfdCTdGPVFaB/fqdH4A==
dependencies:
bluebird "^3.5.5"
jsonwebtoken "^8.5.1"
lodash "^4.17.15"
"@tryghost/member-analytics-service@^0.1.2":
version "0.1.2"
resolved "https://registry.yarnpkg.com/@tryghost/member-analytics-service/-/member-analytics-service-0.1.2.tgz#9099e7a789cdd3ba17d4d6121842c7195aceb9b4"
integrity sha512-MGX2RqOxtyaxKIjJDBTkB3tpdhp6m6TLYPHnOIK1puD0wuQirl37I1P42lieOXNs8aGhP5nNF2z4BqUwwrq+tA==
Fixed updating products inside of a transaction no-issue When updating products we make many reads and writes to the database, some of these reads were not happening inside of a transaction which was causing issues when loading the members setting page. This bumps the @tryghost/members-api dependency to ensure that all of the database operations happen inside of the transaction
2021-09-01 20:14:21 +03:00
dependencies:
Added initial support for Offers 1-day version refs https://github.com/TryGhost/Team/issues/1090 This updates the members-api to allow passing an Offer ID when creating a Stripe Checkout Session. This will be used for the 1-day version of Offers.
2021-09-28 15:43:36 +03:00
"@tryghost/domain-events" "^0.1.2"
Added member analytics events handling refs https://github.com/TryGhost/Team/issues/1064 refs https://github.com/TryGhost/Team/issues/1056 refs https://github.com/TryGhost/Team/issues/1054 refs https://github.com/TryGhost/Team/issues/1055 - adds handling for new member analytic events including new ingress endpoint - introduces member-analytics packages and code
2021-09-22 15:50:56 +03:00
"@tryghost/errors" "^0.2.14"
Added initial support for Offers 1-day version refs https://github.com/TryGhost/Team/issues/1090 This updates the members-api to allow passing an Offer ID when creating a Stripe Checkout Session. This will be used for the 1-day version of Offers.
2021-09-28 15:43:36 +03:00
"@tryghost/member-events" "^0.2.1"
Added member analytics events handling refs https://github.com/TryGhost/Team/issues/1064 refs https://github.com/TryGhost/Team/issues/1056 refs https://github.com/TryGhost/Team/issues/1054 refs https://github.com/TryGhost/Team/issues/1055 - adds handling for new member analytic events including new ingress endpoint - introduces member-analytics packages and code
2021-09-22 15:50:56 +03:00
"@tryghost/tpl" "^0.1.4"
bson-objectid "^2.0.1"
Fixed updating products inside of a transaction no-issue When updating products we make many reads and writes to the database, some of these reads were not happening inside of a transaction which was causing issues when loading the members setting page. This bumps the @tryghost/members-api dependency to ensure that all of the database operations happen inside of the transaction
2021-09-01 20:14:21 +03:00
Added initial support for Offers 1-day version refs https://github.com/TryGhost/Team/issues/1090 This updates the members-api to allow passing an Offer ID when creating a Stripe Checkout Session. This will be used for the 1-day version of Offers.
2021-09-28 15:43:36 +03:00
"@tryghost/member-events@^0.2.1":
version "0.2.1"
resolved "https://registry.yarnpkg.com/@tryghost/member-events/-/member-events-0.2.1.tgz#65b6c4875f530c86acfb29c1a5ad13d88bc7d8a9"
integrity sha512-vNxHCXMEC87wy3VLCfa/1uvJSihNDlZTU2/MKfA2HNx/MLwmdxmwAIFbcIuDXkK81fYMF7SruzbmUv5mxDEQ6g==
Added member analytics events handling refs https://github.com/TryGhost/Team/issues/1064 refs https://github.com/TryGhost/Team/issues/1056 refs https://github.com/TryGhost/Team/issues/1054 refs https://github.com/TryGhost/Team/issues/1055 - adds handling for new member analytic events including new ingress endpoint - introduces member-analytics packages and code
2021-09-22 15:50:56 +03:00
Added initial support for Offers 1-day version refs https://github.com/TryGhost/Team/issues/1090 This updates the members-api to allow passing an Offer ID when creating a Stripe Checkout Session. This will be used for the 1-day version of Offers.
2021-09-28 15:43:36 +03:00
"@tryghost/members-analytics-ingress@^0.1.3":
version "0.1.3"
resolved "https://registry.yarnpkg.com/@tryghost/members-analytics-ingress/-/members-analytics-ingress-0.1.3.tgz#deccaa96d41096d847e162e29278817113cf0087"
integrity sha512-GnoQJi91Dz5XO2yn2BcZOJokxHIvICVVClKYIMQnW45yW4Sl4ad3y58/1rjL1pT91pmK/vsEHqNMv56PWXBYUg==
Added member analytics events handling refs https://github.com/TryGhost/Team/issues/1064 refs https://github.com/TryGhost/Team/issues/1056 refs https://github.com/TryGhost/Team/issues/1054 refs https://github.com/TryGhost/Team/issues/1055 - adds handling for new member analytic events including new ingress endpoint - introduces member-analytics packages and code
2021-09-22 15:50:56 +03:00
dependencies:
Added initial support for Offers 1-day version refs https://github.com/TryGhost/Team/issues/1090 This updates the members-api to allow passing an Offer ID when creating a Stripe Checkout Session. This will be used for the 1-day version of Offers.
2021-09-28 15:43:36 +03:00
"@tryghost/domain-events" "^0.1.2"
"@tryghost/member-events" "^0.2.1"
Added member analytics events handling refs https://github.com/TryGhost/Team/issues/1064 refs https://github.com/TryGhost/Team/issues/1056 refs https://github.com/TryGhost/Team/issues/1054 refs https://github.com/TryGhost/Team/issues/1055 - adds handling for new member analytic events including new ingress endpoint - introduces member-analytics packages and code
2021-09-22 15:50:56 +03:00
Added initial support for Offers 1-day version refs https://github.com/TryGhost/Team/issues/1090 This updates the members-api to allow passing an Offer ID when creating a Stripe Checkout Session. This will be used for the 1-day version of Offers.
2021-09-28 15:43:36 +03:00
"@tryghost/members-api@1.39.0":
version "1.39.0"
resolved "https://registry.yarnpkg.com/@tryghost/members-api/-/members-api-1.39.0.tgz#6b2f5cadd9b164c08b2d7e08dbebb77cf61efeec"
integrity sha512-yVDhQzNVj4esSXKqNmdyYUlNd5QGWTHgih0lsJEIH8wW33u5bd97TT/UUpYi0gAbJon4hgMR6V7byHjRoiOJHg==
Supported 'comped' status in MemberRepository refs https://github.com/TryGhost/Team/issues/790 This makes the create, update & linkSubscription methods correctly handle the comped status for members.
2021-07-06 13:19:51 +03:00
dependencies:
"@tryghost/debug" "^0.1.2"
Bumped Members packages no-issue - packages are out of RC and ready for release
2021-03-10 21:51:34 +03:00
"@tryghost/errors" "^0.2.9"
Supported 'comped' status in MemberRepository refs https://github.com/TryGhost/Team/issues/790 This makes the create, update & linkSubscription methods correctly handle the comped status for members.
2021-07-06 13:19:51 +03:00
"@tryghost/ignition-errors" "^0.1.2"
Added initial support for Offers 1-day version refs https://github.com/TryGhost/Team/issues/1090 This updates the members-api to allow passing an Offer ID when creating a Stripe Checkout Session. This will be used for the 1-day version of Offers.
2021-09-28 15:43:36 +03:00
"@tryghost/magic-link" "^1.0.13"
"@tryghost/member-analytics-service" "^0.1.2"
"@tryghost/members-analytics-ingress" "^0.1.3"
"@tryghost/members-stripe-service" "^0.2.0"
Supported directly assigning products to members refs https://github.com/TryGhost/Team/issues/748 This updates the @tryghost/members-api MemberRepository to stop ignoring the `products` data passed to write operations, and to attach products directly to members. As this logic is part of a new feature, we are maintaining existing functionality by deleting the products data when the feature flag is not enabled. This functionality allows us to give members complimentary access to a product without needing to use a Stripe Subscription internally.
2021-06-17 14:44:25 +03:00
"@tryghost/tpl" "^0.1.2"
Handled week & day interval in population of mrr events refs https://github.com/TryGhost/Team/issues/635 This is to ensure we don't break migrations for any sites which have imported external subscriptions which have an interval of 'week' or 'day' The bump to members-api includes the handling of these intervals for ongoing population of mrr events
2021-05-20 18:52:51 +03:00
"@types/jsonwebtoken" "^8.5.1"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
bluebird "^3.5.4"
body-parser "^1.19.0"
Added Members bulk actions endpoint refs https://github.com/TryGhost/Team/issues/946 This adds the initial bulk actions endpoint used for the members filtering feature. The idea is to eventually move bulk destroy into this endpoint to and provide a consistent interface for applying bulk actions to members. The @tryghost/members-api package has been bumped to include the new bulkEdit method. The sinon.restore in tests was moved to an afterEach so that stubs did not effect other tests.
2021-08-13 16:18:57 +03:00
bson-objectid "^2.0.1"
Installed @tryghost/members-api@0.8.3 no-issue This improves logging for webhook signature validation
2019-10-30 13:24:04 +03:00
cookies "^0.8.0"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
express "^4.16.4"
✨ Added capture of geolocation during member signup/signin no issue - updated `@tryghost/members-api` which now includes geolocation lookup from IP address during member signup and signin when geolocation data doesn't already exist
2020-02-27 13:46:37 +03:00
got "^9.6.0"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
jsonwebtoken "^8.5.1"
lodash "^4.17.11"
✨ Added support for gating content by member labels and products (#12946) refs https://github.com/TryGhost/Team/issues/581 closes https://github.com/TryGhost/Team/issues/582 Emails can now be sent to members with specific associated labels or products by specifying an NQL string. We want to bring the same members segment feature to content by allowing `visibility` to be an NQL filter string on top of the `public/members/paid` special-case strings. As an example it's possible to set `posts.visibility` to `label:vip` to make a post available only to those members with the `vip` label. - removed enum validations for `visibility` so it now accepts any string or `null` - bumped `@tryghost/admin-api-schema` for API-level validation changes - added nql validation to API input validators by running the visibility query against the members model - added transform of NQL to special-case visibility values when saving post model - ensures there's a single way of representing "members" and "paid" where NQL gives multiple ways of representing the same segment - useful for keeping theme-level checks such as `{{#has visibility="paid"}}` working as expected - updated content-gating to parse nql from post's visibility and use it to query the currently logged in member to see if there's a match - bumped @tryghost/members-api to include label and product data when loading member
2021-05-10 21:32:11 +03:00
node-jose "^2.0.0"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
Update dependency @tryghost/members-importer to v0.3.3 (#13372) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-29 11:58:10 +03:00
"@tryghost/members-csv@1.1.7", "@tryghost/members-csv@^1.1.7":
Update dependency @tryghost/members-csv to v1.1.7 (#13371) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-28 17:08:50 +03:00
version "1.1.7"
resolved "https://registry.yarnpkg.com/@tryghost/members-csv/-/members-csv-1.1.7.tgz#c62d08681816330058ff123761bbaa38f6765504"
integrity sha512-wUgQ1ShWOoW+HUrDAroYYSsYI1zWBACD7AveDB3PFamNdbkGg4WhW8Glc5ZBj6X7vsGWz0HjbH3Bob8mS8zEcA==
dependencies:
bluebird "^3.7.2"
fs-extra "^10.0.0"
lodash "^4.17.21"
papaparse "5.3.1"
pump "^3.0.0"
Update dependency @tryghost/members-importer to v0.3.3 (#13372) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-29 11:58:10 +03:00
"@tryghost/members-importer@0.3.3":
version "0.3.3"
resolved "https://registry.yarnpkg.com/@tryghost/members-importer/-/members-importer-0.3.3.tgz#a9c697d908f5d09f81ec65dc79f5446a4793033d"
integrity sha512-wUATBB+l42YSz1nWAyOWNQ2mHxJtOoxYAj52xFpXjDmFA7gQPFPT/Nelc1NjCuF/cCZ+i+D7bZCONA8nz3FpxA==
Integrated @tryghost/members-importer closes https://github.com/TryGhost/Team/issues/916 - The members importer module was extracted into an ouside module as per project structuring standards
2021-07-21 18:34:11 +03:00
dependencies:
"@tryghost/errors" "^0.2.13"
Update dependency @tryghost/members-importer to v0.3.3 (#13372) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-29 11:58:10 +03:00
"@tryghost/members-csv" "^1.1.7"
Integrated @tryghost/members-importer closes https://github.com/TryGhost/Team/issues/916 - The members importer module was extracted into an ouside module as per project structuring standards
2021-07-21 18:34:11 +03:00
"@tryghost/tpl" "^0.1.3"
moment-timezone "0.5.23"
Update dependency @tryghost/members-ssr to v1.0.14 (#13373) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-28 16:44:06 +03:00
"@tryghost/members-ssr@1.0.14":
version "1.0.14"
resolved "https://registry.yarnpkg.com/@tryghost/members-ssr/-/members-ssr-1.0.14.tgz#8de4aca6c788f95aad52386f055ff2f5b1c7559c"
integrity sha512-/+fNvFURFZusG4Q3btXFUxwKdrqNJukX5yY7r9+LdfCql4FWX9OJiNBJw/ztfoRaNabgLZschWEkGBd/JQdr+g==
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
dependencies:
Update dependency @tryghost/members-ssr to v1.0.5
2021-07-06 14:24:23 +03:00
"@tryghost/debug" "^0.1.2"
"@tryghost/ignition-errors" "^0.1.2"
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
bluebird "^3.5.3"
concat-stream "^2.0.0"
Update dependency @tryghost/members-ssr to v0.7.2
2019-11-04 03:32:17 +03:00
cookies "^0.8.0"
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
jsonwebtoken "^8.5.1"
lodash "^4.17.11"
Added initial support for Offers 1-day version refs https://github.com/TryGhost/Team/issues/1090 This updates the members-api to allow passing an Offer ID when creating a Stripe Checkout Session. This will be used for the 1-day version of Offers.
2021-09-28 15:43:36 +03:00
"@tryghost/members-stripe-service@^0.2.0":
version "0.2.0"
resolved "https://registry.yarnpkg.com/@tryghost/members-stripe-service/-/members-stripe-service-0.2.0.tgz#6fe9dd41c24126c62f4400b25fcb566ec4e59b94"
integrity sha512-cgajf6n4NZ3/jzoTkWNiJA0IqmHcL5RdA5SNImdpsofsDVl5fVJEkbDqsRuQzaYXRwbpfuu68LMo7IiQWlEx9g==
Added member analytics events handling refs https://github.com/TryGhost/Team/issues/1064 refs https://github.com/TryGhost/Team/issues/1056 refs https://github.com/TryGhost/Team/issues/1054 refs https://github.com/TryGhost/Team/issues/1055 - adds handling for new member analytic events including new ingress endpoint - introduces member-analytics packages and code
2021-09-22 15:50:56 +03:00
dependencies:
"@tryghost/debug" "^0.1.4"
"@tryghost/errors" "^0.2.13"
leaky-bucket "^2.2.0"
stripe "^8.174.0"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
"@tryghost/mobiledoc-kit@^0.12.4-ghost.1":
version "0.12.4-ghost.1"
resolved "https://registry.yarnpkg.com/@tryghost/mobiledoc-kit/-/mobiledoc-kit-0.12.4-ghost.1.tgz#32060242b4c7e787a9605ba856454c6a26141925"
integrity sha512-c4aheSWH2Y7x4uSkAx08gbtvuEgPGjlu6v+FeUdSJZ1blEd+knL3zTcUAfeSiM6rgLEHxlNWtt+KFwotdf6rTA==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
mobiledoc-dom-renderer "0.7.0"
mobiledoc-text-renderer "0.4.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update dependency @tryghost/mw-session-from-token to v0.1.24
2021-09-30 21:17:20 +03:00
"@tryghost/mw-session-from-token@0.1.24":
version "0.1.24"
resolved "https://registry.yarnpkg.com/@tryghost/mw-session-from-token/-/mw-session-from-token-0.1.24.tgz#61f238a8da9e1d6d6e3fe7a3095673949e52eb3e"
integrity sha512-8nhpKyswr65CJ4BzGk64A8OKPOR2JvDGQc/6eFD+/IXjlPWiZaoYRA22GaBrgrcif98qKG6axcTqdD2lbXI22Q==
Added support for token session to /ghost (#11709) no-issue * Added default for getting origin of request This function is used to attach the origin of the request to the session, and later check that requests using the session are coming from the same origin. This protects us against CSRF attacks as requests in the browser MUST originate from the same origin on which the user logged in. Previously, when we could not determine the origin we would return null, as a "safety" net. This updates the function to use a secure and sensible default - which is the origin of the Ghost-Admin application, and if that's not set - the origin of the Ghost application. This will make dealing with magic links simpler as you can not always guaruntee the existence of these headers when visiting via a hyperlink * Removed init fns and getters from session service This simplifies the code here, making it easier to read and maintain * Moved express-session initialisation to own file This is complex enough that it deserves its own module * Added createSessionFromToken to session service * Wired up the createSessionFromToken middleware
2020-04-06 12:49:14 +03:00
🐛 Fixed mail config not respecting disabled secure connections refs https://forum.ghost.org/t/un-noticed-email-config-change-in-4-15-16/25869/6 refs https://linear.app/tryghost/issue/CORE-66/fixed-secureconnection-alias-for-nodemailer - `secureConnection` was removed in Nodemailer 1.0.2 in favor of `secure` but we're locked into supporting it because a lot of our users will have it in their config - I attempted to alias it to keep compatibility but I did this incorrectly and only handled the cases where it was set to `true` - this meant users who had disabled secure connections were seeing SSL warnings because the library was trying to connect via SSL to a non-SSL endpoint - the aliasing is fixed in `@tryghost/nodemailer` 0.3.3 and so this commit bumps the package in Ghost
2021-09-28 16:45:39 +03:00
"@tryghost/nodemailer@0.3.3":
version "0.3.3"
resolved "https://registry.yarnpkg.com/@tryghost/nodemailer/-/nodemailer-0.3.3.tgz#4a6662509a276b72b85abe1b687e5949e5a0cbbf"
integrity sha512-tj8WLm5J3ZL2ySs56OqUezjBJ777hrJ2MMOpreLK4ExAUK+hf8FW0EusXDWdLOggqllRc1QrSVLp2gRXkLSgGg==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
dependencies:
"@aws-sdk/client-ses" "^3.31.0"
"@tryghost/errors" "^0.2.13"
nodemailer "^6.6.3"
nodemailer-direct-transport "^3.3.2"
nodemailer-stub-transport "^1.1.0"
Update dependency @tryghost/package-json to v1.0.4
2021-10-01 10:45:26 +03:00
"@tryghost/package-json@1.0.4":
version "1.0.4"
resolved "https://registry.yarnpkg.com/@tryghost/package-json/-/package-json-1.0.4.tgz#eaade11659660d2b155d64ad8d4d631fcff57a73"
integrity sha512-rdymLZE55zHNW0/1bO6dby4j2YFsLm4lBzv7rg1vV5UOxIhEvlmbl/1HssEmVa6FVVXCRZRhHxWS+6clkF/i+g==
Extracted `package-json` lib to Utils refs https://github.com/TryGhost/Utils/commit/37ebe723c6867a3f85d5570c0c2abb2ac2b365be - `package-json` was a standalone library using dependency injection so we could pull it out into its own package in Utils - this was done in the commit referenced above - this commit removes the implementation and tests in Ghost and replaces the require in the initialization wrapper with the new package
2021-05-07 14:11:53 +03:00
dependencies:
Update dependency @tryghost/package-json to v1.0.4
2021-10-01 10:45:26 +03:00
"@tryghost/errors" "^0.2.15"
"@tryghost/tpl" "^0.1.5"
Extracted `package-json` lib to Utils refs https://github.com/TryGhost/Utils/commit/37ebe723c6867a3f85d5570c0c2abb2ac2b365be - `package-json` was a standalone library using dependency injection so we could pull it out into its own package in Utils - this was done in the commit referenced above - this commit removes the implementation and tests in Ghost and replaces the require in the initialization wrapper with the new package
2021-05-07 14:11:53 +03:00
bluebird "^3.7.2"
fs-extra "^10.0.0"
lodash "^4.17.21"
Added syncing and theme exposure of custom theme settings (#13354) refs https://github.com/TryGhost/Team/issues/1070 - added `@tryghost/custom-theme-settings-service` as a dependency - `core/server/services/custom-theme-settings` creates an instance of the new service passing in the model used for storing the setting keys/values and a cache instance - requiring `core/shared/services/custom-theme-settings-cache` creates a cache instance, it has no dependencies so can be required anywhere and the first require will initialize the shared instance - updated the theme activation bridge to trigger the theme settings service to sync the newly activated theme settings and populate the cache - updated theme validation to pass `labs` through as an option so that we get custom theme settings back as part of the checked theme as that's what is passed to the custom theme settings service
2021-09-23 14:44:39 +03:00
"@tryghost/pretty-cli@1.2.19":
version "1.2.19"
resolved "https://registry.yarnpkg.com/@tryghost/pretty-cli/-/pretty-cli-1.2.19.tgz#26daa51651f87a4c39d3d3013a1ba87622f4f13e"
integrity sha512-99aXM1O9FD2U7ZgJNEyJ8kktuHRGt4FDihgfdbqvJjGL2mmPg9VsbJJwRa6mTNUhH1EYOyBZ4yH654Mg9hYTrg==
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
dependencies:
🐛 Upgrade Gscan to 4.1.1 issue TryGhost/Team#864 Use latest gscan to fix issue where custom themes didn't work
2021-07-08 12:52:21 +03:00
chalk "^4.1.0"
sywac "^1.3.0"
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
Update dependency @tryghost/promise to v0.1.11
2021-09-30 21:17:47 +03:00
"@tryghost/promise@0.1.11":
version "0.1.11"
resolved "https://registry.yarnpkg.com/@tryghost/promise/-/promise-0.1.11.tgz#05bf70150119c5bf718f1754b8343042f9c1abdc"
integrity sha512-xpmFNoaozGP1ZMjGH6RFa0N/JUZ8wIPzMLzWNil/itQ4QA9crWj//pMalhq4pCMBRdxViRkS1JiLDq+naJOvmw==
Extracted promise libs and history into @tryghost/promise - deleted files under `core/server/lib/promise` and related test files - added `@tryghost/promise` as a dependency - fixed all local requires to point to the new package
2020-08-11 20:44:21 +03:00
dependencies:
Bumped selected dependencies to unpin sub-dependencies no issue - we've been unpinning dependencies in our libraries to remove duplicates - this commit bumps packages from the Utils repo and NQL, all of which contain changes to unpin their own dependencies
2021-04-19 12:46:47 +03:00
bluebird "^3.7.2"
Extracted promise libs and history into @tryghost/promise - deleted files under `core/server/lib/promise` and related test files - added `@tryghost/promise` as a dependency - fixed all local requires to point to the new package
2020-08-11 20:44:21 +03:00
Update dependency @tryghost/request to v0.1.5
2021-09-14 19:52:48 +03:00
"@tryghost/request@0.1.5":
version "0.1.5"
resolved "https://registry.yarnpkg.com/@tryghost/request/-/request-0.1.5.tgz#49f0228a2dde49ff39dd083a84470ea888d1188e"
integrity sha512-zTL8KcCcDyGJBNrHK/rm19ldqIxXrDzIghXQXQjGJCOHpx9sCT8tMkKjs+TnpN4jr0Q46i+qmhCmV711EZSGig==
Replaced request module with @tryghost/request no issue Part of the effort to break up Ghost into smaller, decoupled modules.
2021-06-16 14:54:14 +03:00
dependencies:
"@tryghost/errors" "^0.2.12"
Update dependency @tryghost/request to v0.1.5
2021-09-14 19:52:48 +03:00
"@tryghost/validator" "^0.1.5"
"@tryghost/version" "^0.1.4"
Replaced request module with @tryghost/request no issue Part of the effort to break up Ghost into smaller, decoupled modules.
2021-06-16 14:54:14 +03:00
got "9.6.0"
lodash "^4.17.21"
Update dependency @tryghost/root-utils to v0.3.4
2021-09-14 22:34:02 +03:00
"@tryghost/root-utils@0.3.4", "@tryghost/root-utils@^0.3.4":
version "0.3.4"
resolved "https://registry.yarnpkg.com/@tryghost/root-utils/-/root-utils-0.3.4.tgz#621bc9564ba3fa78ac1a066f3794f501cf85e055"
integrity sha512-7ExJfA7m5s8djpe8d7ij/rvLZbZ6O9i/HvG7PHCTvDoilyINUW1xwBgsGR2cUmKwLO3dilYYxaQfvRJXB0VwBA==
Added @tryghost/root-utils to the ghost-version module no issue Part of the effort to split ghost into smaller, decoupled parts. The @root-utils package lets us avoid hard-coding a path to package.json, and means that the ghost-version.js file could eventually be moved into a separate module. This commit uses a patched version of @tryghost/root-utils which checks for the existence of a `current` directory, as used in Ghost-CLI. Since this is very specific to Ghost and Ghost CLI, there's a new method called "getGhostRoot" for this purpose.
2021-06-15 12:43:27 +03:00
dependencies:
caller "^1.0.1"
find-root "^1.1.0"
✨ Added detection of conditional partials in themes refs https://github.com/TryGhost/Team/issues/781 refs https://github.com/TryGhost/Team/issues/774 - Previous versions of gscan weren't able to detect partial usage inside of a heprer, e.g.: "{{#if author}}{{> "missingpartial"}}{{/if}}". It's important to be able to detect these on theme upload/validation stage to avoid errors during the runtime. - The updated version provides additional information about used and unused partials and helpers. - With this change users might start seeing a "fatal" error during an upload/activation of a theme previously passing validation. Currently active themes with partials used in the context will still allow for a boot, but will log a 422 error pointing to missing partial.
2021-06-16 18:53:16 +03:00
"@tryghost/root-utils@^0.1.0":
version "0.1.0"
resolved "https://registry.yarnpkg.com/@tryghost/root-utils/-/root-utils-0.1.0.tgz#7578cb5e57953316fef58edd43a152a86b719a8f"
integrity sha512-zy3PSviwytjvjdMso86RYZLE2I4e2yL/s83fIEf/g17C8V8hsCcgE83cFOpCw3ISWDFX3Qi0IX9kI3or2pfGLg==
dependencies:
caller "^1.0.1"
find-root "^1.1.0"
Update dependency @tryghost/security to v0.2.11
2021-09-30 21:18:00 +03:00
"@tryghost/security@0.2.11":
version "0.2.11"
resolved "https://registry.yarnpkg.com/@tryghost/security/-/security-0.2.11.tgz#a2380c3dd3abefb207c4f1f75c614d17a92a6cb9"
integrity sha512-qoW4ABWOw2OhfE0wCIFQbBIgjbVnsvTOGDUfylofzYpSqe130Vec8aStr96Sgh1beiTnHtMhSjnRBxl9eKdycQ==
Extracted core/server/lib/security to @tryghost/security package - code and tests were extracted out to this package - deletes these files - replaces all local requires, and adds it as a dependency
2020-08-11 16:01:16 +03:00
dependencies:
Bumped selected dependencies to unpin sub-dependencies no issue - we've been unpinning dependencies in our libraries to remove duplicates - this commit bumps packages from the Utils repo and NQL, all of which contain changes to unpin their own dependencies
2021-04-19 12:46:47 +03:00
"@tryghost/string" "^0.1.17"
bcryptjs "^2.4.3"
bluebird "^3.7.2"
lodash "^4.17.21"
Extracted core/server/lib/security to @tryghost/security package - code and tests were extracted out to this package - deletes these files - replaces all local requires, and adds it as a dependency
2020-08-11 16:01:16 +03:00
Update dependency @tryghost/session-service to v0.1.26
2021-10-01 10:45:39 +03:00
"@tryghost/session-service@0.1.26":
version "0.1.26"
resolved "https://registry.yarnpkg.com/@tryghost/session-service/-/session-service-0.1.26.tgz#935409d80f53e95da69592607cbd3d3cd0052c6b"
integrity sha512-nQ9qhI9c2h9B+BVa5oYxxf0EbuTk2LoPXQ7km4xEs1wYTXhtR68Vdjdo6iP2GdYsEspGvBJUhA6PmUL0DuJZCw==
Refactored session service (#11701) * Refactored SessionStore to use @tryghost/errors no-issue * Updated tests to test exposed API no-issue This will make refactoring easier, as we only have the "public" contract to maintain * Refactored session functionality to SessionService no-issue This splits the session logic away from the HTTP responding logic, which will allows us to decouple session creation/modification from the API. Eventually this can be used to create sessions based on magiclink style tokens. * Instantiated and exported the new SessionService no-issue * Refactored session middleware to take session service no-issue This removes duplication of code and makes the middleware more explicit that it's just a wrapper around the session service. * Updated to use external @tryghost/session-service no-issue
2020-04-02 17:27:31 +03:00
dependencies:
Update dependency @tryghost/session-service to v0.1.26
2021-10-01 10:45:39 +03:00
"@tryghost/errors" "^0.2.15"
Refactored session service (#11701) * Refactored SessionStore to use @tryghost/errors no-issue * Updated tests to test exposed API no-issue This will make refactoring easier, as we only have the "public" contract to maintain * Refactored session functionality to SessionService no-issue This splits the session logic away from the HTTP responding logic, which will allows us to decouple session creation/modification from the API. Eventually this can be used to create sessions based on magiclink style tokens. * Instantiated and exported the new SessionService no-issue * Refactored session middleware to take session service no-issue This removes duplication of code and makes the middleware more explicit that it's just a wrapper around the session service. * Updated to use external @tryghost/session-service no-issue
2020-04-02 17:27:31 +03:00
Update dependency @tryghost/social-urls to v0.1.26
2021-08-06 13:10:45 +03:00
"@tryghost/social-urls@0.1.26":
version "0.1.26"
resolved "https://registry.yarnpkg.com/@tryghost/social-urls/-/social-urls-0.1.26.tgz#dfacc38cf187d9f6733155e6408329ef54210c72"
integrity sha512-gwh8W2tlaaKwxrQSNvvnJTUUOVyDQQ4DR+ukEgVBwKbU5m7BePACf/0iuLY3PZ3mvZyzaQ3Jc3IWQHd/FDglPA==
Migrated to use @tryghost/social-urls package refs #10618 - /lib/social/urls was extracted into SDK to move more modules out of the core and reduce coupling of the theme layer
2019-06-06 18:01:03 +03:00
Update dependency @tryghost/string to v0.1.20
2021-08-05 14:46:57 +03:00
"@tryghost/string@0.1.20", "@tryghost/string@^0.1.17":
Lock file maintenance
2021-08-02 05:46:09 +03:00
version "0.1.20"
resolved "https://registry.yarnpkg.com/@tryghost/string/-/string-0.1.20.tgz#da38e1412b2bb53dee1fe1e7a7de3f43450452a0"
integrity sha512-+EA1BJ5D55RQA3HsTMchGdxXL/0cN/rHbSjqLhjBhKuWTFNLb6AR9res1Bw3vb7ZxMV0ggUOrFDJ1Lqo2RbsEA==
dependencies:
unidecode "^0.1.8"
Update dependency @tryghost/package-json to v1.0.4
2021-10-01 10:45:26 +03:00
"@tryghost/tpl@0.1.5", "@tryghost/tpl@^0.1.5":
Update dependency @tryghost/tpl to v0.1.5
2021-09-30 21:18:28 +03:00
version "0.1.5"
resolved "https://registry.yarnpkg.com/@tryghost/tpl/-/tpl-0.1.5.tgz#736dbe49d085bf8a495963062e0a5ff72e68a18a"
integrity sha512-uE4sQ07UdjAhxidEVPwZShLdmLRcaYlrIA/rbiaB37cJ9VtXEAYwcDLb/tdnlnoXuTQ3Y1vShCWgjyD4vGo5kA==
Added member analytics events handling refs https://github.com/TryGhost/Team/issues/1064 refs https://github.com/TryGhost/Team/issues/1056 refs https://github.com/TryGhost/Team/issues/1054 refs https://github.com/TryGhost/Team/issues/1055 - adds handling for new member analytic events including new ingress endpoint - introduces member-analytics packages and code
2021-09-22 15:50:56 +03:00
dependencies:
lodash.template "^4.5.0"
Update dependency @tryghost/tpl to v0.1.4
2021-09-22 18:36:08 +03:00
"@tryghost/tpl@^0.1.1", "@tryghost/tpl@^0.1.2", "@tryghost/tpl@^0.1.3":
version "0.1.3"
resolved "https://registry.yarnpkg.com/@tryghost/tpl/-/tpl-0.1.3.tgz#719e1161f7af1f9cfed055aeb8e1ba8058103d3f"
integrity sha512-RLuhgPIGhEO/eSYJ7VjjcLy18a4QMOqBb+e6ThKQloWgIZKjSuo2Z15zcqCu3pnFWyGEOyMBGTL/CFnSEhN74Q==
dependencies:
lodash.template "^4.5.0"
Update dependency @tryghost/tpl to v0.1.5
2021-09-30 21:18:28 +03:00
"@tryghost/tpl@^0.1.4":
version "0.1.4"
resolved "https://registry.yarnpkg.com/@tryghost/tpl/-/tpl-0.1.4.tgz#58eff86a1370f3290fc11092708ad4b6015df70d"
integrity sha512-5a7c9lx3dwN2s7FkhBmg+Hp4PpDiRLl4wJ37w9N+/pWYyqjkW+2j4lrYNEtS4RgcnOxoQ4mUSHZbJ8RoQbAjbQ==
dependencies:
lodash.template "^4.5.0"
Update dependency @tryghost/update-check-service to v0.2.2
2021-09-22 18:13:04 +03:00
"@tryghost/update-check-service@0.2.2":
version "0.2.2"
resolved "https://registry.yarnpkg.com/@tryghost/update-check-service/-/update-check-service-0.2.2.tgz#0de3bee6501305f3ffeeeae80f0d5068687ff847"
integrity sha512-6itDvtzKx+5IZ4Mr8cBIKBlDjFsLNKTpYWFb5xW38OBHpfHQbXloGw0A5z6b7cqjfjI6tDiWxxrYD7mJJnVt9w==
Removed update check service in favor of external package refs https://github.com/TryGhost/Team/issues/728 - The code of update check has been extracted into it's own package as a part of TryGhost/Core monorepo. This commit is a cleanup of the leftover files
2021-06-03 12:24:19 +03:00
dependencies:
Update dependency @tryghost/update-check-service to v0.2.2
2021-09-22 18:13:04 +03:00
"@tryghost/debug" "^0.1.5"
Removed update check service in favor of external package refs https://github.com/TryGhost/Team/issues/728 - The code of update check has been extracted into it's own package as a part of TryGhost/Core monorepo. This commit is a cleanup of the leftover files
2021-06-03 12:24:19 +03:00
"@tryghost/errors" "^0.2.11"
Update dependency @tryghost/update-check-service to v0.2.2
2021-09-22 18:13:04 +03:00
"@tryghost/logging" "^0.1.7"
Removed unneded i18n and logging parametes from update check refs https://github.com/TryGhost/Team/issues/727 - @tryghost/update-check-service v0.2.0 does not require either i18n or logging parameters - makes things less tangled up!
2021-07-02 18:04:32 +03:00
"@tryghost/tpl" "^0.1.3"
Update dependency @tryghost/update-check-service to v0.2.2
2021-09-22 18:13:04 +03:00
bluebird "^3.7.2"
lodash "^4.17.21"
moment "^2.24.0"
Removed update check service in favor of external package refs https://github.com/TryGhost/Team/issues/728 - The code of update check has been extracted into it's own package as a part of TryGhost/Core monorepo. This commit is a cleanup of the leftover files
2021-06-03 12:24:19 +03:00
Update dependency @tryghost/url-utils to v2.0.2
2021-08-05 14:47:10 +03:00
"@tryghost/url-utils@2.0.2", "@tryghost/url-utils@^2.0.0":
Lock file maintenance
2021-08-02 05:46:09 +03:00
version "2.0.2"
resolved "https://registry.yarnpkg.com/@tryghost/url-utils/-/url-utils-2.0.2.tgz#f424e1d5ba9e1fe127ce49bc07172d2c683a518d"
integrity sha512-/Qx4HfHYrnCGB7CroYRsSg2tNf/z7QB9nc6sLT90kJ+wA3omWqXHcTDaN4YUs7hfNsutK+KaAHDwIMhnsZGWQw==
dependencies:
cheerio "^0.22.0"
moment "^2.27.0"
moment-timezone "^0.5.31"
remark "^11.0.2"
remark-footnotes "^1.0.0"
unist-util-visit "^2.0.0"
Update dependency @tryghost/validator to v0.1.5
2021-09-14 22:34:16 +03:00
"@tryghost/validator@0.1.5", "@tryghost/validator@^0.1.5":
Update dependency @tryghost/request to v0.1.5
2021-09-14 19:52:48 +03:00
version "0.1.5"
resolved "https://registry.yarnpkg.com/@tryghost/validator/-/validator-0.1.5.tgz#ccfdb234ea951aac2e28794c0dbfa34f1d3282da"
integrity sha512-Lzjrw2wHh2xfCmQ1kkuD5XyWWkkHUrfxeWZcKoXIj/8R+panh5X3vH8Rx9aE/FpywMb6BR/R2URG+aIDPy+16A==
dependencies:
"@tryghost/errors" "^0.2.13"
"@tryghost/tpl" "^0.1.2"
lodash "^4.17.21"
moment-timezone "0.5.23"
validator "7.2.0"
"@tryghost/version@0.1.4", "@tryghost/version@^0.1.4":
Update dependency @tryghost/version to v0.1.4
2021-09-14 19:08:56 +03:00
version "0.1.4"
resolved "https://registry.yarnpkg.com/@tryghost/version/-/version-0.1.4.tgz#d9ef66f4e3793979b4ab7196ee42ffcd8018bfd6"
integrity sha512-52hb3FQp52fn0y+uxLwXDlB4q2NKkXbuJsZkvel3GPl+EfODhuB2mUczoUOqXIO3I6Q/CHHsW39KZf+UHmDVcA==
dependencies:
"@tryghost/root-utils" "^0.3.4"
semver "^7.3.5"
Update dependency @tryghost/vhost-middleware to v1.0.17
2021-10-01 10:45:53 +03:00
"@tryghost/vhost-middleware@1.0.17":
version "1.0.17"
resolved "https://registry.yarnpkg.com/@tryghost/vhost-middleware/-/vhost-middleware-1.0.17.tgz#1d00c31b4ccd00217b919a71642f78e2f21b1d69"
integrity sha512-aGi60Q6A3/RHtrXUMKyX+6HFktvvuRki+Je8ubQYeEpTg5aQ/2dXJQjPsd7l7JxAbsREb9/LuVnJzCgZoqERPA==
🐛 Fixed 404s when using a proxy setup (#11269) no issue When using certain proxy setups that result in `host` and `x-forwarded-host` being different, it became impossible to access Ghost because all routes showed generic 404 pages. - `vhost` module that we are using to separate front-end and admin urls does not use express' `req.hostname` so it does not pick up the `x-forwarded-host` url that express' `'trust proxy'` config gives us - switched to the forked `@tryghost/vhost-middleware` package which has a one-line change to use `req.hostname || req.host` - added `'trust proxy'` config to the admin express app and switched to using `req.hostname` in our redirect code to avoid infinite redirect loops
2019-10-28 14:22:05 +03:00
Update dependency @tryghost/zip to v1.1.15
2021-09-22 18:36:36 +03:00
"@tryghost/zip@1.1.15":
version "1.1.15"
resolved "https://registry.yarnpkg.com/@tryghost/zip/-/zip-1.1.15.tgz#8f908b69f8835b9bf2e96222e0448796ef17de3f"
integrity sha512-gHszBx8PryyEWdWg6UA0fKT1CWbKqIgAHNo+bN5sJs32MRGFfpQC2KMsMRlB1Xhr/64eHnGUE1b5cDMFx5eU/g==
dependencies:
archiver "^4.0.2"
bluebird "^3.7.2"
extract-zip "2.0.1"
fs-extra "^9.1.0"
Update dependency @tryghost/zip to v1.1.16
2021-09-30 21:18:55 +03:00
"@tryghost/zip@1.1.16":
version "1.1.16"
resolved "https://registry.yarnpkg.com/@tryghost/zip/-/zip-1.1.16.tgz#2f3760bf0cc7ffc2129ec5ae4c231aaca870de1a"
integrity sha512-RxJ3kkQrItN4EsO5XsbqoqYuK7aOKlehwU6oqsBx9JYD0Z4SqXTvavulNlOTYMNIRljgeK/6VNY0Z5z9iUbmdA==
dependencies:
archiver "^4.0.2"
bluebird "^3.7.2"
extract-zip "2.0.1"
fs-extra "^9.1.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@trysound/sax@0.2.0":
version "0.2.0"
resolved "https://registry.yarnpkg.com/@trysound/sax/-/sax-0.2.0.tgz#cccaab758af56761eb7bf37af6f03f326dd798ad"
integrity sha512-L7z9BgrNEcYyUYtF+HaEfiS5ebkh9jXqbszz7pC0hRBPaatV0XjSD3+eHrpqFemQfgwiFF0QPIarnIihIDn7OA==
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
"@types/body-parser@*":
Lock file maintenance
2021-07-12 05:24:06 +03:00
version "1.19.1"
resolved "https://registry.yarnpkg.com/@types/body-parser/-/body-parser-1.19.1.tgz#0c0174c42a7d017b818303d4b5d969cb0b75929c"
integrity sha512-a6bTJ21vFOGIkwM0kzh9Yr89ziVxq4vYH2fQ6N8AeipEzai/cFK6aGMArIkUeIdRIgpwQa+2bXiLuUJCpSf2Cg==
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
dependencies:
"@types/connect" "*"
"@types/node" "*"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
"@types/cacheable-request@^6.0.1":
Lock file maintenance
2021-07-12 05:24:06 +03:00
version "6.0.2"
resolved "https://registry.yarnpkg.com/@types/cacheable-request/-/cacheable-request-6.0.2.tgz#c324da0197de0a98a2312156536ae262429ff6b9"
integrity sha512-B3xVo+dlKM6nnKTcmm5ZtY/OL8bOAOd2Olee9M1zft65ox50OzjEHW91sDiU9j6cvW8Ejg1/Qkf4xd2kugApUA==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
dependencies:
"@types/http-cache-semantics" "*"
"@types/keyv" "*"
"@types/node" "*"
"@types/responselike" "*"
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
"@types/connect@*":
Lock file maintenance
2021-07-12 05:24:06 +03:00
version "3.4.35"
resolved "https://registry.yarnpkg.com/@types/connect/-/connect-3.4.35.tgz#5fcf6ae445e4021d1fc2219a4873cc73a3bb2ad1"
integrity sha512-cdeYyv4KWoEgpBISTxWvqYsVy444DOqehiF3fM3ne10AmJ62RSyNkUnxMJXHQWRQQX2eR94m5y1IZyDwBjV9FQ==
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
dependencies:
"@types/node" "*"
"@types/express-jwt@0.0.42":
version "0.0.42"
resolved "https://registry.yarnpkg.com/@types/express-jwt/-/express-jwt-0.0.42.tgz#4f04e1fadf9d18725950dc041808a4a4adf7f5ae"
integrity sha512-WszgUddvM1t5dPpJ3LhWNH8kfNN8GPIBrAGxgIYXVCEGx6Bx4A036aAuf/r5WH9DIEdlmp7gHOYvSM6U87B0ag==
dependencies:
"@types/express" "*"
"@types/express-unless" "*"
Lock file maintenance
2021-05-05 18:56:03 +03:00
"@types/express-serve-static-core@^4.17.18":
Lock file maintenance
2021-07-12 05:24:06 +03:00
version "4.17.24"
resolved "https://registry.yarnpkg.com/@types/express-serve-static-core/-/express-serve-static-core-4.17.24.tgz#ea41f93bf7e0d59cd5a76665068ed6aab6815c07"
integrity sha512-3UJuW+Qxhzwjq3xhwXm2onQcFHn76frIYVbTu+kn24LFxI+dEhdfISDFovPB8VpEgW8oQCTpRuCe+0zJxB7NEA==
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
dependencies:
"@types/node" "*"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
"@types/qs" "*"
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
"@types/range-parser" "*"
"@types/express-unless@*":
Lock file maintenance
2021-07-12 05:24:06 +03:00
version "0.5.2"
resolved "https://registry.yarnpkg.com/@types/express-unless/-/express-unless-0.5.2.tgz#07e29883d280778588644b03563d8796f870f20e"
integrity sha512-Q74UyYRX/zIgl1HSp9tUX2PlG8glkVm+59r7aK4KGKzC5jqKIOX6rrVLRQrzpZUQ84VukHtRoeAuon2nIssHPQ==
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
dependencies:
"@types/express" "*"
"@types/express@*":
Lock file maintenance
2021-07-12 05:24:06 +03:00
version "4.17.13"
resolved "https://registry.yarnpkg.com/@types/express/-/express-4.17.13.tgz#a76e2995728999bab51a33fabce1d705a3709034"
integrity sha512-6bSZTPaTIACxn48l50SR+axgrqm6qXFIxrdAKaG6PaJk3+zuUr35hBlgT7vOmJcum+OEaIBLtHV/qloEAFITeA==
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
dependencies:
"@types/body-parser" "*"
Lock file maintenance
2021-05-05 18:56:03 +03:00
"@types/express-serve-static-core" "^4.17.18"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
"@types/qs" "*"
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
"@types/serve-static" "*"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
"@types/http-cache-semantics@*":
Lock file maintenance
2021-07-12 05:24:06 +03:00
version "4.0.1"
resolved "https://registry.yarnpkg.com/@types/http-cache-semantics/-/http-cache-semantics-4.0.1.tgz#0ea7b61496902b95890dc4c3a116b60cb8dae812"
integrity sha512-SZs7ekbP8CN0txVG2xVRH6EgKmEm31BOxA07vkFaETzZz1xh+cbt8BcI0slpymvwhx5dlFnQG2rTlPVQn+iRPQ==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
"@types/istanbul-lib-coverage@^2.0.1":
version "2.0.3"
resolved "https://registry.yarnpkg.com/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.3.tgz#4ba8ddb720221f432e443bd5f9117fd22cfd4762"
integrity sha512-sz7iLqvVUg1gIedBOvlkxPlc8/uVzyS5OwGz1cKjXzkl3FpL3al0crU8YGU1WoHkxn0Wxbw5tyi6hvzJKNzFsw==
Handled week & day interval in population of mrr events refs https://github.com/TryGhost/Team/issues/635 This is to ensure we don't break migrations for any sites which have imported external subscriptions which have an interval of 'week' or 'day' The bump to members-api includes the handling of these intervals for ongoing population of mrr events
2021-05-20 18:52:51 +03:00
"@types/jsonwebtoken@^8.5.1":
Lock file maintenance
2021-08-23 05:05:27 +03:00
version "8.5.5"
resolved "https://registry.yarnpkg.com/@types/jsonwebtoken/-/jsonwebtoken-8.5.5.tgz#da5f2f4baee88f052ef3e4db4c1a0afb46cff22c"
integrity sha512-OGqtHQ7N5/Ap/TUwO6IgHDuLiAoTmHhGpNvgkCm/F4N6pKzx/RBSfr2OXZSwC6vkfnsEdb6+7DNZVtiXiwdwFw==
Handled week & day interval in population of mrr events refs https://github.com/TryGhost/Team/issues/635 This is to ensure we don't break migrations for any sites which have imported external subscriptions which have an interval of 'week' or 'day' The bump to members-api includes the handling of these intervals for ongoing population of mrr events
2021-05-20 18:52:51 +03:00
dependencies:
"@types/node" "*"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
"@types/keyv@*":
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "3.1.3"
resolved "https://registry.yarnpkg.com/@types/keyv/-/keyv-3.1.3.tgz#1c9aae32872ec1f20dcdaee89a9f3ba88f465e41"
integrity sha512-FXCJgyyN3ivVgRoml4h94G/p3kY+u/B86La+QptcqJaWtBWtmc6TtkNfS40n9bIvyLteHh7zXOtgbobORKPbDg==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
dependencies:
"@types/node" "*"
Bumped job-manager version to 0.7.0 closes https://github.com/TryGhost/Ghost-Utils/issues/122
2021-01-06 07:47:57 +03:00
"@types/lodash@^4.14.165":
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "4.14.173"
resolved "https://registry.yarnpkg.com/@types/lodash/-/lodash-4.14.173.tgz#9d3b674c67a26cf673756f6aca7b429f237f91ed"
integrity sha512-vv0CAYoaEjCw/mLy96GBTnRoZrSxkGE0BKzKimdR8P3OzrNYNvBgtW7p055A+E8C31vXNUhWKoFCbhq7gbyhFg==
Bumped job-manager version to 0.7.0 closes https://github.com/TryGhost/Ghost-Utils/issues/122
2021-01-06 07:47:57 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
"@types/mime@^1":
version "1.3.2"
resolved "https://registry.yarnpkg.com/@types/mime/-/mime-1.3.2.tgz#93e25bf9ee75fe0fd80b594bc4feb0e862111b5a"
integrity sha512-YATxVxgRqNH6nHEIsvg6k2Boc1JHI9ZbH5iWFFv/MTkchz3b1ieGDa5T0a9RznNdI0KhVbdbWSN+KWWrQZRxTw==
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
"@types/node@*", "@types/node@>=8.1.0":
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "16.9.4"
resolved "https://registry.yarnpkg.com/@types/node/-/node-16.9.4.tgz#a12f0ee7847cf17a97f6fdf1093cb7a9af23cca4"
integrity sha512-KDazLNYAGIuJugdbULwFZULF9qQ13yNWEBFnfVpqlpgAAo6H/qnM9RjBgh0A0kmHf3XxAKLdN5mTIng9iUvVLA==
Bumped `@tryghost/members-api` to 1.3.0 refs https://github.com/TryGhost/Team/issues/619 - Bumps `@tryghost/members-api` to `1.3.0` which adds a one-off migration to populate missing stripe prices and products - Bumps patch versions on `@trghost/members-ssr` and `@tryghost/magic-link` to 1.02
2021-04-20 15:02:07 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
"@types/normalize-package-data@^2.4.0":
Lock file maintenance
2021-07-12 05:24:06 +03:00
version "2.4.1"
resolved "https://registry.yarnpkg.com/@types/normalize-package-data/-/normalize-package-data-2.4.1.tgz#d3357479a0fdfdd5907fe67e17e0a85c906e1301"
integrity sha512-Gj7cI7z+98M282Tqmp2K5EIsoouUEzbBJhQQzDE3jSIRk6r9gsz0oUokqIUR4u1R3dMHo0pDHM7sNOHyhulypw==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
"@types/qs@*":
Lock file maintenance
2021-07-12 05:24:06 +03:00
version "6.9.7"
resolved "https://registry.yarnpkg.com/@types/qs/-/qs-6.9.7.tgz#63bb7d067db107cc1e457c303bc25d511febf6cb"
integrity sha512-FGa1F62FT09qcrueBA6qYTrJPVDzah9a+493+o2PCXsesWHIn27G98TsSMs3WPNbZIEj4+VJf6saSFpvD+3Zsw==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
"@types/range-parser@*":
Lock file maintenance
2021-07-12 05:24:06 +03:00
version "1.2.4"
resolved "https://registry.yarnpkg.com/@types/range-parser/-/range-parser-1.2.4.tgz#cd667bcfdd025213aafb7ca5915a932590acdcdc"
integrity sha512-EEhsLsD6UsDM1yFhAvy0Cjr6VwmpMWqFBCb9w07wVugF7w9nfajxLuVmngTIpgS6svCnm6Vaw+MZhoDCKnOfsw==
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
"@types/responselike@*", "@types/responselike@^1.0.0":
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
version "1.0.0"
resolved "https://registry.yarnpkg.com/@types/responselike/-/responselike-1.0.0.tgz#251f4fe7d154d2bad125abe1b429b23afd262e29"
integrity sha512-85Y2BjiufFzaMIlvJDvTTB8Fxl2xfLo4HgmHzVBz08w4wDePCTjYw66PdrolO0kzli3yam/YCgRufyo1DdQVTA==
dependencies:
"@types/node" "*"
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
"@types/serve-static@*":
Lock file maintenance
2021-07-12 05:24:06 +03:00
version "1.13.10"
resolved "https://registry.yarnpkg.com/@types/serve-static/-/serve-static-1.13.10.tgz#f5e0ce8797d2d7cc5ebeda48a52c96c4fa47a8d9"
integrity sha512-nCkHGI4w7ZgAdNkrEu0bv+4xNV/XDqW+DydknebMOQwkpDGx8G+HTlj7R7ABI8i8nKxVw0wtKPi1D+lPOkh4YQ==
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
dependencies:
Lock file maintenance
2021-05-05 18:56:03 +03:00
"@types/mime" "^1"
"@types/node" "*"
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
"@types/unist@^2.0.0", "@types/unist@^2.0.2":
Lock file maintenance
2021-07-19 12:27:19 +03:00
version "2.0.6"
resolved "https://registry.yarnpkg.com/@types/unist/-/unist-2.0.6.tgz#250a7b16c3b91f672a24552ec64678eeb1d3a08d"
integrity sha512-PBjIUxZHOuj0R15/xuwJYjFi+KZdNFrehocChv4g5hu6aFroHue8m0lBP0POdK2nKzbw0cgV1mws8+V/JAcEkQ==
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
Update dependency @tryghost/zip to v1
2020-04-08 14:57:26 +03:00
"@types/yauzl@^2.9.1":
Lock file maintenance
2021-07-05 04:25:22 +03:00
version "2.9.2"
resolved "https://registry.yarnpkg.com/@types/yauzl/-/yauzl-2.9.2.tgz#c48e5d56aff1444409e39fa164b0b4d4552a7b7a"
integrity sha512-8uALY5LTvSuHgloDVUvWP3pIauILm+8/0pDMokuDYIoNsOkSwd5AiHBTSEJjKTDcZr5z8UpgOWZkxBF4iJftoA==
Update dependency @tryghost/zip to v1
2020-04-08 14:57:26 +03:00
dependencies:
"@types/node" "*"
Update dependency mocha to v8.2.0
2020-10-17 00:23:19 +03:00
"@ungap/promise-all-settled@1.1.2":
version "1.1.2"
resolved "https://registry.yarnpkg.com/@ungap/promise-all-settled/-/promise-all-settled-1.1.2.tgz#aa58042711d6e3275dd37dc597e5d31e8c290a44"
integrity sha512-sL/cEvJWAnClXw0wHk85/2L0G6Sj8UB0Ctc1TEMbKSsmpRosqhwj9gWgFRZSrBr2f9tiXISwNhCPmlfqUqyb9Q==
Lock file maintenance
2021-05-05 18:56:03 +03:00
abab@^2.0.3, abab@^2.0.5:
Update dependency @tryghost/html-to-mobiledoc to v0.7.12
2021-03-10 22:11:13 +03:00
version "2.0.5"
resolved "https://registry.yarnpkg.com/abab/-/abab-2.0.5.tgz#c0b678fb32d60fc1219c784d6a826fe385aeb79a"
integrity sha512-9IK9EadsbHo6jLWIpxpR6pL0sazTXV6+SQv25ZB+F7Bj9mJNaOc4nCRabwd5M/JwmUa8idz6Eci6eKfJryPs6Q==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
abbrev@1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/abbrev/-/abbrev-1.1.1.tgz#f8f2c887ad10bf67f634f005b6987fed3179aac8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-nne9/IiQ/hzIhY6pdDnbBtz7DjPTKrY00P/zvPSm5pOFkl6xuGrGnXn/VtTNNfNtAfZ9/1RtehkszU9qcTii0Q==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
accepts@~1.3.5, accepts@~1.3.7:
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
version "1.3.7"
resolved "https://registry.yarnpkg.com/accepts/-/accepts-1.3.7.tgz#531bc726517a3b2b41f850021c6cc15eaab507cd"
integrity sha512-Il80Qs2WjYlJIBNzNkK6KYqlVMTbZLXgHx2oT0pU/fjRHyEp+PEfEPY0R3WCwAGVOtauxh1hOxNgIf5bv7dQpA==
dependencies:
mime-types "~2.1.24"
negotiator "0.6.2"
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
acorn-globals@^6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/acorn-globals/-/acorn-globals-6.0.0.tgz#46cdd39f0f8ff08a876619b55f5ac8a6dc770b45"
integrity sha512-ZQl7LOWaF5ePqqcX4hLuv/bLXYQNfNWw2c0/yX/TsPRKamzHcTGQnlCjHT3TsmkOUVEPS3crCxiPfdzE/Trlhg==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
acorn "^7.1.1"
acorn-walk "^7.1.1"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
acorn-jsx@^5.2.0, acorn-jsx@^5.3.1:
Lock file maintenance
2021-07-12 05:24:06 +03:00
version "5.3.2"
resolved "https://registry.yarnpkg.com/acorn-jsx/-/acorn-jsx-5.3.2.tgz#7ed5bb55908b3b2f1bc55c6af1653bada7f07937"
integrity sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==
Update dependency eslint to v7.15.0
2020-12-07 03:07:07 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
acorn-walk@^7.1.1:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "7.2.0"
resolved "https://registry.yarnpkg.com/acorn-walk/-/acorn-walk-7.2.0.tgz#0de889a601203909b0fbe07b8938dc21d2e967bc"
integrity sha512-OPdCF6GsMIP+Az+aWfAAOEt2/+iVDKE7oy6lJ098aoe59oAmK76qV6Gw60SbZ8jHuG2wH058GF4pLFbYamYrVA==
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
acorn@^7.1.1, acorn@^7.4.0:
version "7.4.1"
resolved "https://registry.yarnpkg.com/acorn/-/acorn-7.4.1.tgz#feaed255973d2e77555b83dbc08851a6c63520fa"
integrity sha512-nQyp0o1/mNdbTO1PO6kHkwSrmgZ0MT/jCCpNiwbUjGoRN4dlBhqJtoQuCnEOKzgTVwg0ZWiCoQy6SxMebQVh8A==
Update dependency eslint to v7.8.0
2020-09-01 02:03:55 +03:00
Update metascraper to v5.24.2
2021-08-16 14:12:26 +03:00
acorn@^8.2.4, acorn@^8.4.1:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "8.5.0"
resolved "https://registry.yarnpkg.com/acorn/-/acorn-8.5.0.tgz#4512ccb99b3698c752591e9bb4472e38ad43cee2"
integrity sha512-yXbYeFy+jUuYd3/CDcg2NkIYE991XYX/bje7LmjJigUciaeO1JR4XxXgCIV1/Zc/dRuFEyw1L0pbA+qynJkW5Q==
Update dependency @tryghost/html-to-mobiledoc to v0.7.12
2021-03-10 22:11:13 +03:00
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
adm-zip@^0.5.1:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "0.5.6"
resolved "https://registry.yarnpkg.com/adm-zip/-/adm-zip-0.5.6.tgz#c540f4d62b0f07a716bce4c8a24545b1f0b33027"
integrity sha512-nUeYhBHLG08VFOkVwai0pLXge6NNlahH+ccwxXodvl+SLa5l9mXHjg40jRVzofRPz29goiTGze7vIKmCltKtSA==
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
agent-base@4, agent-base@^4.2.0, agent-base@^4.3.0:
version "4.3.0"
resolved "https://registry.yarnpkg.com/agent-base/-/agent-base-4.3.0.tgz#8165f01c436009bccad0b1d122f05ed770efc6ee"
integrity sha512-salcGninV0nPrwpGNn4VTXBb1SOuXQBiqbrNXoeizJsHrsL6ERFM2Ne3JUSBWRE6aeNJI2ROP/WEEIDUiDe3cg==
dependencies:
es6-promisify "^5.0.0"
Lock file maintenance
2021-07-05 04:25:22 +03:00
agent-base@6, agent-base@^6.0.2:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "6.0.2"
resolved "https://registry.yarnpkg.com/agent-base/-/agent-base-6.0.2.tgz#49fff58577cfee3f37176feab4c22e00f86d7f77"
integrity sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==
Update dependency @sentry/node to v5.19.2
2020-07-14 11:04:55 +03:00
dependencies:
debug "4"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
agent-base@~4.2.1:
version "4.2.1"
resolved "https://registry.yarnpkg.com/agent-base/-/agent-base-4.2.1.tgz#d89e5999f797875674c07d87f260fc41e83e8ca9"
integrity sha512-JVwXMr9nHYTUXsBFKUqhJwvlcYU/blreOEUkhNR2eXZIvwd+c+o5V4MgDPKWnMS/56awN3TRzIP+KoPn+roQtg==
dependencies:
es6-promisify "^5.0.0"
Lock file maintenance
2021-06-01 18:19:18 +03:00
agentkeepalive@^4.1.3:
version "4.1.4"
resolved "https://registry.yarnpkg.com/agentkeepalive/-/agentkeepalive-4.1.4.tgz#d928028a4862cb11718e55227872e842a44c945b"
integrity sha512-+V/rGa3EuU74H6wR04plBb7Ks10FbtUQgRj/FQOG7uUIEuaINI+AiqJR1k6t3SVNs7o7ZjIdus6706qqzVq8jQ==
dependencies:
debug "^4.1.0"
depd "^1.1.2"
humanize-ms "^1.2.1"
aggregate-error@^3.0.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/aggregate-error/-/aggregate-error-3.1.0.tgz#92670ff50f5359bdb7a3e0d40d0ec30c5737687a"
integrity sha512-4I7Td01quW/RpocfNayFdFVk1qSuoh0E7JrbRJ16nH01HhKFQ88INq9Sd+nd72zqRySlr9BmDA8xlEJ6vJMrYA==
dependencies:
clean-stack "^2.0.0"
indent-string "^4.0.0"
Lock file maintenance
2021-05-05 18:56:03 +03:00
ajv@^6.10.0, ajv@^6.10.2, ajv@^6.12.3, ajv@^6.12.4:
version "6.12.6"
resolved "https://registry.yarnpkg.com/ajv/-/ajv-6.12.6.tgz#baf5a62e802b07d977034586f8c3baf5adf26df4"
integrity sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==
Added JSON Schema validation for /posts endpoint (#10468) refs #10438 - Added validation helper based on JSON schema - Added schema validation for POST/PUT in /posts endpoints - Refactored existing authors validation test suite - Extended test coverage with a minimally required structure of post.add validator
2019-02-08 13:40:58 +03:00
dependencies:
Update dependency ajv to v6.11.0
2020-02-17 05:16:58 +03:00
fast-deep-equal "^3.1.1"
Added JSON Schema validation for /posts endpoint (#10468) refs #10438 - Added validation helper based on JSON schema - Added schema validation for POST/PUT in /posts endpoints - Refactored existing authors validation test suite - Extended test coverage with a minimally required structure of post.add validator
2019-02-08 13:40:58 +03:00
fast-json-stable-stringify "^2.0.0"
json-schema-traverse "^0.4.1"
uri-js "^4.2.2"
Lock file maintenance
2021-05-05 18:56:03 +03:00
ajv@^8.0.1:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "8.6.3"
resolved "https://registry.yarnpkg.com/ajv/-/ajv-8.6.3.tgz#11a66527761dc3e9a3845ea775d2d3c0414e8764"
integrity sha512-SMJOdDP6LqTkD0Uq8qLi+gMwSt0imXLSV080qFVwJCpH9U6Mb+SUGHAXM0KNbcBPguytWyvFxcHgMLe2D2XSpw==
Update dependency ajv to v6.12.5
2020-09-14 03:04:47 +03:00
dependencies:
fast-deep-equal "^3.1.1"
Lock file maintenance
2021-05-05 18:56:03 +03:00
json-schema-traverse "^1.0.0"
require-from-string "^2.0.2"
Update dependency ajv to v6.12.5
2020-09-14 03:04:47 +03:00
uri-js "^4.2.2"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
alphanum-sort@^1.0.2:
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/alphanum-sort/-/alphanum-sort-1.0.2.tgz#97a1119649b211ad33691d9f9f486a8ec9fbe0a3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-l6ERlkmyEa0zaR2fn0hqjsn74KM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
amperize@0.6.1:
version "0.6.1"
resolved "https://registry.yarnpkg.com/amperize/-/amperize-0.6.1.tgz#b90079db6d66d4dd33e6584ef88c4df493ed7e03"
integrity sha512-g36E/XJ5N98VyKh4opL894rlrBejh7aS6emet0HpLKg9IHfbXM3vDMBgwsTQO9M/kY+NZ9mpQU3SW9w8FDM6gw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
async "^3.0.1"
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
domutils "^2.0.0"
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 12:12:03 +03:00
emits "^3.0.0"
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
htmlparser2 "^4.0.0"
image-size "^0.8.1"
Update dependency amperize to v0.6.0
2019-07-29 03:29:51 +03:00
lodash "^4.17.11"
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
probe-image-size "^5.0.0"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
request "^2.83.0"
request-promise "^4.2.4"
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
uuid "^7.0.1"
validator "^12.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency analytics-node to v5.1.0
2021-09-14 01:22:11 +03:00
analytics-node@5.1.0:
version "5.1.0"
resolved "https://registry.yarnpkg.com/analytics-node/-/analytics-node-5.1.0.tgz#69f2183af07b7e9aeef129232c6c1e44ef2f28d9"
integrity sha512-qojiIIQs+ruKS4BEb7+nLIim0TpmifMnYQYYQWBHcYBurv/IXRs3bL28wCuv1aKpRKpyDjAvugYSA7V7pw8t8g==
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
dependencies:
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
"@segment/loosely-validate-event" "^2.0.0"
Update dependency analytics-node to v5.1.0
2021-09-14 01:22:11 +03:00
axios "^0.21.4"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
axios-retry "^3.0.2"
lodash.isstring "^4.0.1"
md5 "^2.2.1"
ms "^2.0.0"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
remove-trailing-slash "^0.1.0"
Update dependency analytics-node to v5
2021-07-19 12:26:18 +03:00
uuid "^8.3.2"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
Bumped @tryghost/members-api to 0.24.4 refs #12074 This includes code to cleanup of any previous webhooks, to ensure that we have no duplicates.
2020-07-22 13:31:07 +03:00
ansi-colors@4.1.1, ansi-colors@^4.1.1:
Update Test & linting packages
2020-07-21 20:38:46 +03:00
version "4.1.1"
resolved "https://registry.yarnpkg.com/ansi-colors/-/ansi-colors-4.1.1.tgz#cbb9ae256bf750af1eab344f229aa27fe94ba348"
integrity sha512-JoX0apGbHaUJBNl6yF+p6JAFYZ666/hhCGKN5t9QFjbJQKUU/g8MNbFDbvfrgKXvI1QpZplPOnwIo99lX/AAmA==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
ansi-escapes@^4.2.1:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "4.3.2"
resolved "https://registry.yarnpkg.com/ansi-escapes/-/ansi-escapes-4.3.2.tgz#6b2291d1db7d98b6521d5f1efa42d0f3a9feb65e"
integrity sha512-gKXj5ALrKWQLsYG9jlTRmR/xKluxHV+Z9QEwNIgCfM1/uwPMCuzVVnh5mwTd+OuBZcwSIMbqssNWRm1lE51QaQ==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
dependencies:
Lock file maintenance
2021-05-05 18:56:03 +03:00
type-fest "^0.21.3"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ansi-regex@^2.0.0:
version "2.1.1"
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-2.1.1.tgz#c3b33ab5ee360d86e0e628f0468ae7ef27d654df"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-w7M6te42DYbg5ijwRorn7yfWVN8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
ansi-regex@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-3.0.0.tgz#ed0317c322064f79466c02966bddb605ab37d998"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-7QMXwyIGT3lGbAKWa922Bas32Zg=
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ansi-regex@^4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-4.1.0.tgz#8b9f8f08cf1acb843756a839ca8c7e3168c51997"
integrity sha512-1apePfXM1UOSqw0o9IiFAovVz9M5S1Dg+4TrDwfMewQ6p/rmMueb7tWZjQ1rx4Loy1ArBggoqGpfqqdI4rondg==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
ansi-regex@^5.0.0:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "5.0.1"
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-5.0.1.tgz#082cb2c89c9fe8659a311a53bd6a4dc5301db304"
integrity sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
ansi-styles@^2.2.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.2.1"
resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-2.2.1.tgz#b432dd3358b634cf75e1e4664368240533c1ddbe"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-tDLdM1i2NM914eRmQ2gkBTPB3b4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
ansi-styles@^3.2.0, ansi-styles@^3.2.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "3.2.1"
resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-3.2.1.tgz#41fbb20243e50b12be0f04b8dedbf07520ce841d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-VT0ZI6kZRdTh8YyJw3SMbYm/u+NqfsAxEpWO0Pf9sq8/e94WxxOpPKx9FR1FlyCtOVDNOQ+8ntlqFxiRc+r5qA==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
color-convert "^1.9.0"
Lock file maintenance
2021-05-05 18:56:03 +03:00
ansi-styles@^4.0.0, ansi-styles@^4.1.0:
Update dependency nconf to v0.11.0
2020-11-25 12:06:19 +03:00
version "4.3.0"
resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-4.3.0.tgz#edd803628ae71c04c85ae7a0906edad34b648937"
integrity sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==
dependencies:
color-convert "^2.0.1"
Removed grunt-mocha-cli - we no longer rely on grunt for any testing, and call mocha directly
2021-07-07 11:19:13 +03:00
anymatch@~3.1.2:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "3.1.2"
resolved "https://registry.yarnpkg.com/anymatch/-/anymatch-3.1.2.tgz#c0557c096af32f106198f4f4e2a383537e378716"
integrity sha512-P43ePfOAIupkguHUycrc4qJ9kz8ZiuOUijaETwX7THt0Y/GNK7v0aa8rY816xWjZ7rJdA5XdMcpVFTKMq+RvWg==
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
dependencies:
normalize-path "^3.0.0"
picomatch "^2.0.4"
Update dependency @tryghost/members-api to v0.27.0
2020-08-17 23:04:08 +03:00
app-root-path@^2.1.0:
version "2.2.1"
resolved "https://registry.yarnpkg.com/app-root-path/-/app-root-path-2.2.1.tgz#d0df4a682ee408273583d43f6f79e9892624bc9a"
integrity sha512-91IFKeKk7FjfmezPKkwtaRvSpnUc4gDwPAjA1YZ9Gn0q0PPeW+vbeUsZuyDwjI7+QTHhcLen2v25fi/AmhvbJA==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
append-field@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/append-field/-/append-field-1.0.0.tgz#1e3440e915f0b1203d23748e78edd7b9b5b43e56"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-HjRA6RXwsSA9I3SOeO3XubW0PlY=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
aproba@^1.0.3:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/aproba/-/aproba-1.2.0.tgz#6802e6264efd18c790a1b0d517f0f2627bf2c94a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Y9J6ZjXtoYh8RnXVCMOU/ttDmk1aBjunq9vO0ta5x85WDQiQfUF9sIPBITdbiiIVcBo03Hi3jMxigBtsddlXRw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
archiver-utils@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/archiver-utils/-/archiver-utils-2.1.0.tgz#e8a460e94b693c3e3da182a098ca6285ba9249e2"
integrity sha512-bEL/yUb/fNNiNTuUz979Z0Yg5L+LzLxGJz8x79lYmR54fmTIb6ob/hNQgkQnIUDWIFjZVQwl9Xs356I6BAMHfw==
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
dependencies:
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
glob "^7.1.4"
graceful-fs "^4.2.0"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
lazystream "^1.0.0"
lodash.defaults "^4.2.0"
lodash.difference "^4.5.0"
lodash.flatten "^4.4.0"
lodash.isplainobject "^4.0.6"
lodash.union "^4.6.0"
normalize-path "^3.0.0"
readable-stream "^2.0.0"
🐛 Upgrade Gscan to 4.1.1 issue TryGhost/Team#864 Use latest gscan to fix issue where custom themes didn't work
2021-07-08 12:52:21 +03:00
archiver@^4.0.2:
Update dependency @tryghost/zip to v1.1.10
2021-02-22 20:50:30 +03:00
version "4.0.2"
resolved "https://registry.yarnpkg.com/archiver/-/archiver-4.0.2.tgz#43c72865eadb4ddaaa2fb74852527b6a450d927c"
integrity sha512-B9IZjlGwaxF33UN4oPbfBkyA4V1SxNLeIhR1qY8sRXSsbdUkEHrrOvwlYFPx+8uQeCe9M+FG6KgO+imDmQ79CQ==
dependencies:
archiver-utils "^2.1.0"
async "^3.2.0"
buffer-crc32 "^0.2.1"
glob "^7.1.6"
readable-stream "^3.6.0"
tar-stream "^2.1.2"
zip-stream "^3.0.1"
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
archiver@^5.1.0:
version "5.3.0"
resolved "https://registry.yarnpkg.com/archiver/-/archiver-5.3.0.tgz#dd3e097624481741df626267564f7dd8640a45ba"
integrity sha512-iUw+oDwK0fgNpvveEsdQ0Ase6IIKztBJU2U0E9MzszMfmVVUyv1QJhS2ITW9ZCqx8dktAxVAjWWkKehuZE8OPg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
archiver-utils "^2.1.0"
async "^3.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
buffer-crc32 "^0.2.1"
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
readable-stream "^3.6.0"
readdir-glob "^1.0.0"
tar-stream "^2.2.0"
zip-stream "^4.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
are-we-there-yet@~1.1.2:
Lock file maintenance
2021-09-06 03:36:57 +03:00
version "1.1.7"
resolved "https://registry.yarnpkg.com/are-we-there-yet/-/are-we-there-yet-1.1.7.tgz#b15474a932adab4ff8a50d9adfa7e4e926f21146"
integrity sha512-nxwy40TuMiUGqMyRHgCSWZ9FM4VAoRP4xUYSTv5ImRog+h9yISPbVH7H8fASCIzYn9wlEv4zvFL7uKDMCFQm3g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
delegates "^1.0.0"
🙀 Image field naming & new img_url helper (#8364) * 🙀 change database schema for images - rename user/post/tag images - contains all the required changes from the schema change * Refactor helper/meta data - rename cover to cover_image - also rename default settings to match the pattern - rename image to profile_image for user - rename image to feature_image for tags/posts * {{image}} >>> {{img_url}} - rename - change the functionality - attr is required - e.g. {{img_url feature_image}} * gscan 1.0.0 - update yarn.lock * Update casper reference: 1.0-changes - see https://github.com/TryGhost/Casper/commit/5487b4da8d2ad7c6a6d003a3a0ee1a860e0de34d
2017-04-24 20:21:47 +03:00
readable-stream "^2.0.6"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Build Tool
2019-07-02 03:34:50 +03:00
argparse@^1.0.7:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.0.10"
resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.10.tgz#bcd6791ea5ae09725e17e5ad988134cd40b3d911"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
sprintf-js "~1.0.2"
Update dependency @tryghost/kg-markdown-html-renderer to v3 (#12521) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-12 14:21:37 +03:00
argparse@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/argparse/-/argparse-2.0.1.tgz#246f50f3ca78a3240f6c997e8a9bd1eac49e4b38"
integrity sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
arr-diff@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/arr-diff/-/arr-diff-4.0.0.tgz#d6461074febfec71e7e15235761a329a5dc7c520"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-1kYQdP6/7HHn4VI1dhoyml3HxSA=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
arr-flatten@^1.1.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/arr-flatten/-/arr-flatten-1.1.0.tgz#36048bbff4e7b47e136644316c99669ea5ae91f1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-L3hKV5R/p5o81R7O02IGnwpDmkp6E982XhtbuwSe3O4qOtMMMtodicASA1Cny2U+aCXcNpml+m4dPsvsJ3jatg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
arr-union@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/arr-union/-/arr-union-3.1.0.tgz#e39b09aea9def866a8f206e288af63919bae39c4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-45sJrqne+Gao8gbiiK9jkZuuOcQ=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
array-each@^1.0.1:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/array-each/-/array-each-1.0.1.tgz#a794af0c05ab1752846ee753a1f211a05ba0c44f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-p5SvDAWrF1KEbudTofIRoFugxE8=
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
array-flatten@1.1.1:
version "1.1.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/array-flatten/-/array-flatten-1.1.1.tgz#9a5f699051b1e7073328f2a008968b64ea2955d2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ml9pkFGx5wczKPKgCJaLZOopVdI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
array-slice@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/array-slice/-/array-slice-1.1.0.tgz#e368ea15f89bc7069f7ffb89aec3a6c7d4ac22d4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-B1qMD3RBP7O8o0H2KbrXDyB0IccejMF15+87Lvlor12ONPRHP6gTjXMNkt/d3ZuOGbAe66hFmaCfECI24Ufp6w==
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
array-unique@^0.3.2:
version "0.3.2"
resolved "https://registry.yarnpkg.com/array-unique/-/array-unique-0.3.2.tgz#a894b75d4bc4f6cd679ef3244a9fd8f46ae2d428"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-qJS3XUvE9s1nnvMkSp/Y9Gri1Cg=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
asn1@~0.2.3:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "0.2.4"
resolved "https://registry.yarnpkg.com/asn1/-/asn1-0.2.4.tgz#8d2475dfab553bb33e77b54e59e880bb8ce23136"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-jxwzQpLQjSmWXgwaCZE9Nz+glAG01yF1QnWgbhGwHI5A6FRIEY6IVqtHhIepHqI7/kyEyQEagBC5mBEFlIYvdg==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dependencies:
safer-buffer "~2.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
assert-plus@1.0.0, assert-plus@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/assert-plus/-/assert-plus-1.0.0.tgz#f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8S4PPF13sLHN2RRpQuTpbB5N1SU=
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
assign-symbols@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/assign-symbols/-/assign-symbols-1.0.0.tgz#59667f41fadd4f20ccbc2bb96b8d4f7f78ec0367"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WWZ/QfrdTyDMvCu5a41Pf3jsA2c=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
ast-types@0.x.x:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "0.14.2"
resolved "https://registry.yarnpkg.com/ast-types/-/ast-types-0.14.2.tgz#600b882df8583e3cd4f2df5fa20fa83759d4bdfd"
integrity sha512-O0yuUDnZeQDL+ncNGlJ78BiO4jnYI3bvMsD5prT0/nsgijG/LpNBIr63gTjVTNsiGkgQhiyCShTgxt8oXOrklA==
dependencies:
tslib "^2.0.1"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
astral-regex@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/astral-regex/-/astral-regex-1.0.0.tgz#6c8c3fb827dd43ee3918f27b82782ab7658a6fd9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-+Ryf6g3BKoRc7jfp7ad8tM4TtMiaWvbF/1/sQcZPkkS7ag3D5nMBCe2UfOTONtAkaG0tO0ij3C5Lwmf1EiyjHg==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Update dependency eslint to v7.16.0
2020-12-19 02:06:06 +03:00
astral-regex@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/astral-regex/-/astral-regex-2.0.0.tgz#483143c567aeed4785759c0865786dc77d7d2e31"
integrity sha512-Z7tMw1ytTXt5jqMcOP+OQteU1VuNK9Y02uuJtKQ1Sv69jXQKKg5cibLwGJow8yzZP+eAc18EmLGPal0bp36rvQ==
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
async@^1.4.0, async@^1.5.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.5.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/async/-/async-1.5.2.tgz#ec6a61ae56480c0c3cb241c95618e20892f9672a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-7GphrlZIDAw8skHJVhjiCJL5Zyo=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
async@^2.1.2, async@^2.6.0, async@^2.6.1:
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
version "2.6.3"
resolved "https://registry.yarnpkg.com/async/-/async-2.6.3.tgz#d72625e2344a3656e3a3ad4fa749fa83299d82ff"
integrity sha512-zflvls11DCy+dQWzTW2dzuilv8Z5X/pjfmZOWba6TNIVDm+2UDaJmXSOXlasHKfNBs8oo3M0aT50fDEWfKZjXg==
dependencies:
lodash "^4.17.14"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
async@^3.0.1, async@^3.2.0, async@~3.2.0:
Lock file maintenance
2021-08-09 03:03:02 +03:00
version "3.2.1"
resolved "https://registry.yarnpkg.com/async/-/async-3.2.1.tgz#d3274ec66d107a47476a4c49136aacdb00665fc8"
integrity sha512-XdD5lRO/87udXCMC9meWdYiR+Nq6ZjUfXidViUZGu2F1MO4T3XwZ1et0hb2++BgLfhyJwy44BGB/yx80ABx8hg==
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
asynckit@^0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/asynckit/-/asynckit-0.4.0.tgz#c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-x57Zf380y48robyXkLzDZkdLS3k=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency fs-extra to v9
2020-03-19 18:40:31 +03:00
at-least-node@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/at-least-node/-/at-least-node-1.0.0.tgz#602cd4b46e844ad4effc92a8011a3c46e0238dc2"
integrity sha512-+q/t7Ekv1EDY2l6Gda6LLiX14rU9TV20Wa3ofeQmwPFZbOMo9DXrLbOjFaaclkXKWidIaopwAObQDqwWtGUjqg==
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
atob@^2.1.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/atob/-/atob-2.1.2.tgz#6d9517eb9e030d2436666651e86bd9f6f13533c9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Wm6ukoaOGJi/73p/cl2GvLjTI5JM1k/O14isD73YML8StrH/7/lRFgmg8nICZgD3bZZvjwCGxtMOD3wWNAu8cg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
audio-extensions@0.0.0:
version "0.0.0"
resolved "https://registry.yarnpkg.com/audio-extensions/-/audio-extensions-0.0.0.tgz#d0eefe077fb9eb625898eed9985890548cf1f8d2"
integrity sha1-0O7+B3+562JYmO7ZmFiQVIzx+NI=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
aws-sign2@~0.7.0:
version "0.7.0"
resolved "https://registry.yarnpkg.com/aws-sign2/-/aws-sign2-0.7.0.tgz#b46e890934a9591f2d2f6f86d7e6a9f1b3fe76a8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-tG6JCTSpWR8tL2+G1+ap8bP+dqg=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
aws4@^1.8.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "1.11.0"
resolved "https://registry.yarnpkg.com/aws4/-/aws4-1.11.0.tgz#d61f46d83b2519250e2784daf5b09479a8b41c59"
integrity sha512-xh1Rl34h6Fi1DC2WWKfxUTVqRsNnr6LsKz2+hfwDxQJWmrx8+c7ylaqBMcHfl1U1r2dsifOvKX3LQuLNZ+XSvA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
axios-retry@^3.0.2:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "3.1.9"
resolved "https://registry.yarnpkg.com/axios-retry/-/axios-retry-3.1.9.tgz#6c30fc9aeb4519aebaec758b90ef56fa03fe72e8"
integrity sha512-NFCoNIHq8lYkJa6ku4m+V1837TP6lCa7n79Iuf8/AqATAHYB0ISaAS1eyIenDOfHOLtym34W65Sjke2xjg2fsA==
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
dependencies:
is-retry-allowed "^1.1.0"
Update dependency analytics-node to v5.1.0
2021-09-14 01:22:11 +03:00
axios@^0.21.4:
version "0.21.4"
resolved "https://registry.yarnpkg.com/axios/-/axios-0.21.4.tgz#c67b90dc0568e5c1cf2b0b858c43ba28e2eda575"
integrity sha512-ut5vewkiu8jjGBdqpM44XxjuCjq9LAKeHVmoVfHVzy8eHgxxq8SbAVQNovDA8mVi05kP0Ea/n/UzcSHcTJQfNg==
Update dependency jwks-rsa to v1.12.1
2021-01-04 08:09:00 +03:00
dependencies:
Lock file maintenance
2021-09-06 03:36:57 +03:00
follow-redirects "^1.14.0"
Update dependency jwks-rsa to v1.12.1
2021-01-04 08:09:00 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
bail@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.0.5"
resolved "https://registry.yarnpkg.com/bail/-/bail-1.0.5.tgz#b6fa133404a392cbc1f8c4bf63f5953351e7a776"
integrity sha512-xFbRxM1tahm08yHBP16MMjVUAvDaBMD38zsM9EMAUN61omwLmKlOpB/Zku5QkjZ8TZ4vn53pj+t518cH0S03RQ==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
balanced-match@^1.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/balanced-match/-/balanced-match-1.0.2.tgz#e83e3a7e3f300b34cb9d87f615fa0cbf357690ee"
integrity sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
base64-js@^1.3.1:
version "1.5.1"
resolved "https://registry.yarnpkg.com/base64-js/-/base64-js-1.5.1.tgz#1b1b440160a5bf7ad40b650f095963481903930a"
integrity sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
Added oauth login and invitation acceptance issue https://github.com/TryGhost/Team/issues/614 - Users who have a password can directly sign-in via oauth - User who are logged-in get their password disabled - Users accepting an invitation get their password disabled - The way we disable password is by setting it to a long random password
2021-04-21 20:33:48 +03:00
base64url@3.x.x, base64url@^3.0.1:
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
version "3.0.1"
resolved "https://registry.yarnpkg.com/base64url/-/base64url-3.0.1.tgz#6399d572e2bc3f90a9a8b22d5dbb0a32d33f788d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-ir1UPr3dkwexU7FdV8qBBbNDRUhMmIekYMFZfi+C/sLNnRESKPl23nB9b2pltqfOQNnGzsDdId90AEtG5tCx4A==
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
base@^0.11.1:
version "0.11.2"
resolved "https://registry.yarnpkg.com/base/-/base-0.11.2.tgz#7bde5ced145b6d551a90db87f83c558b4eb48a8f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-5T6P4xPgpp0YDFvSWwEZ4NoE3aM4QBQXDzmVbraCkFj8zHM+mba8SyqB5DbZWyR7mYHo6Y7BdQo3MoA4m0TeQg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
cache-base "^1.0.1"
class-utils "^0.3.5"
component-emitter "^1.2.1"
define-property "^1.0.0"
isobject "^3.0.1"
mixin-deep "^1.2.0"
pascalcase "^0.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
bcrypt-pbkdf@^1.0.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz#a4301d389b6a43f9b67ff3ca11a3f6637e360e9e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-pDAdOJtqQ/m2f/PKEaP2Y342Dp4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
tweetnacl "^0.14.3"
Bumped selected dependencies to unpin sub-dependencies no issue - we've been unpinning dependencies in our libraries to remove duplicates - this commit bumps packages from the Utils repo and NQL, all of which contain changes to unpin their own dependencies
2021-04-19 12:46:47 +03:00
bcryptjs@^2.4.3:
Update bcryptjs to version 2.4.3 🚀 (#7949) * chore(package): update bcryptjs to version 2.4.3 https://greenkeeper.io/ * chore: yarn.lock
2017-02-08 20:54:16 +03:00
version "2.4.3"
resolved "https://registry.yarnpkg.com/bcryptjs/-/bcryptjs-2.4.3.tgz#9ab5627b93e60621ff7cdac5da9733027df1d0cb"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-mrVie5PmBiH/fNrF2pczAn3x0Ms=
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
Update dependency mysql to v2.18.1
2020-02-19 14:11:32 +03:00
bignumber.js@9.0.0:
version "9.0.0"
resolved "https://registry.yarnpkg.com/bignumber.js/-/bignumber.js-9.0.0.tgz#805880f84a329b5eac6e7cb6f8274b6d82bdf075"
integrity sha512-t/OYhhJ2SD+YGBQcjY8GzzDHEk9f3nerxjtfa6tlMXfe7frs/WozhvCNoGvpM0P3bNf3Gq5ZRMlGr5f3r4/N8A==
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
binary-extensions@^2.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "2.2.0"
resolved "https://registry.yarnpkg.com/binary-extensions/-/binary-extensions-2.2.0.tgz#75f502eeaf9ffde42fc98829645be4ea76bd9e2d"
integrity sha512-jDctJ/IVQbZoJykoeHbhXpOlNBqGNcwXJKJog42E5HDPUwQTSdjCHdihjj0DlnheQ7blbT6dHOafNAiS8ooQKA==
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
Update dependency @tryghost/image-transform to v1.0.11
2021-04-21 11:12:19 +03:00
bl@^4.0.3:
version "4.1.0"
resolved "https://registry.yarnpkg.com/bl/-/bl-4.1.0.tgz#451535264182bec2fbbc83a62ab98cf11d9f7b3a"
integrity sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==
dependencies:
buffer "^5.5.0"
inherits "^2.0.4"
readable-stream "^3.4.0"
Update dependency sqlite3 to v5
2021-04-15 16:46:12 +03:00
block-stream@*:
version "0.0.9"
resolved "https://registry.yarnpkg.com/block-stream/-/block-stream-0.0.9.tgz#13ebfe778a03205cfe03751481ebb4b3300c126a"
integrity sha1-E+v+d4oDIFz+A3UUgeu0szAMEmo=
dependencies:
inherits "~2.0.0"
Updated bookshelf dependency to 1.2.0
2020-08-03 22:36:53 +03:00
bluebird@3.7.2, bluebird@^3.4.1, bluebird@^3.5.0, bluebird@^3.5.3, bluebird@^3.5.4, bluebird@^3.5.5, bluebird@^3.7.2:
Update dependency bluebird to v3.7.2
2019-12-02 03:24:08 +03:00
version "3.7.2"
resolved "https://registry.yarnpkg.com/bluebird/-/bluebird-3.7.2.tgz#9f229c15be272454ffa973ace0dbee79a1b0c36f"
integrity sha512-XpNj6GDQzdfW+r2Wnn7xiSAd7TM3jzkxGXBGTtWKuSXv1xUV+azxAm8jdWZN06QTQk+2N2XB9jRDkvbmQmcRtg==
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
body-parser@1.19.0, body-parser@^1.19.0:
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
version "1.19.0"
resolved "https://registry.yarnpkg.com/body-parser/-/body-parser-1.19.0.tgz#96b2709e57c9c4e09a6fd66a8fd979844f69f08a"
integrity sha512-dhEPs72UPbDnAQJ9ZKMNTP6ptJaionhP5cBb541nXPlW60Jepo9RV/a4fX4XWW9CuFNK22krhrj1+rgzifNCsw==
dependencies:
bytes "3.1.0"
content-type "~1.0.4"
debug "2.6.9"
depd "~1.1.2"
http-errors "1.7.2"
iconv-lite "0.4.24"
on-finished "~2.3.0"
qs "6.7.0"
raw-body "2.4.0"
type-is "~1.6.17"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
body@^5.1.0:
version "5.1.0"
resolved "https://registry.yarnpkg.com/body/-/body-5.1.0.tgz#e4ba0ce410a46936323367609ecb4e6553125069"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-5LoM5BCkaTYyM2dgnstOZVMSUGk=
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
dependencies:
continuable-cache "^0.3.1"
error "^7.0.0"
raw-body "~1.1.0"
safe-json-parse "~1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated bookshelf-relations dependency to 2.2.0
2020-08-03 22:37:25 +03:00
bookshelf-relations@2.2.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/bookshelf-relations/-/bookshelf-relations-2.2.0.tgz#7332037164b97d54dd937fa9b0e8fa33a5aaa015"
integrity sha512-0GaM9UwQoP1O9aM9OFc05oOBT36t5ZGfs6y2dGGhanjR86f2oFwP4B9LHFNRwSF+UG6+ZjfhBG/ormppVs+26w==
Add bookshelf-relations (#9252) no issue - added https://github.com/TryGhost/bookshelf-relations as dependency - remove existing tag handling --- * Important: Ensure we trigger parent initialize function - otherwise the plugin is unable to listen on model events - important: event order for listeners is Ghost -> Plugin - Ghost should be able to listen on the events as first instance - e.g. be able to modify/validate relationships * Fix tag validation - we detect lower/update case slugs for tags manually - this can't be taken over from the plugin obviously - ensure we update the target model e.g. this.set('tags', ...) * override base fn: `permittedAttributes` - ensure we call the base - put relations on top - each relation is allowed to be passed - the plugin will auto-unset any relations to it does not reach the database * Ensure we run add/edit/delete within a transaction - updating nested relationships requires sql queries - all sql statements have to run in a single transaction to ensure we rollback everything if an error occurs - use es6
2017-11-21 16:28:05 +03:00
dependencies:
Updated bookshelf-relations dependency to 2.2.0
2020-08-03 22:37:25 +03:00
bluebird "^3.7.2"
ghost-ignition "^4.6.2"
lodash "^4.17.21"
Add bookshelf-relations (#9252) no issue - added https://github.com/TryGhost/bookshelf-relations as dependency - remove existing tag handling --- * Important: Ensure we trigger parent initialize function - otherwise the plugin is unable to listen on model events - important: event order for listeners is Ghost -> Plugin - Ghost should be able to listen on the events as first instance - e.g. be able to modify/validate relationships * Fix tag validation - we detect lower/update case slugs for tags manually - this can't be taken over from the plugin obviously - ensure we update the target model e.g. this.set('tags', ...) * override base fn: `permittedAttributes` - ensure we call the base - put relations on top - each relation is allowed to be passed - the plugin will auto-unset any relations to it does not reach the database * Ensure we run add/edit/delete within a transaction - updating nested relationships requires sql queries - all sql statements have to run in a single transaction to ensure we rollback everything if an error occurs - use es6
2017-11-21 16:28:05 +03:00
Updated bookshelf dependency to 1.2.0
2020-08-03 22:36:53 +03:00
bookshelf@1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/bookshelf/-/bookshelf-1.2.0.tgz#cb972aa2316405d3a4af9cb1e2814895ab23283e"
integrity sha512-rm04YpHkLej6bkNezKUQjzuXV30rbyEHQoaKvfQ3fOyLYxPeB18uBL+h2t6SmeXjfsB+aReMmbhkMF/lUTbtMA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Updated bookshelf dependency to 1.2.0
2020-08-03 22:36:53 +03:00
bluebird "^3.7.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
create-error "~0.3.1"
Updated bookshelf dependency to 1.2.0
2020-08-03 22:36:53 +03:00
inflection "^1.12.0"
lodash "^4.17.15"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
boolbase@^1.0.0, boolbase@~1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.0"
resolved "https://registry.yarnpkg.com/boolbase/-/boolbase-1.0.0.tgz#68dff5fbe60c51eb37725ea9e3ed310dcc1e776e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-aN/1++YMUes3cl6p4+0xDcwed24=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added support for graceful job shutdown and worker threads refs #12402 - With bumped version of job-manager it offloads job procesing into separate worker thread. Having jobs run out of main Ghost process even loop allows for safe job execution, which does not block Ghost from serving requests or performing other functions without a delay - Added experimental data access to 'testmode' jobs. This should serve as an illustration of how to access data from the job layer
2020-11-23 07:17:49 +03:00
boolean@^3.0.2:
Lock file maintenance
2021-08-23 05:05:27 +03:00
version "3.1.4"
resolved "https://registry.yarnpkg.com/boolean/-/boolean-3.1.4.tgz#f51a2fb5838a99e06f9b6ec1edb674de67026435"
integrity sha512-3hx0kwU3uzG6ReQ3pnaFQPSktpBw6RHN3/ivDKEuU8g1XSfafowyvDnadjv1xp8IZqhtSukxlwv9bF6FhX8m0w==
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
bowser@^2.11.0:
version "2.11.0"
resolved "https://registry.yarnpkg.com/bowser/-/bowser-2.11.0.tgz#5ca3c35757a7aa5771500c70a73a9f91ef420a8f"
integrity sha512-AlcaJBi/pqqJBIQ8U9Mcpc9i8Aqxn88Skv5d+xBX006BY5u8N3mGLHa5Lgppa7L/HfwgwLgZ6NYs+Ag6uUmJRA==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
brace-expansion@^1.1.7:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.1.11"
resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-1.1.11.tgz#3c7fcbf529d87226f3d2f52b966ff5271eb441dd"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
balanced-match "^1.0.0"
concat-map "0.0.1"
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
braces@^2.3.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "2.3.2"
resolved "https://registry.yarnpkg.com/braces/-/braces-2.3.2.tgz#5979fd3f14cd531565e5fa2df1abfff1dfaee729"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-aNdbnj9P8PjdXU4ybaWLK2IF3jc/EoDYbC7AazW6to3TRsfXxscC9UXOB5iDiEQrkyIbWp2SLQda4+QAa7nc3w==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
arr-flatten "^1.1.0"
array-unique "^0.3.2"
extend-shallow "^2.0.1"
fill-range "^4.0.0"
isobject "^3.0.1"
repeat-element "^1.1.2"
snapdragon "^0.8.1"
snapdragon-node "^2.0.1"
split-string "^3.0.2"
to-regex "^3.0.1"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
braces@^3.0.1, braces@~3.0.2:
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/braces/-/braces-3.0.2.tgz#3454e1a462ee8d599e236df336cd9ea4f8afe107"
integrity sha512-b8um+L1RzM3WDSzvhm6gIz1yfTbBt6YTlcEKAvsmqCZZFw46z626lVj9j1yEPW33H5H+lBQpZMP1k8l+78Ha0A==
dependencies:
fill-range "^7.0.1"
Bumped selected dependencies to unpin sub-dependencies no issue - we've been unpinning dependencies in our libraries to remove duplicates - this commit bumps packages from the Utils repo and NQL, all of which contain changes to unpin their own dependencies
2021-04-19 12:46:47 +03:00
bree@^6.2.0:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "6.3.1"
resolved "https://registry.yarnpkg.com/bree/-/bree-6.3.1.tgz#7ebb5f8907de4f50f2195629ac30dd089c141b75"
integrity sha512-FADpEV5c+3ZuFIBothyyRUxZClJD2PetIo0lmqAFJ3ZMI9WsSmQmmstZ86Dy0G4Gyw3nPNdfYTjV7+9pPtlB8g==
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
dependencies:
Added support for graceful job shutdown and worker threads refs #12402 - With bumped version of job-manager it offloads job procesing into separate worker thread. Having jobs run out of main Ghost process even loop allows for safe job execution, which does not block Ghost from serving requests or performing other functions without a delay - Added experimental data access to 'testmode' jobs. This should serve as an illustration of how to access data from the job layer
2020-11-23 07:17:49 +03:00
"@babel/runtime" "^7.12.5"
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
"@breejs/later" "^4.0.2"
Added support for graceful job shutdown and worker threads refs #12402 - With bumped version of job-manager it offloads job procesing into separate worker thread. Having jobs run out of main Ghost process even loop allows for safe job execution, which does not block Ghost from serving requests or performing other functions without a delay - Added experimental data access to 'testmode' jobs. This should serve as an illustration of how to access data from the job layer
2020-11-23 07:17:49 +03:00
boolean "^3.0.2"
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
bthreads "^0.5.1"
combine-errors "^3.0.3"
Added support for graceful job shutdown and worker threads refs #12402 - With bumped version of job-manager it offloads job procesing into separate worker thread. Having jobs run out of main Ghost process even loop allows for safe job execution, which does not block Ghost from serving requests or performing other functions without a delay - Added experimental data access to 'testmode' jobs. This should serve as an illustration of how to access data from the job layer
2020-11-23 07:17:49 +03:00
cron-validate "^1.4.1"
debug "^4.3.1"
human-interval "^2.0.0"
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
is-string-and-not-blank "^0.0.2"
is-valid-path "^0.1.1"
ms "^2.1.2"
p-wait-for "3.1.0"
safe-timers "^1.1.0"
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
browser-process-hrtime@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/browser-process-hrtime/-/browser-process-hrtime-1.0.0.tgz#3c9b4b7d782c8121e56f10106d84c0d0ffc94626"
integrity sha512-9o5UecI3GhkpM6DrXr69PblIuWxPKk9Y0jHBRhdocZ2y7YECBFCsHm79Pr3OyR2AvjhDkabFJaDJMYRazHgsow==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
browser-stdout@1.3.1:
version "1.3.1"
resolved "https://registry.yarnpkg.com/browser-stdout/-/browser-stdout-1.3.1.tgz#baa559ee14ced73452229bad7326467c61fabd60"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-qhAVI1+Av2X7qelOfAIYwXONood6XlZE/fXaBSmW/T5SzLAmCgzi+eiWE7fUvbHaeNBQH13UftjpXxsfLkMpgw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2021-06-01 18:19:18 +03:00
browserslist@^4.0.0, browserslist@^4.16.0, browserslist@^4.16.6:
Lock file maintenance
2021-09-06 03:36:57 +03:00
version "4.17.0"
resolved "https://registry.yarnpkg.com/browserslist/-/browserslist-4.17.0.tgz#1fcd81ec75b41d6d4994fb0831b92ac18c01649c"
integrity sha512-g2BJ2a0nEYvEFQC208q8mVAhfNwpZ5Mu8BwgtCdZKO3qx98HChmeg448fPdUzld8aFmfLgVh7yymqV+q1lJZ5g==
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
dependencies:
Lock file maintenance
2021-09-06 03:36:57 +03:00
caniuse-lite "^1.0.30001254"
Lock file maintenance
2021-08-23 05:05:27 +03:00
colorette "^1.3.0"
Lock file maintenance
2021-09-06 03:36:57 +03:00
electron-to-chromium "^1.3.830"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
escalade "^3.1.1"
Lock file maintenance
2021-08-23 05:05:27 +03:00
node-releases "^1.1.75"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
Update dependency brute-knex to v4.0.1
2020-11-02 20:07:12 +03:00
brute-knex@4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/brute-knex/-/brute-knex-4.0.1.tgz#7488bdc3fcc70f8a71f2224ab4747be94a08cc9c"
integrity sha512-rV2tY8amv+2ERYNNC7voCl1A4Mh+s2IvyyDo3DAMKhaR4ME8r+4t9MH0Fgqjpe1ievESYX9Pes7gf05LBBUCRA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
express-brute "^1.0.1"
Update dependency brute-knex to v4.0.1
2020-11-02 20:07:12 +03:00
knex "^0.20"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added Members bulk actions endpoint refs https://github.com/TryGhost/Team/issues/946 This adds the initial bulk actions endpoint used for the members filtering feature. The idea is to eventually move bulk destroy into this endpoint to and provide a consistent interface for applying bulk actions to members. The @tryghost/members-api package has been bumped to include the new bulkEdit method. The sinon.restore in tests was moved to an afterEach so that stubs did not effect other tests.
2021-08-13 16:18:57 +03:00
bson-objectid@2.0.1, bson-objectid@^2.0.1:
Update dependency bson-objectid to v2
2021-04-21 17:52:55 +03:00
version "2.0.1"
resolved "https://registry.yarnpkg.com/bson-objectid/-/bson-objectid-2.0.1.tgz#226a9ffecd3a8d52f565d71012dd5b176560fef1"
integrity sha512-b4D1/G4uP9Yks4rv+nDVsZ4ybT1W5nQYw4lfpfaRP2Q18azlR6Oe2BAuirG1lzrwQFtHnJ0nrK5kWKKZVEMUng==
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Added support for graceful job shutdown and worker threads refs #12402 - With bumped version of job-manager it offloads job procesing into separate worker thread. Having jobs run out of main Ghost process even loop allows for safe job execution, which does not block Ghost from serving requests or performing other functions without a delay - Added experimental data access to 'testmode' jobs. This should serve as an illustration of how to access data from the job layer
2020-11-23 07:17:49 +03:00
bthreads@0.5.1, bthreads@^0.5.1:
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
version "0.5.1"
resolved "https://registry.yarnpkg.com/bthreads/-/bthreads-0.5.1.tgz#c7a4dacc2d159c50de08b37b1e2a7da836171063"
integrity sha512-nK7Jo9ll+r1FRMNPWEFRTZMQrX6HhX8JjPAofxmbTNILHqWVIJPmWzCi9JlX/K0DL5AKZTFZg2Qser5C6gVs9A==
dependencies:
bufio "~1.0.5"
Update dependency @tryghost/zip to v1
2020-04-08 14:57:26 +03:00
buffer-crc32@^0.2.1, buffer-crc32@^0.2.13, buffer-crc32@~0.2.3:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.2.13"
resolved "https://registry.yarnpkg.com/buffer-crc32/-/buffer-crc32-0.2.13.tgz#0d333e3f00eac50aa1454abd30ef8c2a5d9a7242"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-DTM+PwDqxQqhRUq9MO+MKl2ackI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
buffer-equal-constant-time@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz#f8e71132f7ffe6e01a5c9697a4c6f3e48d5cc819"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-+OcRMvf/5uAaXJaXpMbz5I1cyBk=
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
buffer-from@^1.0.0:
Lock file maintenance
2021-08-02 05:46:09 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/buffer-from/-/buffer-from-1.1.2.tgz#2b146a6fd72e80b4f55d255f35ed59a3a9a41bd5"
integrity sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
buffer@^5.1.0, buffer@^5.5.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "5.7.1"
resolved "https://registry.yarnpkg.com/buffer/-/buffer-5.7.1.tgz#ba62e7c13133053582197160851a8f648e99eed0"
integrity sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==
Update dependency node-jose to v1.1.4
2020-03-26 22:17:47 +03:00
dependencies:
Lock file maintenance
2021-05-05 18:56:03 +03:00
base64-js "^1.3.1"
ieee754 "^1.1.13"
Update dependency node-jose to v1.1.4
2020-03-26 22:17:47 +03:00
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
bufio@~1.0.5:
version "1.0.7"
resolved "https://registry.yarnpkg.com/bufio/-/bufio-1.0.7.tgz#b7f63a1369a0829ed64cc14edf0573b3e382a33e"
integrity sha512-bd1dDQhiC+bEbEfg56IdBv7faWa6OipMs/AFFFvtFnB3wAYjlwQpQRZ0pm6ZkgtfL0pILRXhKxOiQj6UzoMR7A==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
builtin-modules@^3.0.0:
version "3.2.0"
resolved "https://registry.yarnpkg.com/builtin-modules/-/builtin-modules-3.2.0.tgz#45d5db99e7ee5e6bc4f362e008bf917ab5049887"
integrity sha512-lGzLKcioL90C7wMczpkY0n/oART3MbBa8R9OFGE1rJxoVI86u4WAGfEk8Wjv10eKSyTHVGkSo3bvBylCEtk7LA==
Updated bookshelf-relations dependency to 2.2.0
2020-08-03 22:37:25 +03:00
bunyan-loggly@1.4.2, bunyan-loggly@^1.4.2:
Update dependency @tryghost/adapter-manager to v0.1.4
2020-05-08 18:58:44 +03:00
version "1.4.2"
resolved "https://registry.yarnpkg.com/bunyan-loggly/-/bunyan-loggly-1.4.2.tgz#dda0fb18f487fa150a79728e906d83e871d235e9"
integrity sha512-/fwAO+NPogiPziEk4bQKZhwYo+POrbdAlatpW5r+BQSTHqYyxGFHMtLMp4uSjIdPetXDxvG5qffAePB3hc/6NA==
dependencies:
json-stringify-safe "^5.0.1"
node-loggly-bulk "^2.2.4"
Change to use @tryghost/logging no issue Logging is now controlled by a logginrc.js file in the root of the project - and now we can just import @tryghost/logging everywhere
2021-06-15 17:36:27 +03:00
bunyan@1.8.15, bunyan@^1.8.15:
Update dependency ghost-ignition to v4.3.0
2021-01-13 19:02:06 +03:00
version "1.8.15"
resolved "https://registry.yarnpkg.com/bunyan/-/bunyan-1.8.15.tgz#8ce34ca908a17d0776576ca1b2f6cbd916e93b46"
integrity sha512-0tECWShh6wUysgucJcBAoYegf3JJoZWibxdqhTm7OHPeT42qdjkZ29QCMcKwbgU1kiH+auSIasNRXMLWXafXig==
optionalDependencies:
dtrace-provider "~0.8"
moment "^2.19.3"
mv "~2"
safe-json-stringify "~1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
busboy@^0.2.11:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "0.2.14"
resolved "https://registry.yarnpkg.com/busboy/-/busboy-0.2.14.tgz#6c2a622efcf47c57bbbe1e2a9c37ad36c7925453"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-bCpiLvz0fFe7vh4qnDetNseSVFM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
dicer "0.2.5"
readable-stream "1.1.x"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
bytes@1:
version "1.0.0"
resolved "https://registry.yarnpkg.com/bytes/-/bytes-1.0.0.tgz#3569ede8ba34315fab99c3e92cb04c7220de1fa8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-NWnt6Lo0MV+rmcPpLLBMciDeH6g=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
bytes@3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/bytes/-/bytes-3.0.0.tgz#d32815404d689699f85a4ea4fa8755dd13a96048"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-0ygVQE1olpn4Wk6k+odV3ROpYEg=
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
bytes@3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/bytes/-/bytes-3.1.0.tgz#f6cf7933a360e0588fa9fde85651cdc7f805d1f6"
integrity sha512-zauLjrfCG+xvoyaqLoV8bLVXXNGC4JqlxFCutSDWA6fJrTo2ZuvLYTqZ7aHBLZSMOopbzwv8f+wZcVzfVTI2Dg==
Update dependency c8 to v7.9.0
2021-09-10 07:28:46 +03:00
c8@7.9.0:
version "7.9.0"
resolved "https://registry.yarnpkg.com/c8/-/c8-7.9.0.tgz#e63b9a22c8b4adbf6a8c8cb6194ee086b3e13c24"
integrity sha512-aQ7dC8gASnKdBwHUuYuzsdKCEDrKnWr7ZuZUnf4CNAL81oyKloKrs7H7zYvcrmCtIrMToudBSUhq2q+LLBMvgg==
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
dependencies:
"@bcoe/v8-coverage" "^0.2.3"
"@istanbuljs/schema" "^0.1.2"
find-up "^5.0.0"
foreground-child "^2.0.0"
istanbul-lib-coverage "^3.0.0"
istanbul-lib-report "^3.0.0"
istanbul-reports "^3.0.2"
rimraf "^3.0.0"
test-exclude "^6.0.0"
v8-to-istanbul "^8.0.0"
yargs "^16.2.0"
yargs-parser "^20.2.7"
Lock file maintenance
2021-06-01 18:19:18 +03:00
cacache@^15.0.5:
Lock file maintenance
2021-08-30 06:24:29 +03:00
version "15.3.0"
resolved "https://registry.yarnpkg.com/cacache/-/cacache-15.3.0.tgz#dc85380fb2f556fe3dda4c719bfa0ec875a7f1eb"
integrity sha512-VVdYzXEn+cnbXpFgWs5hTT7OScegHVmLhJIR8Ufqk3iFD6A6j5iSX1KuBTfNEv4tdJWE2PzA6IVFtcLC7fN9wQ==
Lock file maintenance
2021-06-01 18:19:18 +03:00
dependencies:
Lock file maintenance
2021-08-30 06:24:29 +03:00
"@npmcli/fs" "^1.0.0"
Lock file maintenance
2021-06-01 18:19:18 +03:00
"@npmcli/move-file" "^1.0.1"
chownr "^2.0.0"
fs-minipass "^2.0.0"
glob "^7.1.4"
infer-owner "^1.0.4"
lru-cache "^6.0.0"
minipass "^3.1.1"
minipass-collect "^1.0.2"
minipass-flush "^1.0.5"
minipass-pipeline "^1.2.2"
mkdirp "^1.0.3"
p-map "^4.0.0"
promise-inflight "^1.0.1"
rimraf "^3.0.2"
ssri "^8.0.1"
tar "^6.0.2"
unique-filename "^1.1.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
cache-base@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/cache-base/-/cache-base-1.0.1.tgz#0a7f46416831c8b662ee36fe4e7c59d76f666ab2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-AKcdTnFSWATd5/GCPRxr2ChwIJ85CeyrEyjRHlKxQ56d4XJMGym0uAiKn0xbLOGOl3+yRpOTi484dVCEc5AUzQ==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
collection-visit "^1.0.0"
component-emitter "^1.2.1"
get-value "^2.0.6"
has-value "^1.0.0"
isobject "^3.0.1"
set-value "^2.0.0"
to-object-path "^0.3.0"
union-value "^1.0.0"
unset-value "^1.0.0"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
cacheable-lookup@^5.0.3:
version "5.0.4"
resolved "https://registry.yarnpkg.com/cacheable-lookup/-/cacheable-lookup-5.0.4.tgz#5a6b865b2c44357be3d5ebc2a467b032719a7005"
integrity sha512-2/kNscPhpcxrOigMZzbiWF7dz8ilhb/nIHU3EyZiXWXpeq/au8qJ8VhdftMkty3n7Gj6HIGalQG8oiBNB3AJgA==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
cacheable-request@^6.0.0:
version "6.1.0"
resolved "https://registry.yarnpkg.com/cacheable-request/-/cacheable-request-6.1.0.tgz#20ffb8bd162ba4be11e9567d823db651052ca912"
integrity sha512-Oj3cAGPCqOZX7Rz64Uny2GYAZNliQSqfbePrgAQ1wKAihYmCUnraBtJtKcGR4xz7wF+LoJC+ssFZvv5BgF9Igg==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
clone-response "^1.0.2"
get-stream "^5.1.0"
http-cache-semantics "^4.0.0"
keyv "^3.0.0"
lowercase-keys "^2.0.0"
normalize-url "^4.1.0"
responselike "^1.0.2"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
cacheable-request@^7.0.1:
Lock file maintenance
2021-07-05 04:25:22 +03:00
version "7.0.2"
resolved "https://registry.yarnpkg.com/cacheable-request/-/cacheable-request-7.0.2.tgz#ea0d0b889364a25854757301ca12b2da77f91d27"
integrity sha512-pouW8/FmiPQbuGpkXQ9BAPv/Mo5xDGANgSNXzTzJ8DrKGuXOssM4wIQRjfanNRh3Yu5cfYPvcorqbhg2KIJtew==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
dependencies:
clone-response "^1.0.2"
get-stream "^5.1.0"
http-cache-semantics "^4.0.0"
keyv "^4.0.0"
lowercase-keys "^2.0.0"
Lock file maintenance
2021-07-05 04:25:22 +03:00
normalize-url "^6.0.1"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
responselike "^2.0.0"
Lock file maintenance
2021-05-05 18:56:03 +03:00
call-bind@^1.0.0:
version "1.0.2"
resolved "https://registry.yarnpkg.com/call-bind/-/call-bind-1.0.2.tgz#b1d4e89e688119c3c9a903ad30abb2f6a919be3c"
integrity sha512-7O+FbCihrB5WGbFYesctwmTKae6rOiIzmz1icreWJ+0aA7LJfuqhEso2T9ncpcFtzMQtzXf2QGGueWJGTYsqrA==
dependencies:
function-bind "^1.1.1"
get-intrinsic "^1.0.2"
Update dependency ghost-ignition to v4.6.3
2021-06-14 20:44:17 +03:00
caller@1.0.1, caller@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/caller/-/caller-1.0.1.tgz#b851860f70e195db3d277395aa1a7e23ea30ecf5"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-uFGGD3Dhlds9J3OVqhp+I+ow7PU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
callsites@^3.0.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/callsites/-/callsites-3.1.0.tgz#b3630abd8943432f54b3f0519238e33cd7df2f73"
integrity sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Update dependency mocha to v8.2.0
2020-10-17 00:23:19 +03:00
camelcase@^6.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "6.2.0"
resolved "https://registry.yarnpkg.com/camelcase/-/camelcase-6.2.0.tgz#924af881c9d525ac9d87f40d964e5cea982a1809"
integrity sha512-c7wVvbw3f37nuobQNtgsgG9POC9qMbNuMQmTCqZv23b6MIz0fcYpBiOlv9gEN/hdLdnZTDQhg6e9Dq5M1vKvfg==
Update dependency mocha to v8.2.0
2020-10-17 00:23:19 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
caniuse-api@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/caniuse-api/-/caniuse-api-3.0.0.tgz#5e4d90e2274961d46291997df599e3ed008ee4c0"
integrity sha512-bsTwuIg/BZZK/vreVTYYbSWoe2F+71P7K5QGEX+pT250DZbfU1MQ5prOKpPR+LL6uWKK3KMwMCAS74QB3Um1uw==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
browserslist "^4.0.0"
caniuse-lite "^1.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
lodash.memoize "^4.1.2"
lodash.uniq "^4.5.0"
Lock file maintenance
2021-09-06 03:36:57 +03:00
caniuse-lite@^1.0.0, caniuse-lite@^1.0.30001254:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "1.0.30001258"
resolved "https://registry.yarnpkg.com/caniuse-lite/-/caniuse-lite-1.0.30001258.tgz#b604eed80cc54a578e4bf5a02ae3ed49f869d252"
integrity sha512-RBByOG6xWXUp0CR2/WU2amXz3stjKpSl5J1xU49F1n2OxD//uBZO4wCKUiG+QMGf7CHGfDDcqoKriomoGVxTeA==
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
caseless@~0.12.0:
version "0.12.0"
resolved "https://registry.yarnpkg.com/caseless/-/caseless-0.12.0.tgz#1b681c21ff84033c826543090689420d187151dc"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-G2gcIf+EAzyCZUMJBolCDRhxUdw=
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
ccount@^1.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/ccount/-/ccount-1.1.0.tgz#246687debb6014735131be8abab2d93898f8d043"
integrity sha512-vlNK021QdI7PNeiUh/lKkC/mNHHfV0m/Ad5JoI0TYtlBnJAslM/JIkm/tGC88bkLIwO6OQ5uV6ztS6kVAtCDlg==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
Added syncing and theme exposure of custom theme settings (#13354) refs https://github.com/TryGhost/Team/issues/1070 - added `@tryghost/custom-theme-settings-service` as a dependency - `core/server/services/custom-theme-settings` creates an instance of the new service passing in the model used for storing the setting keys/values and a cache instance - requiring `core/shared/services/custom-theme-settings-cache` creates a cache instance, it has no dependencies so can be required anywhere and the first require will initialize the shared instance - updated the theme activation bridge to trigger the theme settings service to sync the newly activated theme settings and populate the cache - updated theme validation to pass `labs` through as an option so that we get custom theme settings back as part of the checked theme as that's what is passed to the custom theme settings service
2021-09-23 14:44:39 +03:00
chalk@4.1.2, chalk@^4.0.0, chalk@^4.1.0, chalk@~4.1.0:
version "4.1.2"
resolved "https://registry.yarnpkg.com/chalk/-/chalk-4.1.2.tgz#aac4e2b7734a740867aeb16bf02aad556a1e7a01"
integrity sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==
Update dependency gscan to v3.5.5
2020-07-24 14:05:09 +03:00
dependencies:
ansi-styles "^4.1.0"
supports-color "^7.1.0"
Removed `grunt-contrib-uglify` dependency - the only bit of code that needed this, the minification of `members.js`, was removed in 3.37.0 so we no longer need this plugin
2020-11-03 17:13:00 +03:00
chalk@^1.1.1, chalk@^1.1.3:
Bumped chalk from version 1.1.3 to 2.4.2 refs #9389 - i was not able to find a breaking change, which affects us - https://github.com/chalk/chalk/releases/tag/v2.0.0
2019-01-21 16:21:13 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/chalk/-/chalk-1.1.3.tgz#a8115c55e4a702fe4d150abd3872822a7e09fc98"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-qBFcVeSnAv5NFQq9OHKCKn4J/Jg=
Bumped chalk from version 1.1.3 to 2.4.2 refs #9389 - i was not able to find a breaking change, which affects us - https://github.com/chalk/chalk/releases/tag/v2.0.0
2019-01-21 16:21:13 +03:00
dependencies:
ansi-styles "^2.2.1"
escape-string-regexp "^1.0.2"
has-ansi "^2.0.0"
strip-ansi "^3.0.0"
supports-color "^2.0.0"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
chalk@^2.0.0, chalk@^2.1.0, chalk@^2.4.1:
Update dependency chalk to v3
2020-02-18 22:06:21 +03:00
version "2.4.2"
resolved "https://registry.yarnpkg.com/chalk/-/chalk-2.4.2.tgz#cd42541677a54333cf541a49108c1432b44c9424"
integrity sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ==
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
dependencies:
Update dependency chalk to v3
2020-02-18 22:06:21 +03:00
ansi-styles "^3.2.1"
escape-string-regexp "^1.0.5"
supports-color "^5.3.0"
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
character-entities-html4@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.1.4"
resolved "https://registry.yarnpkg.com/character-entities-html4/-/character-entities-html4-1.1.4.tgz#0e64b0a3753ddbf1fdc044c5fd01d0199a02e125"
integrity sha512-HRcDxZuZqMx3/a+qrzxdBKBPUpxWEq9xw2OPZ3a/174ihfrQKVsFhqtthBInFy1zZ9GgZyFXOatNujm8M+El3g==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
character-entities-legacy@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.1.4"
resolved "https://registry.yarnpkg.com/character-entities-legacy/-/character-entities-legacy-1.1.4.tgz#94bc1845dce70a5bb9d2ecc748725661293d8fc1"
integrity sha512-3Xnr+7ZFS1uxeiUDvV02wQ+QDbc55o97tIV5zHScSPJpcLm/r0DFPcoY3tYRp+VZukxuMeKgXYmsXQHO05zQeA==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
character-entities@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.2.4"
resolved "https://registry.yarnpkg.com/character-entities/-/character-entities-1.2.4.tgz#e12c3939b7eaf4e5b15e7ad4c5e28e1d48c5b16b"
integrity sha512-iBMyeEHxfVnIakwOuDXpVkc54HijNgCyQB2w0VfGQThle6NXn50zU6V/u+LDhxHcDUPojn6Kpga3PTAD8W1bQw==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
character-reference-invalid@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.1.4"
resolved "https://registry.yarnpkg.com/character-reference-invalid/-/character-reference-invalid-1.1.4.tgz#083329cda0eae272ab3dbbf37e9a382c13af1560"
integrity sha512-mKKUkUbhPpQlCOfIuZkvSEgktjPFIsZKRRbC6KWVEMvlzblj3i3asQv5ODsrwt0N3pHAEvjP8KTQPHkp0+6jOg==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
chardet@^0.7.0:
version "0.7.0"
resolved "https://registry.yarnpkg.com/chardet/-/chardet-0.7.0.tgz#90094849f0937f2eedc2425d0d28a9e5f0cbad9e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-mT8iDcrh03qDGRRmoA2hmBJnxpllMR+0/0qlzjqZES6NdiWDcZkCNAk4rPFZ9Q85r27unkiNNg8ZOiwZXBHwcA==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
charenc@0.0.2:
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
version "0.0.2"
resolved "https://registry.yarnpkg.com/charenc/-/charenc-0.0.2.tgz#c0a1d2f3a7092e03774bfa83f14c0fc5790a8667"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-wKHS86cJLgN3S/qD8UwPxXkKhmc=
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
Update metascraper to v5.22.1
2021-06-09 18:53:54 +03:00
cheerio-select@^1.5.0:
version "1.5.0"
resolved "https://registry.yarnpkg.com/cheerio-select/-/cheerio-select-1.5.0.tgz#faf3daeb31b17c5e1a9dabcee288aaf8aafa5823"
integrity sha512-qocaHPv5ypefh6YNxvnbABM07KMxExbtbfuJoIie3iZXX1ERwYmJcIiRrr9H05ucQP1k28dav8rpdDgjQd8drg==
dependencies:
css-select "^4.1.3"
css-what "^5.0.1"
domelementtype "^2.2.0"
domhandler "^4.2.0"
domutils "^2.7.0"
Updated selected Utils packages to unpin dependencies no issue - I recently unpinned dependencies in the Utils monorepo so we can avoid multiple versions of the same package - this commit bumps all the packages that I published, that do not have other changes. Other team members should merge these
2021-04-16 15:59:15 +03:00
cheerio@0.22.0, cheerio@^0.22.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.22.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/cheerio/-/cheerio-0.22.0.tgz#a9baa860a3f9b595a6b81b1a86873121ed3a269e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-qbqoYKP5tZWmuBsahocxIe06Jp4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
css-select "~1.2.0"
dom-serializer "~0.1.0"
entities "~1.1.1"
htmlparser2 "^3.9.1"
lodash.assignin "^4.0.9"
lodash.bind "^4.1.4"
lodash.defaults "^4.0.1"
lodash.filter "^4.4.0"
lodash.flatten "^4.2.0"
lodash.foreach "^4.3.0"
lodash.map "^4.4.0"
lodash.merge "^4.4.0"
lodash.pick "^4.2.1"
lodash.reduce "^4.4.0"
lodash.reject "^4.4.0"
lodash.some "^4.4.0"
Lock file maintenance
2021-07-05 04:25:22 +03:00
cheerio@^1.0.0-rc.3, cheerio@~1.0.0-rc.10:
Update metascraper to v5.22.1
2021-06-09 18:53:54 +03:00
version "1.0.0-rc.10"
resolved "https://registry.yarnpkg.com/cheerio/-/cheerio-1.0.0-rc.10.tgz#2ba3dcdfcc26e7956fc1f440e61d51c643379f3e"
integrity sha512-g0J0q/O6mW8z5zxQ3A8E8J1hUgp4SMOvEoW/x84OwyHKe/Zccz83PVT4y5Crcr530FV6NgmKI1qvGTKVl9XXVw==
dependencies:
cheerio-select "^1.5.0"
dom-serializer "^1.3.2"
domhandler "^4.2.0"
htmlparser2 "^6.1.0"
parse5 "^6.0.1"
parse5-htmlparser2-tree-adapter "^6.0.1"
tslib "^2.2.0"
Update Test & linting packages
2021-07-05 03:37:17 +03:00
chokidar@3.5.2:
version "3.5.2"
resolved "https://registry.yarnpkg.com/chokidar/-/chokidar-3.5.2.tgz#dba3976fcadb016f66fd365021d91600d01c1e75"
integrity sha512-ekGhOnNVPgT77r4K/U3GDhu+FQ2S8TnK/s2KbIGXi0SZWuwkZ2QNyfWdZW+TVfn84DpEP7rLeCt2UI6bJ8GwbQ==
dependencies:
anymatch "~3.1.2"
braces "~3.0.2"
glob-parent "~5.1.2"
is-binary-path "~2.1.0"
is-glob "~4.0.1"
normalize-path "~3.0.0"
readdirp "~3.6.0"
optionalDependencies:
fsevents "~2.3.2"
Lock file maintenance
2021-08-16 04:04:05 +03:00
chownr@^1.1.1, chownr@^1.1.4:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.1.4"
resolved "https://registry.yarnpkg.com/chownr/-/chownr-1.1.4.tgz#6fc9d7b42d32a583596337666e7d08084da2cc6b"
integrity sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
chownr@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/chownr/-/chownr-2.0.0.tgz#15bfbe53d2eab4cf70f18a8cd68ebe5b3cb1dece"
integrity sha512-bIomtDF5KGpdogkLd9VspvFzk9KfpyyGlS8YFVZl7TGPBHL5snIOnxeshwVgPteQ9b4Eydl+pVbIyE1DcvCWgQ==
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
chrono-node@2.3.2:
version "2.3.2"
resolved "https://registry.yarnpkg.com/chrono-node/-/chrono-node-2.3.2.tgz#794f2ada1f75fe3da216501031812c0f3dd23c71"
integrity sha512-uZkVtF8dJ7llRzk3zrjGjV524I6NvojqMYk30tIfnUQ8ODrL8wvi/E2iEOTfcyiJaLf0dGDu9XVqNkVFNDMPCA==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
dayjs "^1.10.0"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
ci-info@^3.1.1:
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "3.2.0"
resolved "https://registry.yarnpkg.com/ci-info/-/ci-info-3.2.0.tgz#2876cb948a498797b5236f0095bc057d0dca38b6"
integrity sha512-dVqRX7fLUm8J6FgHJ418XuIgDLZDkYcDFTeL6TA2gt5WlIZUQrrH6EZrNClwT/H0FateUsZkGIOPRrLbP+PR9A==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
class-utils@^0.3.5:
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
version "0.3.6"
resolved "https://registry.yarnpkg.com/class-utils/-/class-utils-0.3.6.tgz#f93369ae8b9a7ce02fd41faad0ca83033190c463"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-qOhPa/Fj7s6TY8H8esGu5QNpMMQxz79h+urzrNYN6mn+9BnxlDGf5QZ+XeCDsxSjPqsSR56XOZOJmpeurnLMeg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
arr-union "^3.1.0"
define-property "^0.2.5"
isobject "^3.0.0"
static-extend "^0.1.1"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
clean-regexp@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/clean-regexp/-/clean-regexp-1.0.0.tgz#8df7c7aae51fd36874e8f8d05b9180bc11a3fed7"
integrity sha1-jffHquUf02h06PjQW5GAvBGj/tc=
dependencies:
escape-string-regexp "^1.0.5"
Lock file maintenance
2021-06-01 18:19:18 +03:00
clean-stack@^2.0.0, clean-stack@~2.2.0:
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
version "2.2.0"
resolved "https://registry.yarnpkg.com/clean-stack/-/clean-stack-2.2.0.tgz#ee8472dbb129e727b31e8a10a427dee9dfe4008b"
integrity sha512-4diC9HaTE+KRAMWhDhrGOECgWZxoevMc5TlkObMqNSsVU62PYzXZ/SMTjzyGAFF1YusgxGcSWTEXBhp0CPwQ1A==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update Test & linting packages
2020-02-03 16:44:38 +03:00
cli-cursor@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/cli-cursor/-/cli-cursor-3.1.0.tgz#264305a7ae490d1d03bf0c9ba7c925d1753af307"
integrity sha512-I/zHAwsKf9FqGoXM4WWRACob9+SNukZTd94DWF57E4toouRulbCxcUh6RKUEOQlYTHJnzkPMySvPNaaSLNfLZw==
dependencies:
restore-cursor "^3.1.0"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
cli-width@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/cli-width/-/cli-width-3.0.0.tgz#a2f48437a2caa9a22436e794bf071ec9e61cedf6"
integrity sha512-FxqpkPPwu1HjuN93Omfm4h8uIanXofW0RxVEW3k5RKx+mJJYSthzNhp32Kzxxy3YAEZ/Dc/EWN1vZRY0+kOhbw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency nconf to v0.11.0
2020-11-25 12:06:19 +03:00
cliui@^7.0.2:
version "7.0.4"
resolved "https://registry.yarnpkg.com/cliui/-/cliui-7.0.4.tgz#a0265ee655476fc807aea9df3df8df7783808b4f"
integrity sha512-OcRE68cOsVMXp1Yvonl/fzkQOyjLSu/8bhPDfQt0e0/Eb283TKP20Fs2MqoPsr9SwA595rRCA+QMzYc9nBP+JQ==
dependencies:
string-width "^4.2.0"
strip-ansi "^6.0.0"
wrap-ansi "^7.0.0"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
clone-response@^1.0.2:
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/clone-response/-/clone-response-1.0.2.tgz#d1dc973920314df67fbeb94223b4ee350239e96b"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
integrity sha1-0dyXOSAxTfZ/vrlCI7TuNQI56Ws=
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
mimic-response "^1.0.0"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
co@^4.6.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/co/-/co-4.6.0.tgz#6ea6bdf3d853ae54ccb8e47bfa0bf3f9031fb184"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-bqa989hTrlTMuOR7+gvz+QMfsYQ=
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
code-point-at@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/code-point-at/-/code-point-at-1.1.0.tgz#0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-DQcLTQQ6W+ozovGkDi7bPZpMz3c=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency coffeescript to v2.6.0
2021-09-20 05:47:58 +03:00
coffeescript@2.6.0:
version "2.6.0"
resolved "https://registry.yarnpkg.com/coffeescript/-/coffeescript-2.6.0.tgz#927d52aa03df17d445c93c1afb66b081d26e1fa0"
integrity sha512-gCGXhR72sTAdEr+oZh3FcOj04DrcMc9lZYSJUBNudkQ4tQXuPKE3cvcYVbK/HiVW+zFzLmnZdHexuJ33ufLZOg==
Added coffeescript to dev dependencies refs https://github.com/gruntjs/grunt/pull/1675 - Grunt 1.2.0 removed coffeescript as a dependency, opting to leave it to the users to install - we use `grunt-bg-shell`, which is built in coffeescript and therefore needs the dependency else `grunt dev` doesn't work - I don't like needing to add coffeescript but it'll do until we give the dev experience a good cleanup
2020-07-21 21:06:09 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
collapse-white-space@^1.0.2:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.0.6"
resolved "https://registry.yarnpkg.com/collapse-white-space/-/collapse-white-space-1.0.6.tgz#e63629c0016665792060dbbeb79c42239d2c5287"
integrity sha512-jEovNnrhMuqyCcjfEJA56v0Xq8SkIoPKDyaHahwo3POf4qcSXqMYuwNcOTzp74vTsR9Tn08z4MxWqAhcekogkQ==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
collection-visit@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/collection-visit/-/collection-visit-1.0.0.tgz#4bc0373c164bc3291b4d368c829cf1a80a59dca0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-S8A3PBZLwykbTTaMgpzxqApZ3KA=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
map-visit "^1.0.0"
object-visit "^1.0.0"
Lock file maintenance
2021-07-19 12:27:19 +03:00
color-convert@^1.9.0, color-convert@^1.9.3:
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
version "1.9.3"
resolved "https://registry.yarnpkg.com/color-convert/-/color-convert-1.9.3.tgz#bb71850690e1f136567de629d2d5471deda4c1e8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-QfAUtd+vFdAtFQcC8CCyYt1fYWxSqAiK2cSD6zDB8N3cpsEBAvRxp9zOGg6G/SHHJYAT88/az/IuDGALsNVbGg==
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
dependencies:
color-name "1.1.3"
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
color-convert@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/color-convert/-/color-convert-2.0.1.tgz#72d3a68d598c9bdb3af2ad1e84f21d896abd4de3"
integrity sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==
dependencies:
color-name "~1.1.4"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
color-name@1.1.3:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/color-name/-/color-name-1.1.3.tgz#a7d0558bd89c42f795dd42328f740831ca53bc25"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-p9BVi9icQveV3UIyj3QIMcpTvCU=
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
color-name@^1.0.0, color-name@~1.1.4:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.4"
resolved "https://registry.yarnpkg.com/color-name/-/color-name-1.1.4.tgz#c2a09a87acbde69543de6f63fa3995c826c536a2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
Lock file maintenance
2021-07-19 12:27:19 +03:00
color-string@^1.6.0:
version "1.6.0"
resolved "https://registry.yarnpkg.com/color-string/-/color-string-1.6.0.tgz#c3915f61fe267672cb7e1e064c9d692219f6c312"
integrity sha512-c/hGS+kRWJutUBEngKKmk4iH3sD59MBkoxVapS/0wgpCz2u7XsNloxknyvBhzwEs1IbV36D9PwqLPJ2DTu3vMA==
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
dependencies:
color-name "^1.0.0"
simple-swizzle "^0.2.2"
Update dependency @tryghost/image-transform to v1.0.14
2021-09-22 18:34:15 +03:00
color@^3.2.1:
Lock file maintenance
2021-07-19 12:27:19 +03:00
version "3.2.1"
resolved "https://registry.yarnpkg.com/color/-/color-3.2.1.tgz#3544dc198caf4490c3ecc9a790b54fe9ff45e164"
integrity sha512-aBl7dZI9ENN6fUGC7mWpMTPNHmWUSNan9tuWN6ahh5ZLNk9baLJOnSMlrQkHcrfFgz2/RigjUVAjdx36VcemKA==
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
dependencies:
Lock file maintenance
2021-07-19 12:27:19 +03:00
color-convert "^1.9.3"
color-string "^1.6.0"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
Update dependency @tryghost/image-transform to v1.0.14
2021-09-22 18:34:15 +03:00
color@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/color/-/color-4.0.1.tgz#21df44cd10245a91b1ccf5ba031609b0e10e7d67"
integrity sha512-rpZjOKN5O7naJxkH2Rx1sZzzBgaiWECc6BYXjeCE6kF0kcASJYbUq02u7JqIHwCb/j3NhV+QhRL2683aICeGZA==
dependencies:
color-convert "^2.0.1"
color-string "^1.6.0"
Update dependency cssnano to v5.0.8
2021-08-19 12:13:19 +03:00
colord@^2.0.1, colord@^2.6:
Lock file maintenance
2021-08-16 04:04:05 +03:00
version "2.7.0"
resolved "https://registry.yarnpkg.com/colord/-/colord-2.7.0.tgz#706ea36fe0cd651b585eb142fe64b6480185270e"
integrity sha512-pZJBqsHz+pYyw3zpX6ZRXWoCHM1/cvFikY9TV8G3zcejCaKE0lhankoj8iScyrrePA8C7yJ5FStfA9zbcOnw7Q==
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
Update dependency brute-knex to v4.0.1
2020-11-02 20:07:12 +03:00
colorette@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/colorette/-/colorette-1.1.0.tgz#1f943e5a357fac10b4e0f5aaef3b14cdc1af6ec7"
integrity sha512-6S062WDQUXi6hOfkO/sBPVwE5ASXY4G2+b4atvhJfSsuUUhIaUKlkjLe9692Ipyt5/a+IPF5aVTu3V5gvXq5cg==
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
colorette@1.2.1:
Update dependency knex to v0.21.2
2020-07-10 01:13:35 +03:00
version "1.2.1"
resolved "https://registry.yarnpkg.com/colorette/-/colorette-1.2.1.tgz#4d0b921325c14faf92633086a536db6e89564b1b"
integrity sha512-puCDz0CzydiSYOrnXpz/PKd69zRrribezjtE9yd4zvytoRc8+RY/KJPvtPFKZS3E3wP6neGyMe0vOTlHO5L3Pw==
Lock file maintenance
2021-09-20 03:12:18 +03:00
colorette@^1.2.2, colorette@^1.3.0, colorette@^1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/colorette/-/colorette-1.4.0.tgz#5190fbb87276259a86ad700bff2c6d6faa3fca40"
integrity sha512-Y2oEozpomLn7Q3HFP7dpww7AtMJplbM9lGZP6RDfHqmbeRjiwRg4n6VM6j4KLmRke85uWEI7JqF17f3pqdRA0g==
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
colors@^1.1.2:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "1.4.0"
resolved "https://registry.yarnpkg.com/colors/-/colors-1.4.0.tgz#c50491479d4c1bdaed2c9ced32cf7c7dc2360f78"
integrity sha512-a+UqTh4kgZg/SlGvfbzDHpgRu7AAQOmmqRHJnxhRZICKFUT91brVhNNt58CMWU9PsBbv3PDCZUHbVxuDiH2mtA==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
colors@~1.1.2:
version "1.1.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/colors/-/colors-1.1.2.tgz#168a4701756b6a7f51a12ce0c97bfa28c084ed63"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-FopHAXVran9RoSzgyXv6KMCE7WM=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
combine-errors@^3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/combine-errors/-/combine-errors-3.0.3.tgz#f4df6740083e5703a3181110c2b10551f003da86"
integrity sha1-9N9nQAg+VwOjGBEQwrEFUfAD2oY=
dependencies:
custom-error-instance "2.1.1"
lodash.uniqby "4.5.0"
Update dependency supertest to v5
2020-09-25 16:36:48 +03:00
combined-stream@^1.0.6, combined-stream@^1.0.8, combined-stream@~1.0.6:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.0.8"
resolved "https://registry.yarnpkg.com/combined-stream/-/combined-stream-1.0.8.tgz#c3d45a8b34fd730631a110a8a2520682b31d5a7f"
integrity sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
delayed-stream "~1.0.0"
Bumped Koenig-related packages refs https://github.com/TryGhost/Team/issues/910 - fixed missing `alt` attributes on images in bookmark cards - added `email-cta` card - dropped node 10 support
2021-07-20 14:20:36 +03:00
commander@5.1.0:
Update dependency knex to v0.21.1
2020-04-28 04:14:31 +03:00
version "5.1.0"
resolved "https://registry.yarnpkg.com/commander/-/commander-5.1.0.tgz#46abbd1652f8e059bddaef99bbdcb2ad9cf179ae"
integrity sha512-P0CysNDQ7rtVw4QIQtm+MRxV66vKFSvlsQvGYXZWR3qFU0jlMKHZZZgw8e+8DSah4UDKMqnknRDQz+xuQXQ/Zg==
Update dependency brute-knex to v4.0.1
2020-11-02 20:07:12 +03:00
commander@^2.19.0:
Update dependency knex-migrator to v3.4.7
2020-08-10 15:19:33 +03:00
version "2.20.3"
resolved "https://registry.yarnpkg.com/commander/-/commander-2.20.3.tgz#fd485e84c03eb4881c20722ba48035e8531aeb33"
integrity sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==
Update dependency brute-knex to v4.0.1
2020-11-02 20:07:12 +03:00
commander@^4.1.1:
version "4.1.1"
resolved "https://registry.yarnpkg.com/commander/-/commander-4.1.1.tgz#9fd602bd936294e9e9ef46a3f4d6964044b18068"
integrity sha512-NOKm8xhkzAjzFx8B2v5OAHT+u5pRQc2UCa2Vq9jYL/31o2wi9mxBA7LIFs3sV5VSC49z6pEhfbMULvShKj26WA==
Update dependency juice to v8
2021-05-26 11:23:00 +03:00
commander@^6.1.0, commander@^6.2.0:
Update dependency knex to v0.21.17
2021-02-10 01:28:13 +03:00
version "6.2.1"
resolved "https://registry.yarnpkg.com/commander/-/commander-6.2.1.tgz#0792eb682dfbc325999bb2b84fddddba110ac73c"
integrity sha512-U7VdrJFnJgo4xjrHpTzu0yrHPGImdsmD95ZlgYSEajAn2JKzDhDTPG9kBTefmObL2w/ngeZnilk+OV9CG3d7UA==
Lock file maintenance
2021-08-30 06:24:29 +03:00
commander@^7.2.0:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
version "7.2.0"
resolved "https://registry.yarnpkg.com/commander/-/commander-7.2.0.tgz#a36cb57d0b501ce108e4d20559a150a391d97ab7"
integrity sha512-QrWXB+ZQSVPmIWIhtEO9H+gwHaMGYiF5ChvoJ+K9ZGHG/sVsa6yiesAD1GC/x46sET00Xlwo1u49RVVVzvcSkw==
Update dependency gscan to v3.5.4
2020-05-01 13:15:50 +03:00
common-tags@1.8.0:
Bumped gscan version to 2.6.0 no issue - Updated valid theme fixture to be inline with warning that was added when using {{each}} helper instead of {{foreach}}
2019-05-08 17:56:22 +03:00
version "1.8.0"
resolved "https://registry.yarnpkg.com/common-tags/-/common-tags-1.8.0.tgz#8e3153e542d4a39e9b10554434afaaf98956a937"
integrity sha512-6P6g0uetGpW/sdyUy/iQQCbFF0kWVMSIVSyYz7Zgjcgh8mgw8PQzDNZeyZ5DQ2gM7LBoZPHmnjz8rUthkBG5tw==
Update dependency knex-migrator to v3.4.4
2020-04-14 18:21:50 +03:00
compare-ver@2.0.2:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "2.0.2"
resolved "https://registry.yarnpkg.com/compare-ver/-/compare-ver-2.0.2.tgz#8ecb8eb9dbf23ff2d87c56e74cbbb2cb7ffd9d7a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-jsuOudvyP/LYfFbnTLuyy3/9nXo=
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
Update dependency supertest to v5
2020-09-25 16:36:48 +03:00
component-emitter@^1.2.1, component-emitter@^1.3.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/component-emitter/-/component-emitter-1.3.0.tgz#16e4070fba8ae29b679f2215853ee181ab2eabc0"
integrity sha512-Rd3se6QB+sO1TwqZjscQrurpEPIfO0/yYnSin6Q/rD3mOutHvUrCAhJub3r90uNb+SESBuE0QYoB90YdfatsRg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
component-type@^1.2.1:
version "1.2.1"
resolved "https://registry.yarnpkg.com/component-type/-/component-type-1.2.1.tgz#8a47901700238e4fc32269771230226f24b415a9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ikeQFwAjjk/DIml3EjAibyS0Fak=
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
Update dependency @tryghost/zip to v1.1.0 closes #11794 - Update to use the latest version of zip, which has dotfile support
2020-05-08 18:46:15 +03:00
compress-commons@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/compress-commons/-/compress-commons-3.0.0.tgz#833944d84596e537224dd91cf92f5246823d4f1d"
integrity sha512-FyDqr8TKX5/X0qo+aVfaZ+PVmNJHJeckFBlq8jZGSJOgnynhfifoyl24qaqdUdDIBe0EVTHByN6NAkqYvE/2Xg==
dependencies:
buffer-crc32 "^0.2.13"
crc32-stream "^3.0.1"
normalize-path "^3.0.0"
readable-stream "^2.3.7"
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
compress-commons@^4.1.0:
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "4.1.1"
resolved "https://registry.yarnpkg.com/compress-commons/-/compress-commons-4.1.1.tgz#df2a09a7ed17447642bad10a85cc9a19e5c42a7d"
integrity sha512-QLdDLCKNV2dtoTorqgxngQCMA+gWXkM/Nwu7FpeBhk/RdkzimqC3jueb/FDmaZeXh+uby1jkBqE3xArsLBE5wQ==
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
dependencies:
buffer-crc32 "^0.2.13"
Lock file maintenance
2021-06-01 18:19:18 +03:00
crc32-stream "^4.0.2"
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
normalize-path "^3.0.0"
readable-stream "^3.6.0"
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
compressible@~2.0.16:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "2.0.18"
resolved "https://registry.yarnpkg.com/compressible/-/compressible-2.0.18.tgz#af53cca6b070d4c3c0750fbd77286a6d7cc46fba"
integrity sha512-AF3r7P5dWxL8MxyITRMlORQNaOA2IkAFaTr4k7BUumjPtRpGDTZpl0Pb1XCO6JeDCBdp126Cgs9sMxqSjgYyRg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
mime-db ">= 1.43.0 < 2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
compression@1.7.4:
version "1.7.4"
resolved "https://registry.yarnpkg.com/compression/-/compression-1.7.4.tgz#95523eff170ca57c29a0ca41e6fe131f41e5bb8f"
integrity sha512-jaSIDzP9pZVS4ZfQ+TzvtiWhdpFhE2RDHz8QJkpX9SIpLq88VueF5jJw6t+6CUQcAoA6t+x89MLrWAqpfDE8iQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
accepts "~1.3.5"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
bytes "3.0.0"
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
compressible "~2.0.16"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
debug "2.6.9"
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
on-headers "~1.0.2"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
safe-buffer "5.1.2"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
vary "~1.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
concat-map@0.0.1:
version "0.0.1"
resolved "https://registry.yarnpkg.com/concat-map/-/concat-map-0.0.1.tgz#d8a96bd77fd68df7793a73036a3ba0d5405d477b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-2Klr13/Wjfd5OnMDajug1UBdR3s=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
concat-stream@^1.5.2:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
version "1.6.2"
resolved "https://registry.yarnpkg.com/concat-stream/-/concat-stream-1.6.2.tgz#904bdf194cd3122fc675c77fc4ac3d4ff0fd1a34"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-27HBghJxjiZtIk3Ycvn/4kbJk/1uZuJFfuPEns6LaEvpvG1f0hTea8lilrouyo9mVc2GWdcEZ8OLoGmSADlrCw==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
buffer-from "^1.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
inherits "^2.0.3"
readable-stream "^2.2.2"
typedarray "^0.0.6"
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
concat-stream@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/concat-stream/-/concat-stream-2.0.0.tgz#414cf5af790a48c60ab9be4527d56d5e41133cb1"
integrity sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==
dependencies:
buffer-from "^1.0.0"
inherits "^2.0.3"
readable-stream "^3.0.2"
typedarray "^0.0.6"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
condense-whitespace@~2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/condense-whitespace/-/condense-whitespace-2.0.0.tgz#94e9644938f66aa7be4b8849f8f0b3cec97d6b3a"
integrity sha512-Ath9o58/0rxZXbyoy3zZgrVMoIemi30sukG/btuMKCLyqfQt3dNOWc9N3EHEMa2Q3i0tXQPDJluYFLwy7pJuQw==
Update dependency gscan to v3.4.1
2020-04-06 20:10:36 +03:00
config-chain@^1.1.12:
Lock file maintenance
2021-07-05 04:25:22 +03:00
version "1.1.13"
resolved "https://registry.yarnpkg.com/config-chain/-/config-chain-1.1.13.tgz#fad0795aa6a6cdaff9ed1b68e9dff94372c232f4"
integrity sha512-qj+f8APARXHrM0hraqXYb2/bOVSV4PvJQlNZ/DVj0QrmNM2q2euizkeuVckQ57J+W0mRH6Hvi+k50M4Jul2VRQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
ini "^1.3.4"
proto-list "~1.2.1"
Update dependency connect-slashes to v1.4.0
2019-07-02 13:03:51 +03:00
connect-slashes@1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/connect-slashes/-/connect-slashes-1.4.0.tgz#fe884e9d130e9bd0a40d8ee502c1dfa269f94373"
integrity sha512-BJRbgSczzlsRwyF64DxGNIizBTxUf7f/tAsDzq2Nq8eLrm2160vVfm/4vQcjrT4qVFu6qDCqPK+vDaEWJsnSzA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
console-control-strings@^1.0.0, console-control-strings@~1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/console-control-strings/-/console-control-strings-1.1.0.tgz#3d7cf4464db6446ea644bf4b39507f9851008e8e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-PXz0Rk22RG6mRL9LOVB/mFEAjo4=
Update express to version 4.14.1 🚀 (#7912) * chore(package): update express to version 4.14.1 https://greenkeeper.io/ * chore: yarn.lock
2017-02-08 18:33:15 +03:00
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
content-disposition@0.5.3:
version "0.5.3"
resolved "https://registry.yarnpkg.com/content-disposition/-/content-disposition-0.5.3.tgz#e130caf7e7279087c5616c2007d0485698984fbd"
integrity sha512-ExO0774ikEObIAEV9kDo50o+79VCUdEB6n6lzKgGwupcVeRlhrj3qGAfwq8G6uBJjkqLrhT0qEYFcWng8z1z0g==
dependencies:
safe-buffer "5.1.2"
Remove unused dev dependency should-http
2020-04-01 15:30:38 +03:00
content-type@~1.0.4:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/content-type/-/content-type-1.0.4.tgz#e138cc75e040c727b1966fe5e5f8c9aee256fe3b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-hIP3EEPs8tB9AT1L+NUqtwOAps4mk2Zob89MWXMHjHWg9milF/j4osnnQLXBCBFBk/tvIG/tUc9mOUJiPBhPXA==
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
continuable-cache@^0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/continuable-cache/-/continuable-cache-0.3.1.tgz#bd727a7faed77e71ff3985ac93351a912733ad0f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-vXJ6f67XfnH/OYWskzUakSczrQ8=
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
convert-source-map@^1.6.0, convert-source-map@^1.7.0:
Lock file maintenance
2021-07-05 04:25:22 +03:00
version "1.8.0"
resolved "https://registry.yarnpkg.com/convert-source-map/-/convert-source-map-1.8.0.tgz#f3373c32d21b4d780dd8004514684fb791ca4369"
integrity sha512-+OQdjP49zViI/6i7nIJpA8rAl4sV/JdPfU9nZs3VqOwGIgizICvuN2ru6fMd+4llL0tar18UYJXfZ/TWtmhUjA==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
dependencies:
safe-buffer "~5.1.1"
Update dependency cookie-session to v1.4.0 (#11510) Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-01-17 09:10:48 +03:00
cookie-session@1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/cookie-session/-/cookie-session-1.4.0.tgz#c325aea685ceb9c8e4fd00b0313a46d547747380"
integrity sha512-0hhwD+BUIwMXQraiZP/J7VP2YFzqo6g4WqZlWHtEHQ22t0MeZZrNBSCxC1zcaLAs8ApT3BzAKizx9gW/AP9vNA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency cookie-session to v1.4.0 (#11510) Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-01-17 09:10:48 +03:00
cookies "0.8.0"
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
debug "2.6.9"
Update dependency cookie-session to v1.3.3
2019-07-02 03:36:27 +03:00
on-headers "~1.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
cookie-signature@1.0.6:
version "1.0.6"
resolved "https://registry.yarnpkg.com/cookie-signature/-/cookie-signature-1.0.6.tgz#e303a882b342cc3ee8ca513a79999734dab3ae2c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-4wOogrNCzD7oylE6eZmXNNqzriw=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
cookie@0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/cookie/-/cookie-0.4.0.tgz#beb437e7022b3b6d49019d088665303ebe9c14ba"
integrity sha512-+Hp8fLp57wnUSt0tY0tHEXh4voZRDnoIrZPqlo3DPiI4y9lwg/jqx+1Om94/W6ZaPDOUbnjOt/99w66zk+l1Xg==
Update dependency express-session to v1.17.2
2021-05-19 23:47:30 +03:00
cookie@0.4.1, cookie@^0.4.1:
Update dependency @sentry/node to v5.20.0
2020-07-21 18:54:08 +03:00
version "0.4.1"
resolved "https://registry.yarnpkg.com/cookie/-/cookie-0.4.1.tgz#afd713fe26ebd21ba95ceb61f9a8116e50a537d1"
integrity sha512-ZwrFkGJxUR3EIoXtO+yVE69Eb7KlixbaeAWfBQB9vVsNn/o+Yw69gBWSSDK825hQNdN+wF8zELf3dFNl/kxkUA==
Update dependency supertest to v5
2020-09-25 16:36:48 +03:00
cookiejar@^2.1.2:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/cookiejar/-/cookiejar-2.1.2.tgz#dd8a235530752f988f9a0844f3fc589e3111125c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Mw+adcfzPxcPeI+0WlvRrr/3lGVO0bD75SxX6811cxSh1Wbxx7xZBGK1eVtDf6si8rg2lhnUjsVLMFMfbRIuwA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency cookie-session to v1.4.0 (#11510) Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-01-17 09:10:48 +03:00
cookies@0.8.0, cookies@^0.8.0:
Installed @tryghost/members-api@0.8.3 no-issue This improves logging for webhook signature validation
2019-10-30 13:24:04 +03:00
version "0.8.0"
resolved "https://registry.yarnpkg.com/cookies/-/cookies-0.8.0.tgz#1293ce4b391740a8406e3c9870e828c4b54f3f90"
integrity sha512-8aPsApQfebXnuI+537McwYsDtjVxGm8gTIzQI3FDW6t5t/DAhERxtnbEPN/8RX+uZthoz4eCOgloXaE5cYyNow==
dependencies:
depd "~2.0.0"
keygrip "~1.1.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
copy-descriptor@^0.1.0:
version "0.1.1"
resolved "https://registry.yarnpkg.com/copy-descriptor/-/copy-descriptor-0.1.1.tgz#676f6eb3c39997c2ee1ac3a924fd6124748f578d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Z29us8OZl8LuGsOpJP1hJHSPV40=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2021-09-06 03:36:57 +03:00
core-util-is@1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/core-util-is/-/core-util-is-1.0.2.tgz#b5fd54220aa2bc5ab57aab7140c940754503c1a7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-tf1UIgqivFq1eqtxQMlAdUUDwac=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2021-09-06 03:36:57 +03:00
core-util-is@~1.0.0:
version "1.0.3"
resolved "https://registry.yarnpkg.com/core-util-is/-/core-util-is-1.0.3.tgz#a6042d3634c2b27e9328f837b965fac83808db85"
integrity sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
cors@2.8.5:
version "2.8.5"
resolved "https://registry.yarnpkg.com/cors/-/cors-2.8.5.tgz#eac11da51592dd86b9f06f6e7ac293b3df875d29"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-KIHbLJqu73RGr/hnbrO9uBeixNGuvSQjul/jdFvS/KFSIH1hWVd1ng7zOHx+YrEfInLG7q4n6GHQ9cDtxv/P6g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update cors to version 2.8.3 🚀 (#8240) * chore(package): update cors to version 2.8.3 https://greenkeeper.io/ * chore: yarn.lock
2017-04-04 10:45:42 +03:00
object-assign "^4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
vary "^1"
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
crc-32@^1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/crc-32/-/crc-32-1.2.0.tgz#cb2db6e29b88508e32d9dd0ec1693e7b41a18208"
integrity sha512-1uBwHxF+Y/4yF5G48fwnKq6QsIXheor3ZLPT80yGBV1oEUwpPojlEhQbWKVw1VwcTQyMGHK1/XMmTjmlsmTTGA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
exit-on-epipe "~1.0.1"
printj "~1.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency archiver to v3.1.1 (#10981)
2019-08-06 11:16:08 +03:00
crc32-stream@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/crc32-stream/-/crc32-stream-3.0.1.tgz#cae6eeed003b0e44d739d279de5ae63b171b4e85"
integrity sha512-mctvpXlbzsvK+6z8kJwSJ5crm7yBwrQMTybJzMw1O4lLGJqjlDCXY2Zw7KheiA6XBEcBmfLx1D88mjRGVJtY9w==
dependencies:
crc "^3.4.4"
readable-stream "^3.4.0"
Lock file maintenance
2021-06-01 18:19:18 +03:00
crc32-stream@^4.0.2:
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
version "4.0.2"
resolved "https://registry.yarnpkg.com/crc32-stream/-/crc32-stream-4.0.2.tgz#c922ad22b38395abe9d3870f02fa8134ed709007"
integrity sha512-DxFZ/Hk473b/muq1VJ///PMNLj0ZMnzye9thBpmjpJKCc5eMgB95aK8zCGrGfQ90cWo561Te6HK9D+j4KPdM6w==
dependencies:
crc-32 "^1.2.0"
readable-stream "^3.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
crc@^3.4.4:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.8.0"
resolved "https://registry.yarnpkg.com/crc/-/crc-3.8.0.tgz#ad60269c2c856f8c299e2c4cc0de4556914056c6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-iX3mfgcTMIq3ZKLIsVFAbv7+Mc10kxabAGQb8HvjA1o3T1PIYprbakQ65d3I+2HGHt6nSKkM9PYjgoJO2KcFBQ==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dependencies:
buffer "^5.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
create-error@~0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/create-error/-/create-error-0.3.1.tgz#69810245a629e654432bf04377360003a5351a23"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-aYECRaYp5lRDK/BDdzYAA6U1GiM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
cron-validate@^1.4.1, cron-validate@^1.4.3:
Bumped selected dependencies to unpin sub-dependencies no issue - we've been unpinning dependencies in our libraries to remove duplicates - this commit bumps packages from the Utils repo and NQL, all of which contain changes to unpin their own dependencies
2021-04-19 12:46:47 +03:00
version "1.4.3"
resolved "https://registry.yarnpkg.com/cron-validate/-/cron-validate-1.4.3.tgz#d4ad8fb5b559a7df73b81e79c95c21b87bb4c5f4"
integrity sha512-N+qKw019oQBEPIP5Qwi8Z5XelQ00ThN6Maahwv+9UGu2u/b/MPb35zngMQI0T8pBoNiBrIXGlhvsmspNSYae/w==
dependencies:
yup "0.32.9"
Update dependency oembed-parser to v1.4.8
2021-09-03 06:32:36 +03:00
cross-fetch@^3.1.4:
version "3.1.4"
resolved "https://registry.yarnpkg.com/cross-fetch/-/cross-fetch-3.1.4.tgz#9723f3a3a247bf8b89039f3a380a9244e8fa2f39"
integrity sha512-1eAtFWdIubi6T4XPy6ei9iUFoKpUkIF971QLN8lIvvvwueI65+Nw5haMNKUwfJxabqlIIDODJKGrQ66gxC0PbQ==
dependencies:
node-fetch "2.6.1"
Removed unused release-utils dependency no issue - this is no longer needed because we moved the main release code out
2020-04-03 16:25:28 +03:00
cross-spawn@^6.0.5:
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
version "6.0.5"
resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-6.0.5.tgz#4a5ec7c64dfae22c3a14124dbacdee846d80cbc4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-eTVLrBSt7fjbDygz805pMnstIs2VTBNkRm0qxZd+M7A5XDdxVRWO5MxGBXZhjY4cqLYLdtrGqRf8mBPmzwSpWQ==
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
dependencies:
nice-try "^1.0.4"
path-key "^2.0.1"
semver "^5.5.0"
shebang-command "^1.2.0"
which "^1.2.9"
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
cross-spawn@^7.0.0, cross-spawn@^7.0.2:
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
version "7.0.3"
resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-7.0.3.tgz#f73a85b9d5d41d045551c177e2882d4ac85728a6"
integrity sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==
dependencies:
path-key "^3.1.0"
shebang-command "^2.0.0"
which "^2.0.1"
Lock file maintenance
2021-05-05 18:56:03 +03:00
crypt@0.0.2:
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
version "0.0.2"
resolved "https://registry.yarnpkg.com/crypt/-/crypt-0.0.2.tgz#88d7ff7ec0dfb86f713dc87bbb42d044d3e6c41b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-iNf/fsDfuG9xPch7u0LQRNPmxBs=
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
css-color-names@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/css-color-names/-/css-color-names-1.0.1.tgz#6ff7ee81a823ad46e020fa2fd6ab40a887e2ba67"
integrity sha512-/loXYOch1qU1biStIFsHH8SxTmOseh1IJqFvy8IujXOm1h+QjUdDhkzOrR5HG8K8mlxREj0yfi8ewCHx0eMxzA==
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
css-declaration-sorter@^6.0.3:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "6.1.3"
resolved "https://registry.yarnpkg.com/css-declaration-sorter/-/css-declaration-sorter-6.1.3.tgz#e9852e4cf940ba79f509d9425b137d1f94438dc2"
integrity sha512-SvjQjNRZgh4ULK1LDJ2AduPKUKxIqmtU7ZAyi47BTV+M90Qvxr9AB6lKlLbDUfXqI9IQeYA8LbAsCZPpJEV3aA==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
dependencies:
timsort "^0.3.0"
Update metascraper to v5.22.1
2021-06-09 18:53:54 +03:00
css-select@^4.1.3:
version "4.1.3"
resolved "https://registry.yarnpkg.com/css-select/-/css-select-4.1.3.tgz#a70440f70317f2669118ad74ff105e65849c7067"
integrity sha512-gT3wBNd9Nj49rAbmtFHj1cljIAOLYSX1nZ8CB7TBO3INYckygm5B7LISU/szY//YmdiSLbJvDLOx9VnMVpMBxA==
dependencies:
boolbase "^1.0.0"
css-what "^5.0.0"
domhandler "^4.2.0"
domutils "^2.6.0"
nth-check "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
css-select@~1.2.0:
version "1.2.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/css-select/-/css-select-1.2.0.tgz#2b3a110539c5355f1cd8d314623e870b121ec858"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-KzoRBTnFNV8c2NMUYj6HCxIeyFg=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
boolbase "~1.0.0"
css-what "2.1"
domutils "1.5.1"
nth-check "~1.0.1"
Lock file maintenance
2021-08-30 06:24:29 +03:00
css-tree@^1.0.0-alpha.39, css-tree@^1.1.2, css-tree@^1.1.3:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/css-tree/-/css-tree-1.1.3.tgz#eb4870fb6fd7707327ec95c2ff2ab09b5e8db91d"
integrity sha512-tRpdppF7TRazZrjJ6v3stzv93qxRcSsFmW6cX0Zm2NVKpxE1WV1HblnghVv9TreireHkqI/VDEsfolRF1p6y7Q==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
mdn-data "2.0.14"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
source-map "^0.6.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
css-what@2.1:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "2.1.3"
resolved "https://registry.yarnpkg.com/css-what/-/css-what-2.1.3.tgz#a6d7604573365fe74686c3f311c56513d88285f2"
integrity sha512-a+EPoD+uZiNfh+5fxw2nO9QwFa6nJe2Or35fGY6Ipw1R3R4AGz1d1TEZrCegvw2YTmZ0jXirGYlzxxpYSHwpEg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update metascraper to v5.22.1
2021-06-09 18:53:54 +03:00
css-what@^5.0.0, css-what@^5.0.1:
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "5.0.1"
resolved "https://registry.yarnpkg.com/css-what/-/css-what-5.0.1.tgz#3efa820131f4669a8ac2408f9c32e7c7de9f4cad"
integrity sha512-FYDTSHb/7KXsWICVsxdmiExPjCfRC4qRFBdVwv7Ax9hMnvMmEjP9RfxTEZ3qPZGmADDn2vAKSo9UcN1jKVYscg==
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
cssesc@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/cssesc/-/cssesc-3.0.0.tgz#37741919903b868565e1c09ea747445cd18983ee"
integrity sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==
Update dependency cssnano to v5.0.8
2021-08-19 12:13:19 +03:00
cssnano-preset-default@^5.1.4:
version "5.1.4"
resolved "https://registry.yarnpkg.com/cssnano-preset-default/-/cssnano-preset-default-5.1.4.tgz#359943bf00c5c8e05489f12dd25f3006f2c1cbd2"
integrity sha512-sPpQNDQBI3R/QsYxQvfB4mXeEcWuw0wGtKtmS5eg8wudyStYMgKOQT39G07EbW1LB56AOYrinRS9f0ig4Y3MhQ==
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
dependencies:
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
css-declaration-sorter "^6.0.3"
cssnano-utils "^2.0.1"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-calc "^8.0.0"
Update dependency cssnano to v5.0.5
2021-05-28 23:59:08 +03:00
postcss-colormin "^5.2.0"
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-convert-values "^5.0.1"
postcss-discard-comments "^5.0.1"
postcss-discard-duplicates "^5.0.1"
postcss-discard-empty "^5.0.1"
postcss-discard-overridden "^5.0.1"
postcss-merge-longhand "^5.0.2"
Update dependency cssnano to v5.0.5
2021-05-28 23:59:08 +03:00
postcss-merge-rules "^5.0.2"
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-minify-font-values "^5.0.1"
Update dependency cssnano to v5.0.8
2021-08-19 12:13:19 +03:00
postcss-minify-gradients "^5.0.2"
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-minify-params "^5.0.1"
postcss-minify-selectors "^5.1.0"
postcss-normalize-charset "^5.0.1"
postcss-normalize-display-values "^5.0.1"
postcss-normalize-positions "^5.0.1"
postcss-normalize-repeat-style "^5.0.1"
postcss-normalize-string "^5.0.1"
postcss-normalize-timing-functions "^5.0.1"
postcss-normalize-unicode "^5.0.1"
Update CSS preprocessors
2021-06-11 14:34:17 +03:00
postcss-normalize-url "^5.0.2"
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-normalize-whitespace "^5.0.1"
Update CSS preprocessors
2021-06-11 14:34:17 +03:00
postcss-ordered-values "^5.0.2"
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-reduce-initial "^5.0.1"
postcss-reduce-transforms "^5.0.1"
Update dependency cssnano to v5.0.5
2021-05-28 23:59:08 +03:00
postcss-svgo "^5.0.2"
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-unique-selectors "^5.0.1"
cssnano-utils@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/cssnano-utils/-/cssnano-utils-2.0.1.tgz#8660aa2b37ed869d2e2f22918196a9a8b6498ce2"
integrity sha512-i8vLRZTnEH9ubIyfdZCAdIdgnHAUeQeByEeQ2I7oTilvP9oHO6RScpeq3GsFUVqeB8uZgOQ9pw8utofNn32hhQ==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
Update dependency cssnano to v5.0.8
2021-08-19 12:13:19 +03:00
cssnano@5.0.8:
version "5.0.8"
resolved "https://registry.yarnpkg.com/cssnano/-/cssnano-5.0.8.tgz#39ad166256980fcc64faa08c9bb18bb5789ecfa9"
integrity sha512-Lda7geZU0Yu+RZi2SGpjYuQz4HI4/1Y+BhdD0jL7NXAQ5larCzVn+PUGuZbDMYz904AXXCOgO5L1teSvgu7aFg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5.0.8
2021-08-19 12:13:19 +03:00
cssnano-preset-default "^5.1.4"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
is-resolvable "^1.1.0"
Update CSS preprocessors
2021-07-21 19:35:14 +03:00
lilconfig "^2.0.3"
yaml "^1.10.2"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
csso@^4.2.0:
version "4.2.0"
resolved "https://registry.yarnpkg.com/csso/-/csso-4.2.0.tgz#ea3a561346e8dc9f546d6febedd50187cf389529"
integrity sha512-wvlcdIbf6pwKEk7vHj8/Bkc0B4ylXZruLvOgs9doS5eOsOpuodOV2zJChSpkp+pRpYQLQMeF04nr3Z68Sta9jA==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
css-tree "^1.1.2"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
cssom@^0.4.4:
version "0.4.4"
resolved "https://registry.yarnpkg.com/cssom/-/cssom-0.4.4.tgz#5a66cf93d2d0b661d80bf6a44fb65f5c2e4e0a10"
integrity sha512-p3pvU7r1MyyqbTk+WbNJIgJjG2VmTIaB10rI93LzVPrmDJKkzKYMtxxyAvQXR/NS6otuzveI7+7BBq3SjBS2mw==
Update metascraper to v5.24.2
2021-08-16 14:12:26 +03:00
cssom@^0.5.0:
version "0.5.0"
resolved "https://registry.yarnpkg.com/cssom/-/cssom-0.5.0.tgz#d254fa92cd8b6fbd83811b9fbaed34663cc17c36"
integrity sha512-iKuQcq+NdHqlAcwUY0o/HL69XQrUaQdMjmStJ8JFmUaiiQErlhrmuigkg/CU4E2J0IyUKUrMAgl36TvN67MqTw==
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
cssom@~0.3.6:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "0.3.8"
resolved "https://registry.yarnpkg.com/cssom/-/cssom-0.3.8.tgz#9f1276f5b2b463f2114d3f2c75250af8c1a36f4a"
integrity sha512-b0tGHbfegbhPJpxpiBPU2sCkigAqtM9O121le6bbOlgyV+NyGyCmVfJ6QW9eRjz8CpNfWEOYBIMIGRYkLwsIYg==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.7.12
2021-03-10 22:11:13 +03:00
cssstyle@^2.3.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "2.3.0"
resolved "https://registry.yarnpkg.com/cssstyle/-/cssstyle-2.3.0.tgz#ff665a0ddbdc31864b09647f34163443d90b0852"
integrity sha512-AZL67abkUzIuvcHqk7c09cezpGNcxUxU4Ioi/05xHk4DQeTkWmGYftIE6ctU6AEt+Gn4n1lDStOtj7FKycP71A==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
cssom "~0.3.6"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
custom-error-instance@2.1.1:
version "2.1.1"
resolved "https://registry.yarnpkg.com/custom-error-instance/-/custom-error-instance-2.1.1.tgz#3cf6391487a6629a6247eb0ca0ce00081b7e361a"
integrity sha1-PPY5FIemYppiR+sMoM4ACBt+Nho=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dashdash@^1.12.0:
version "1.14.1"
resolved "https://registry.yarnpkg.com/dashdash/-/dashdash-1.14.1.tgz#853cfa0f7cbe2fed5de20326b8dd581035f6e2f0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-hTz6D3y+L+1d4gMmuN1YEDX24vA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
assert-plus "^1.0.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
data-uri-to-buffer@1:
version "1.2.0"
resolved "https://registry.yarnpkg.com/data-uri-to-buffer/-/data-uri-to-buffer-1.2.0.tgz#77163ea9c20d8641b4707e8f18abdf9a78f34835"
integrity sha512-vKQ9DTQPN1FLYiiEEOQ6IBGFqvjCa5rSK3cWMy/Nespm5d/x3dGFT9UBZnkLxCwua/IXBi2TYnwTEpsOvhC4UQ==
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
data-urls@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/data-urls/-/data-urls-2.0.0.tgz#156485a72963a970f5d5821aaf642bef2bf2db9b"
integrity sha512-X5eWTSXO/BJmpdIKCRuKUgSCgAN0OwliVK3yPKbwIWU1Tdw5BRajxlzMidvh+gwko9AfQ9zIj52pzF91Q3YAvQ==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
abab "^2.0.3"
whatwg-mimetype "^2.3.0"
whatwg-url "^8.0.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update metascraper to v5.24.2
2021-08-16 14:12:26 +03:00
data-urls@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/data-urls/-/data-urls-3.0.0.tgz#3ff551c986d7c6234a0ac4bbf20a269e1cd6b378"
integrity sha512-4AefxbTTdFtxDUdh0BuMBs2qJVL25Mow2zlcuuePegQwgD6GEmQao42LLEeksOui8nL4RcNEugIpFP7eRd33xg==
dependencies:
abab "^2.0.3"
whatwg-mimetype "^2.3.0"
whatwg-url "^9.0.0"
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
dateformat@~3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/dateformat/-/dateformat-3.0.3.tgz#a6e37499a4d9a9cf85ef5872044d62901c9889ae"
integrity sha512-jyCETtSl3VMZMWeRo7iY1FL19ges1t55hMo5yaam4Jrsm5EPL89UQkoQRyiI+Yf4k8r2ZpdngkV8hr1lIdjb3Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
dayjs@^1.10.0:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "1.10.7"
resolved "https://registry.yarnpkg.com/dayjs/-/dayjs-1.10.7.tgz#2cf5f91add28116748440866a0a1d26f3a6ce468"
integrity sha512-P6twpd70BcPK34K26uJ1KT3wlhpuOAPoMwJzpsIWUxHZ7wpmbdZL/hQqBDfz7hGurYSa5PhzdhDHtt319hL3ig==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
Bumped selected dependencies to unpin sub-dependencies no issue - we've been unpinning dependencies in our libraries to remove duplicates - this commit bumps packages from the Utils repo and NQL, all of which contain changes to unpin their own dependencies
2021-04-19 12:46:47 +03:00
debug@2, debug@2.6.9, debug@^2.2.0, debug@^2.3.3:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
version "2.6.9"
resolved "https://registry.yarnpkg.com/debug/-/debug-2.6.9.tgz#5d128515df134ff327e90a4c93f4e077a536341f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
dependencies:
ms "2.0.0"
Update dependency analytics-node to v3.5.0
2021-01-08 16:11:34 +03:00
debug@3.1.0:
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/debug/-/debug-3.1.0.tgz#5bb5a0672628b64149566ba16819e61518c67261"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-OX8XqP7/1a9cqkxYw2yXss15f26NKWBpDXQd0/uK/KPqdQhxbPa994hnzjcE2VqQpDslf55723cKPUOGSmMY3g==
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
dependencies:
ms "2.0.0"
Update dependency mocha to v9.1.2
2021-09-27 06:11:58 +03:00
debug@4, debug@4.3.2, debug@^4.0.1, debug@^4.1.0, debug@^4.1.1, debug@^4.3.1, debug@^4.3.2:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "4.3.2"
resolved "https://registry.yarnpkg.com/debug/-/debug-4.3.2.tgz#f0a49c18ac8779e31d4a0c6029dfb76873c7428b"
integrity sha512-mOp8wKcvj7XxC78zLgw/ZA+6TSgkoE2C/ienthhRD298T7UNwAg9diBpLRxC0mOezLl4B0xV7M0cCO6P/O0Xhw==
dependencies:
ms "2.1.2"
debug@4.1.1:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "4.1.1"
resolved "https://registry.yarnpkg.com/debug/-/debug-4.1.1.tgz#3b72260255109c6b589cee050f1d516139664791"
integrity sha512-pYAIzeRo8J6KPEaJ0VWOh5Pzkbw/RetuzehGM7QRRX5he4fPHx2rdKMB256ehJCkX+XRQm16eZLqLNS8RSZXZw==
dependencies:
ms "^2.1.1"
Lock file maintenance
2021-09-20 03:12:18 +03:00
debug@4.3.1:
Lock file maintenance
2021-07-05 04:25:22 +03:00
version "4.3.1"
resolved "https://registry.yarnpkg.com/debug/-/debug-4.3.1.tgz#f0d229c505e0c6d8c49ac553d1b13dc183f6b2ee"
integrity sha512-doEwdvm4PCeK4K3RQN2ZC2BYUBaxwLARCqZmMjtF8a51J2Rb0xpVloFRnCODwqjpwnAoao4pelN8l3RJdv3gRQ==
dependencies:
ms "2.1.2"
Update dependency grunt-mocha-cli to v7
2020-12-03 01:43:54 +03:00
debug@^3.1.0, debug@^3.2.6:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "3.2.7"
resolved "https://registry.yarnpkg.com/debug/-/debug-3.2.7.tgz#72580b7e9145fb39b6676f9c5e5fb100b934179a"
integrity sha512-CFjzYYAi4ThfiQvizrFQevTTXHtnCqWfe7x1AhgEscTz6ZbLbfoLRLPugTQyBth6f8ZERVUSyWHFD/7Wu4t1XQ==
Update dependency grunt-mocha-cli to v7
2020-12-03 01:43:54 +03:00
dependencies:
ms "^2.1.1"
Update dependency mocha to v8.2.0
2020-10-17 00:23:19 +03:00
decamelize@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/decamelize/-/decamelize-4.0.0.tgz#aa472d7bf660eb15f3494efd531cab7f2a709837"
integrity sha512-9iE1PgSik9HeIIw2JO94IidnE3eBoQrFJ3w7sFuzSX4DpmZ3v5sZpUiV5Swcf6mQEF+Y0ru8Neo+p+nyh2J+hQ==
Update metascraper to v5.24.2
2021-08-16 14:12:26 +03:00
decimal.js@^10.2.1, decimal.js@^10.3.1:
Lock file maintenance
2021-07-05 04:25:22 +03:00
version "10.3.1"
resolved "https://registry.yarnpkg.com/decimal.js/-/decimal.js-10.3.1.tgz#d8c3a444a9c6774ba60ca6ad7261c3a94fd5e783"
integrity sha512-V0pfhfr8suzyPGOx3nmq4aHqabehUZn6Ch9kyFpV79TGDTWFmHqUqXdabR7QHqxzrYolF4+tVmJhUG4OURg5dQ==
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
decode-uri-component@^0.2.0:
version "0.2.0"
resolved "https://registry.yarnpkg.com/decode-uri-component/-/decode-uri-component-0.2.0.tgz#eb3913333458775cb84cd1a1fae062106bb87545"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-6zkTMzRYd1y4TNGh+uBiEGu4dUU=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
🐛 Fixed server crash when AMP posts contain images with unescaped chars (#10775) no issue - bump `amperize` to v0.4.0 which contains an updated version of `got` which does not crash on invalid image urls
2019-06-05 19:31:23 +03:00
decompress-response@^3.3.0:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
version "3.3.0"
resolved "https://registry.yarnpkg.com/decompress-response/-/decompress-response-3.3.0.tgz#80a4dd323748384bfa248083622aedec982adff3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-gKTdMjdIOEv6JICDYirt7Jgq3/M=
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
dependencies:
mimic-response "^1.0.0"
Update dependency sharp to v0.23.1
2019-09-30 03:35:55 +03:00
decompress-response@^4.2.0:
version "4.2.1"
resolved "https://registry.yarnpkg.com/decompress-response/-/decompress-response-4.2.1.tgz#414023cc7a302da25ce2ec82d0d5238ccafd8986"
integrity sha512-jOSne2qbyE+/r8G1VU+G/82LBs2Fs4LAsTiLSHOCOMZQl2OKZ6i8i4IyHemTe+/yIXOtTcRQMzPcgyhoFlqPkw==
dependencies:
mimic-response "^2.0.0"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
decompress-response@^6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/decompress-response/-/decompress-response-6.0.0.tgz#ca387612ddb7e104bd16d85aab00d5ecf09c66fc"
integrity sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
dependencies:
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
mimic-response "^3.1.0"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
deep-extend@^0.6.0:
version "0.6.0"
resolved "https://registry.yarnpkg.com/deep-extend/-/deep-extend-0.6.0.tgz#c4fa7c95404a17a9c3e8ca7e1537312b736330ac"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
deep-is@^0.1.3, deep-is@~0.1.3:
Lock file maintenance
2021-09-06 03:36:57 +03:00
version "0.1.4"
resolved "https://registry.yarnpkg.com/deep-is/-/deep-is-0.1.4.tgz#a6f2dce612fadd2ef1f519b73551f17e85199831"
integrity sha512-oIPzksmTg4/MriiaYGO+okXDT7ztn/w3Eptv/+gSIdMdKsJo0u4CfYNFJPy+4SKMuCqGw2wxnA+URMg3t8a/bQ==
🐛 Fixed server crash when AMP posts contain images with unescaped chars (#10775) no issue - bump `amperize` to v0.4.0 which contains an updated version of `got` which does not crash on invalid image urls
2019-06-05 19:31:23 +03:00
Update dependency sanitize-html to v2
2020-10-21 13:34:09 +03:00
deepmerge@^4.0.0, deepmerge@^4.2.2:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "4.2.2"
resolved "https://registry.yarnpkg.com/deepmerge/-/deepmerge-4.2.2.tgz#44d2ea3679b8f4d4ffba33f03d865fc1e7bf4955"
integrity sha512-FJ3UgI4gIl+PHZm53knsuSFpE+nESMr7M4v9QcgB7S63Kj/6WqMiFQJpBBYz1Pt+66bZpP3Q7Lye0Oo9MPKEdg==
Update dependency probe-image-size to v4.1.1
2019-07-15 09:18:10 +03:00
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
defer-to-connect@^1.0.1:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/defer-to-connect/-/defer-to-connect-1.1.3.tgz#331ae050c08dcf789f8c83a7b81f0ed94f4ac591"
integrity sha512-0ISdNousHvZT2EiFlZeZAHBUvSxmKswVCEf8hW7KWgG4a8MVEu/3Vb6uWYozkjylyCxe0JBIiRB1jV45S70WVQ==
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
defer-to-connect@^2.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "2.0.1"
resolved "https://registry.yarnpkg.com/defer-to-connect/-/defer-to-connect-2.0.1.tgz#8016bdb4143e4632b77a3449c6236277de520587"
integrity sha512-4tvttepXG1VaYGrRibk5EwJd1t4udunSOVMdLSAL6mId1ix438oPwPZMALY41FCijukO1L0twNcGsdzS7dHgDg==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
define-property@^0.2.5:
version "0.2.5"
resolved "https://registry.yarnpkg.com/define-property/-/define-property-0.2.5.tgz#c35b1ef918ec3c990f9a5bc57be04aacec5c8116"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-w1se+RjsPJkPmlvFe+BKrOxcgRY=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
is-descriptor "^0.1.0"
define-property@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/define-property/-/define-property-1.0.0.tgz#769ebaaf3f4a63aad3af9e8d304c9bbe79bfb0e6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-dp66rz9KY6rTr56NMEybvnm/sOY=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
is-descriptor "^1.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
define-property@^2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/define-property/-/define-property-2.0.2.tgz#d459689e8d654ba77e02a817f8710d702cb16e9d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-jwK2UV4cnPpbcG7+VRARKTZPUWowwXA8bzH5NP6ud0oeAxyYPuGZUAC7hMugpCdz4BeSZl2Dl9k66CHJ/46ZYQ==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
is-descriptor "^1.0.2"
isobject "^3.0.1"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
degenerator@^1.0.4:
version "1.0.4"
resolved "https://registry.yarnpkg.com/degenerator/-/degenerator-1.0.4.tgz#fcf490a37ece266464d9cc431ab98c5819ced095"
integrity sha1-/PSQo37OJmRk2cxDGrmMWBnO0JU=
dependencies:
ast-types "0.x.x"
escodegen "1.x.x"
esprima "3.x.x"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
delayed-stream@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/delayed-stream/-/delayed-stream-1.0.0.tgz#df3ae199acadfb7d440aaae0b29e2272b24ec619"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-3zrhmayt+31ECqrgsp4icrJOxhk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
delegates@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/delegates/-/delegates-1.0.0.tgz#84c6e159b81904fdca59a0ef44cd870d31250f9a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-hMbhWbgZBP3KWaDvRM2HDTElD5o=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2021-06-01 18:19:18 +03:00
depd@^1.1.2, depd@~1.1.2:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/depd/-/depd-1.1.2.tgz#9bcd52e14c097763e749b274c4346ed2e560b5a9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-m81S4UwJd2PnSbJ0xDRu0uVgtak=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Update dependency express-session to v1.16.2
2019-07-02 03:40:30 +03:00
depd@~2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/depd/-/depd-2.0.0.tgz#b696163cc757560d09cf22cc8fad1571b79e76df"
integrity sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
destroy@~1.0.4:
version "1.0.4"
resolved "https://registry.yarnpkg.com/destroy/-/destroy-1.0.4.tgz#978857442c44749e4206613e37946205826abd80"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-l4hXRCxEdJ5CBmE+N5RiBYJqvYA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
detect-file@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/detect-file/-/detect-file-1.0.0.tgz#f0d66d03672a825cb1b73bdb3fe62310c8e552b7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8NZtA2cqglyxtzvbP+YjEMjlUrc=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
detect-libc@^1.0.2, detect-libc@^1.0.3:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/detect-libc/-/detect-libc-1.0.3.tgz#fa137c4bd698edf55cd5cd02ac559f91a4c4ba9b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-+hN8S9aY7fVc1c0CrFWfkaTEups=
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dicer@0.2.5:
version "0.2.5"
resolved "https://registry.yarnpkg.com/dicer/-/dicer-0.2.5.tgz#5996c086bb33218c812c090bddc09cd12facb70f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WZbAhrszIYyBLAkL3cCc0S+stw8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
readable-stream "1.1.x"
streamsearch "0.1.2"
Update dependency @lodder/grunt-postcss to v3.0.1
2021-04-14 13:11:35 +03:00
diff@5.0.0, diff@^5.0.0:
Update dependency mocha to v8.3.0
2021-02-11 22:44:24 +03:00
version "5.0.0"
resolved "https://registry.yarnpkg.com/diff/-/diff-5.0.0.tgz#7ed6ad76d859d030787ec35855f5b1daf31d852b"
integrity sha512-/VTCrvm5Z0JGty/BWHljh+BAiw3IK+2j87NGMu8Nwc/f48WoDAC395uomO9ZD117ZOBaHmkX1oyLvkVM/aIT3w==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
doctrine@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/doctrine/-/doctrine-3.0.0.tgz#addebead72a6574db783639dc87a121773973961"
integrity sha512-yS+Q5i3hBf7GBkd4KG8a7eBNNWNGLTaEwwYWUijIYM7zrlYDM0BFXHjjPWlWZ1Rg7UaddZeIDmi9jF3HmqiQ2w==
dependencies:
esutils "^2.0.2"
Lock file maintenance
2021-05-05 18:56:03 +03:00
dom-serializer@0:
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
version "0.2.2"
resolved "https://registry.yarnpkg.com/dom-serializer/-/dom-serializer-0.2.2.tgz#1afb81f533717175d478655debc5e332d9f9bb51"
integrity sha512-2/xPb3ORsQ42nHYiSunXkDjPLBaEj/xTwUO4B7XCZQTRk7EBtTOPaygh10YAAh2OI1Qrp6NWfpAhzswj0ydt9g==
dependencies:
domelementtype "^2.0.1"
entities "^2.0.0"
Lock file maintenance
2021-07-05 04:25:22 +03:00
dom-serializer@^1.0.1, dom-serializer@^1.3.2:
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "1.3.2"
resolved "https://registry.yarnpkg.com/dom-serializer/-/dom-serializer-1.3.2.tgz#6206437d32ceefaec7161803230c7a20bc1b4d91"
integrity sha512-5c54Bk5Dw4qAxNOI1pFEizPSjVsx5+bpJKmL2kPn8JhBUq2q09tTCa3mjijun2NfK78NMouDYNMBkOrPZiS+ig==
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
dependencies:
domelementtype "^2.0.1"
Lock file maintenance
2021-06-01 18:19:18 +03:00
domhandler "^4.2.0"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
entities "^2.0.0"
Lock file maintenance
2021-05-05 18:56:03 +03:00
dom-serializer@~0.1.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "0.1.1"
resolved "https://registry.yarnpkg.com/dom-serializer/-/dom-serializer-0.1.1.tgz#1ec4059e284babed36eec2941d4a970a189ce7c0"
integrity sha512-l0IU0pPzLWSHBcieZbpOKgkIn3ts3vAh7ZuFyXNwJxJXk/c4Gwj9xaTJwIDVQCXawWD0qb3IzMGH5rglQaO0XA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Lock file maintenance
2019-08-01 08:14:51 +03:00
domelementtype "^1.3.0"
entities "^1.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency html-to-text to v5
2019-07-02 03:43:18 +03:00
domelementtype@1, domelementtype@^1.3.0, domelementtype@^1.3.1:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "1.3.1"
resolved "https://registry.yarnpkg.com/domelementtype/-/domelementtype-1.3.1.tgz#d048c44b37b0d10a7f2a3d5fee3f4333d790481f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-BSKB+TSpMpFI/HOxCNr1O8aMOTZ8hT3pM3GQ0w/mWRmkhEDSFJkkyzz4XQsBV44BChwGkrDfMyjVD0eA2aFV3w==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
domelementtype@^2.0.1, domelementtype@^2.2.0:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
version "2.2.0"
resolved "https://registry.yarnpkg.com/domelementtype/-/domelementtype-2.2.0.tgz#9a0b6c2782ed6a1c7323d42267183df9bd8b1d57"
integrity sha512-DtBMo82pv1dFtUmHyr48beiuq792Sxohr+8Hm9zoxklYPfa6n0Z3Byjj2IV7bmr2IyqClnqEQhfgHJJ5QF0R5A==
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
domexception@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/domexception/-/domexception-2.0.1.tgz#fb44aefba793e1574b0af6aed2801d057529f304"
integrity sha512-yxJ2mFy/sibVQlu5qHjOkf9J3K6zgmCxgJ94u2EdvDOV09H+32LtRswEcUsmUWN72pVLOEnTSRaIVVzVQgS0dg==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
webidl-conversions "^5.0.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
domhandler@^2.3.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "2.4.2"
resolved "https://registry.yarnpkg.com/domhandler/-/domhandler-2.4.2.tgz#8805097e933d65e85546f726d60f5eb88b44f803"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-JiK04h0Ht5u/80fdLMCEmV4zkNh2BcoMFBmZ/91WtYZ8qVXSKjiw7fXMgFPnHcSZgOo3XdinHvmnDUeMf5R4wA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
domelementtype "1"
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
domhandler@^3.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "3.3.0"
resolved "https://registry.yarnpkg.com/domhandler/-/domhandler-3.3.0.tgz#6db7ea46e4617eb15cf875df68b2b8524ce0037a"
integrity sha512-J1C5rIANUbuYK+FuFL98650rihynUOEzRLxW+90bKZRWB6A1X1Tf82GxR1qAWLyfNPRvjqfip3Q5tdYlmAa9lA==
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
dependencies:
domelementtype "^2.0.1"
Lock file maintenance
2021-06-01 18:19:18 +03:00
domhandler@^4.0.0, domhandler@^4.2.0:
Lock file maintenance
2021-08-30 06:24:29 +03:00
version "4.2.2"
resolved "https://registry.yarnpkg.com/domhandler/-/domhandler-4.2.2.tgz#e825d721d19a86b8c201a35264e226c678ee755f"
integrity sha512-PzE9aBMsdZO8TK4BnuJwH0QT41wgMbRzuZrHUcpYncEjmQazq8QEaBWgLG7ZyC/DAZKEgglpIA6j4Qn/HmxS3w==
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
dependencies:
domelementtype "^2.2.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
domutils@1.5.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.5.1"
resolved "https://registry.yarnpkg.com/domutils/-/domutils-1.5.1.tgz#dcd8488a26f563d61079e48c9f7b7e32373682cf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-3NhIiib1Y9YQeeSMn3t+Mjc2gs8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
dom-serializer "0"
domelementtype "1"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
domutils@^1.5.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.7.0"
resolved "https://registry.yarnpkg.com/domutils/-/domutils-1.7.0.tgz#56ea341e834e06e6748af7a1cb25da67ea9f8c2a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Lgd2XcJ/NjEw+7tFvfKxOzCYKZsdct5lczQ2ZaQY8Djz7pfAD3Gbp8ySJWtreII/vDlMVmxwa6pHmdxIYgttDg==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
dependencies:
dom-serializer "0"
domelementtype "1"
Lock file maintenance
2021-07-05 04:25:22 +03:00
domutils@^2.0.0, domutils@^2.5.2, domutils@^2.6.0, domutils@^2.7.0:
Lock file maintenance
2021-08-30 06:24:29 +03:00
version "2.8.0"
resolved "https://registry.yarnpkg.com/domutils/-/domutils-2.8.0.tgz#4437def5db6e2d1f5d6ee859bd95ca7d02048135"
integrity sha512-w96Cjofp72M5IIhpjgobBimYEfoPjx1Vx0BSX9P30WBdZW2WIKU0T1Bd0kz2eNZ9ikjKgHbEyKx8BB6H1L3h3A==
Update metascraper to v5.22.1
2021-06-09 18:53:54 +03:00
dependencies:
dom-serializer "^1.0.1"
domelementtype "^2.2.0"
domhandler "^4.2.0"
Lock file maintenance
2021-05-05 18:56:03 +03:00
dot-case@^3.0.4:
version "3.0.4"
resolved "https://registry.yarnpkg.com/dot-case/-/dot-case-3.0.4.tgz#9b2b670d00a431667a8a75ba29cd1b98809ce751"
integrity sha512-Kv5nKlh6yRrdrGvxeJ2e5y2eRUpkUosIW4A2AS38zwSz27zu7ufDwQPi5Jhs3XAlGNetl3bmnGhQsMtkKJnj3w==
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
dependencies:
Lock file maintenance
2021-05-05 18:56:03 +03:00
no-case "^3.0.4"
tslib "^2.0.3"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
downsize@0.0.8:
version "0.0.8"
resolved "https://registry.yarnpkg.com/downsize/-/downsize-0.0.8.tgz#21435a610c8c68220f5cc31474979b4d025f038e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IUNaYQyMaCIPXMMUdJebTQJfA44=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
xregexp "2.0.0"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
dtrace-provider@~0.8:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "0.8.8"
resolved "https://registry.yarnpkg.com/dtrace-provider/-/dtrace-provider-0.8.8.tgz#2996d5490c37e1347be263b423ed7b297fb0d97e"
integrity sha512-b7Z7cNtHPhH9EJhNNbbeqTcXB8LGFFZhq1PGgEvpeHlzd36bhbdTWoE/Ba/YguqpBSlAPKnARWhVlhunCMwfxg==
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
dependencies:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
nan "^2.14.0"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
duplexer3@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/duplexer3/-/duplexer3-0.1.4.tgz#ee01dd1cac0ed3cbc7fdbea37dc0a8f1ce002ce2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-7gHdHKwO08vH/b6jfcCo8c4ALOI=
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
duplexer@^0.1.1:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/duplexer/-/duplexer-0.1.2.tgz#3abe43aef3835f8ae077d136ddce0f276b0400e6"
integrity sha512-jtD6YG370ZCIi/9GTaJKQxWTZD045+4R4hTk/x1UyoqadyJ9x9CgSi1RlVDQF8U2sxLLSnFkCaMihqljHIWgMg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ecc-jsbn@~0.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz#3a83a904e54353287874c564b7549386849a98c9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-OoOpBOVDUyh4dMVkt1SThoSamMk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
jsbn "~0.1.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
safer-buffer "^2.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
ecdsa-sig-formatter@1.0.11:
version "1.0.11"
resolved "https://registry.yarnpkg.com/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz#ae0f0fa2d85045ef14a817daa3ce9acd0489e5bf"
integrity sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==
dependencies:
safe-buffer "^5.0.1"
Update dependency gscan to v3.4.1
2020-04-06 20:10:36 +03:00
editorconfig@^0.15.3:
Updated express-hbs to 2.1.2 no-issue ronseal.
2019-05-20 13:35:04 +03:00
version "0.15.3"
resolved "https://registry.yarnpkg.com/editorconfig/-/editorconfig-0.15.3.tgz#bef84c4e75fb8dcb0ce5cee8efd51c15999befc5"
integrity sha512-M9wIMFx96vq0R4F+gRpY3o2exzb8hEj/n9S8unZtHSvYjibBp/iMufSzvmOcV/laG0ZtuTVGtiJggPOSW2r93g==
dependencies:
commander "^2.19.0"
lru-cache "^4.1.5"
semver "^5.6.0"
sigmund "^1.0.1"
Update dependency @tryghost/members-api to v0.27.0
2020-08-17 23:04:08 +03:00
ee-argv@0.1.x:
version "0.1.4"
resolved "https://registry.yarnpkg.com/ee-argv/-/ee-argv-0.1.4.tgz#77f459daf980f11d2c6f8e28a21abb88020168ab"
integrity sha1-d/RZ2vmA8R0sb44oohq7iAIBaKs=
ee-class@1.x, ee-class@^1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/ee-class/-/ee-class-1.4.0.tgz#2903f622ee1fe40cd8ba989d7ea239a31bd5e255"
integrity sha1-KQP2Iu4f5AzYupidfqI5oxvV4lU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ee-first@1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/ee-first/-/ee-first-1.1.1.tgz#590c61156b0ae2f4f0255732a158b266bc56b21d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WQxhFWsK4vTwJVcyoViyZrxWsh0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency @tryghost/members-api to v0.27.0
2020-08-17 23:04:08 +03:00
ee-log@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/ee-log/-/ee-log-1.1.0.tgz#31b1ef1bda720ccec29523df05482428ceea3582"
integrity sha1-MbHvG9pyDM7ClSPfBUgkKM7qNYI=
dependencies:
ee-class "1.x"
ee-types "2.x"
ee-log@^3.0.0, ee-log@^3.0.5:
version "3.0.9"
resolved "https://registry.yarnpkg.com/ee-log/-/ee-log-3.0.9.tgz#a9ab95414f3eaefab0573ea18fc8dfb1797e8670"
integrity sha512-SdIG4RfLPuv8N2cIJWgaW00V6xZsrEZJq/OcKl1SkyeNYYGeQKOUS0JzyvTAiPvy8bLCLSLYwtx37ZUQPe1xJg==
dependencies:
"@distributed-systems/callsite" "^1.1.1"
logd-console-output "^1.2.1"
ee-types@2.x, ee-types@^2.1.4, ee-types@^2.2.0:
version "2.2.1"
resolved "https://registry.yarnpkg.com/ee-types/-/ee-types-2.2.1.tgz#1be9b6704ffa200cb0003ece72dca8037c1dd1de"
integrity sha512-ZgShE8RXsE+DFAddCmduKwUwoNLZd7Ik6yv6LFEUDfz/6k2s6rTvABQS8dO2EibJpYFWREOx/ealtwuTUXeeYg==
dependencies:
ee-class "^1.4.0"
Lock file maintenance
2021-09-06 03:36:57 +03:00
electron-to-chromium@^1.3.830:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "1.3.843"
resolved "https://registry.yarnpkg.com/electron-to-chromium/-/electron-to-chromium-1.3.843.tgz#671489bd2f59fd49b76adddc1aa02c88cd38a5c0"
integrity sha512-OWEwAbzaVd1Lk9MohVw8LxMXFlnYd9oYTYxfX8KS++kLLjDfbovLOcEEXwRhG612dqGQ6+44SZvim0GXuBRiKg==
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
Update dependency eslint-plugin-ghost to v2
2020-10-23 12:01:27 +03:00
ember-rfc176-data@^0.3.15:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "0.3.17"
resolved "https://registry.yarnpkg.com/ember-rfc176-data/-/ember-rfc176-data-0.3.17.tgz#d4fc6c33abd6ef7b3440c107a28e04417b49860a"
integrity sha512-EVzTTKqxv9FZbEh6Ktw56YyWRAA0MijKvl7H8C06wVF+8f/cRRz3dXxa4nkwjzyVwx4rzKGuIGq77hxJAQhWWw==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 12:12:03 +03:00
emits@^3.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "3.0.0"
resolved "https://registry.yarnpkg.com/emits/-/emits-3.0.0.tgz#32752bba95e1707b219562384ab9bb8b1fd62f70"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-MnUrupXhcHshlWI4Srm7ix/WL3A=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
emoji-regex@^7.0.1:
version "7.0.3"
resolved "https://registry.yarnpkg.com/emoji-regex/-/emoji-regex-7.0.3.tgz#933a04052860c85e83c122479c4748a8e4c72156"
integrity sha512-CwBLREIQ7LvYFB0WyRvwhq5N5qPhc6PMjD6bYggFlI5YyDgl+0vxq5VHbMOFqLg7hfWzmu8T5Z1QofhmTIhItA==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
emoji-regex@^8.0.0:
version "8.0.0"
resolved "https://registry.yarnpkg.com/emoji-regex/-/emoji-regex-8.0.0.tgz#e818fd69ce5ccfcb404594f842963bf53164cc37"
integrity sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
encodeurl@~1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/encodeurl/-/encodeurl-1.0.2.tgz#ad3ff4c86ec2d029322f5a02c3a9a606c95b3f59"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-rT/0yG7C0CkyL1oCw6mmBslbP1k=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
encoding@^0.1.12:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "0.1.13"
resolved "https://registry.yarnpkg.com/encoding/-/encoding-0.1.13.tgz#56574afdd791f54a8e9b2785c0582a2d26210fa9"
integrity sha512-ETBauow1T35Y/WZMkio9jiM0Z5xjHHmJ4XmjZOq1l/dXz3lr2sRn87nJy20RupqSh1F2m3HHPSp8ShIPQJrJ3A==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
iconv-lite "^0.6.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
end-of-stream@^1.1.0, end-of-stream@^1.4.1:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "1.4.4"
resolved "https://registry.yarnpkg.com/end-of-stream/-/end-of-stream-1.4.4.tgz#5ae64a5f45057baf3626ec14da0ca5e4b2431eb0"
integrity sha512-+uw1inIHVPQoaVuHzRyXd21icM+cnt4CzD5rW+NC1wjOUSTOs+Te7FOv7AhN7vS9x/oIyhLP5PR1H+phQAHu5Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
once "^1.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency eslint to v7.3.0
2020-06-19 22:29:27 +03:00
enquirer@^2.3.5:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "2.3.6"
resolved "https://registry.yarnpkg.com/enquirer/-/enquirer-2.3.6.tgz#2a7fe5dd634a1e4125a975ec994ff5456dc3734d"
integrity sha512-yjNnPr315/FjS4zIsUxYguYUPP2e1NK4d7E7ZOLiyYCcbFBiTMyID+2wvm2w6+pZ/odMA7cRkjhsPbltwBOrLg==
Update dependency eslint to v7.3.0
2020-06-19 22:29:27 +03:00
dependencies:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
ansi-colors "^4.1.1"
Update dependency eslint to v7.3.0
2020-06-19 22:29:27 +03:00
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
entities@2.2.0, entities@^2.0.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/entities/-/entities-2.2.0.tgz#098dc90ebb83d8dffa089d55256b351d34c4da55"
integrity sha512-p92if5Nz619I0w+akJrLZH0MX0Pb5DX39XOwQTtXSdQQOaYH03S1uIQp4mhOZtAXrxq4ViO67YTiLBo2638o9A==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
entities@^1.1.1, entities@~1.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/entities/-/entities-1.1.2.tgz#bdfa735299664dfafd34529ed4f8522a275fea56"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-f2LZMYl1Fzu7YSBKg+RoROelpOaNrcGmE9AZubeDfrCEia483oW4MI4VyFd5VNHIgQ/7qm1I0wUHK1eJnn2y2w==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency @tryghost/kg-markdown-html-renderer to v3 (#12521) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-12 14:21:37 +03:00
entities@~2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/entities/-/entities-2.1.0.tgz#992d3129cf7df6870b96c57858c249a120f8b8b5"
integrity sha512-hCx1oky9PFrJ611mf0ifBLBRW8lUUVRlFolb5gWRfIELabBlbp9xZvrqZLZAs+NxFnbfQoeGd8wDkygjg7U85w==
Update metascraper to v5.24.6
2021-09-13 11:35:39 +03:00
entities@~3.0.1:
Update metascraper to v5.24.1
2021-08-09 14:56:34 +03:00
version "3.0.1"
resolved "https://registry.yarnpkg.com/entities/-/entities-3.0.1.tgz#2b887ca62585e96db3903482d336c1006c3001d4"
integrity sha512-WiyBqoomrwMdFG1e0kqvASYfnlb0lp8M5o5Fw2OFq1hNZxxcNk8Ik0Xm7LxzBhuidnZB/UtBqVCgUz3kBOP51Q==
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
env-paths@^2.2.0:
version "2.2.1"
resolved "https://registry.yarnpkg.com/env-paths/-/env-paths-2.2.1.tgz#420399d416ce1fbe9bc0a07c62fa68d67fd0f8f2"
integrity sha512-+h1lkLKhZMTYjog1VEpJNG7NZJWcuc2DDk/qsqSTRRCOXiLjeQ1d1/udrUGhqMxUgAlwKNZ0cf2uqan5GLuS2A==
Lock file maintenance
2021-06-01 18:19:18 +03:00
err-code@^2.0.2:
version "2.0.3"
resolved "https://registry.yarnpkg.com/err-code/-/err-code-2.0.3.tgz#23c2f3b756ffdfc608d30e27c9a941024807e7f9"
integrity sha512-2bmlRpNKBxT/CRmPOlyISQpNj+qSeYvcym/uT0Jx2bMOlKLtSy1ZmLuVxSEKKyor/N5yhvp/ZiG1oE3DEYMSFA==
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
error-ex@^1.3.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.3.2"
resolved "https://registry.yarnpkg.com/error-ex/-/error-ex-1.3.2.tgz#b4ac40648107fdcdcfae242f428bea8a14d4f1bf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-7dFHNmqeFSEt2ZBsCriorKnn3Z2pj+fd9kmI6QoWw4//DL+icEBfc0U7qJCisqrTsKTjw4fNFy2pW9OqStD84g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
is-arrayish "^0.2.1"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
error@^7.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "7.2.1"
resolved "https://registry.yarnpkg.com/error/-/error-7.2.1.tgz#eab21a4689b5f684fc83da84a0e390de82d94894"
integrity sha512-fo9HBvWnx3NGUKMvMwB/CBCMMrfEJgbDTVDEkPygA3Bdd3lM1OyCd+rbQ8BwnpF6GdVeOLDNmyL4N5Bg80ZvdA==
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
dependencies:
string-template "~0.2.1"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
es6-promise@^4.0.3, es6-promise@^4.2.8:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "4.2.8"
resolved "https://registry.yarnpkg.com/es6-promise/-/es6-promise-4.2.8.tgz#4eb21594c972bc40553d276e510539143db53e0a"
integrity sha512-HJDGx5daxeIvxdBxvG2cb9g4tEvwIk3i8+nhX0yGrYmZUzbkdg8QbDevheDB8gd0//uPj4c1EQua8Q+MViT0/w==
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
es6-promisify@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/es6-promisify/-/es6-promisify-5.0.0.tgz#5109d62f3e56ea967c4b63505aef08291c8a5203"
integrity sha1-UQnWLz5W6pZ8S2NQWu8IKRyKUgM=
dependencies:
es6-promise "^4.0.3"
Update dependency nconf to v0.11.0
2020-11-25 12:06:19 +03:00
escalade@^3.1.1:
version "3.1.1"
resolved "https://registry.yarnpkg.com/escalade/-/escalade-3.1.1.tgz#d8cfdc7000965c5a0174b4a82eaa5c0552742e40"
integrity sha512-k0er2gUkLf8O0zKJiAhmkTnJlTvINGv7ygDNPbeIsX/TJjGJZHuh9B2UxbsaEkmlEo9MfhrSzmhIlhRlI2GXnw==
Update dependency juice to v7
2020-07-21 21:11:38 +03:00
escape-goat@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/escape-goat/-/escape-goat-3.0.0.tgz#e8b5fb658553fe8a3c4959c316c6ebb8c842b19c"
integrity sha512-w3PwNZJwRxlp47QGzhuEBldEqVHHhh8/tIPcl6ecf2Bou99cdAt0knihBV0Ecc7CGxYduXVBDheH1K2oADRlvw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
escape-html@~1.0.3:
version "1.0.3"
resolved "https://registry.yarnpkg.com/escape-html/-/escape-html-1.0.3.tgz#0258eae4d3d0c0974de1c169188ef0051d1d1988"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Aljq5NPQwJdN4cFpGI7wBR0dGYg=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency sanitize-html to v2
2020-10-21 13:34:09 +03:00
escape-string-regexp@4.0.0, escape-string-regexp@^4.0.0:
Update dependency mocha to v8.1.2
2020-08-25 22:51:28 +03:00
version "4.0.0"
resolved "https://registry.yarnpkg.com/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz#14ba83a5d373e3d311e5afca29cf5bfad965bf34"
integrity sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==
Update dependency grunt-mocha-cli to v7
2020-12-03 01:43:54 +03:00
escape-string-regexp@^1.0.2, escape-string-regexp@^1.0.5:
version "1.0.5"
resolved "https://registry.yarnpkg.com/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz#1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
integrity sha1-G2HAViGQqN/2rjuyzwIAyhMLhtQ=
Update dependency @tryghost/html-to-mobiledoc to v0.7.12
2021-03-10 22:11:13 +03:00
escodegen@1.x.x, escodegen@^1.8.1:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.14.3"
resolved "https://registry.yarnpkg.com/escodegen/-/escodegen-1.14.3.tgz#4e7b81fba61581dc97582ed78cab7f0e8d63f503"
integrity sha512-qFcX0XJkdg+PB3xjZZG/wKSuT1PnQWx57+TVSjIMmILd2yC/6ByYElPwJnslDsuWuSAp4AwJGumarAAmJch5Kw==
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
dependencies:
esprima "^4.0.1"
estraverse "^4.2.0"
esutils "^2.0.2"
optionator "^0.8.1"
optionalDependencies:
source-map "~0.6.1"
Update dependency @tryghost/html-to-mobiledoc to v0.7.12
2021-03-10 22:11:13 +03:00
escodegen@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/escodegen/-/escodegen-2.0.0.tgz#5e32b12833e8aa8fa35e1bf0befa89380484c7dd"
integrity sha512-mmHKys/C8BFUGI+MAWNcSYoORYLMdPzjrknd2Vc+bUsjN5bXcr8EhrNB+UTqfL1y3I9c4fw2ihgtMPQLBRiQxw==
dependencies:
esprima "^4.0.1"
estraverse "^5.2.0"
esutils "^2.0.2"
optionator "^0.8.1"
optionalDependencies:
source-map "~0.6.1"
Update dependency eslint-plugin-ghost to v2.5.0 (#13149) Co-authored-by: Renovate Bot <bot@renovateapp.com> This version of eslint contains changes for Admin only
2021-07-16 15:13:04 +03:00
eslint-plugin-ember@10.5.1:
version "10.5.1"
resolved "https://registry.yarnpkg.com/eslint-plugin-ember/-/eslint-plugin-ember-10.5.1.tgz#3ec65cb562b438c64aa28d772606dbb55705e037"
integrity sha512-6cubCQdsybN2DtuXnlkhqi3SemBk4ktjq2k4vcjFG8QLmrpmiS6sDwIZMM/TLI8f9QwZIjmewhwS4zB/77E47w==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
dependencies:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
"@ember-data/rfc395-data" "^0.0.4"
Update dependency eslint-plugin-ghost to v2.5.0 (#13149) Co-authored-by: Renovate Bot <bot@renovateapp.com> This version of eslint contains changes for Admin only
2021-07-16 15:13:04 +03:00
css-tree "^1.0.0-alpha.39"
Update dependency eslint-plugin-ghost to v2
2020-10-23 12:01:27 +03:00
ember-rfc176-data "^0.3.15"
Update dependency eslint-plugin-ghost to v2.5.0 (#13149) Co-authored-by: Renovate Bot <bot@renovateapp.com> This version of eslint contains changes for Admin only
2021-07-16 15:13:04 +03:00
eslint-utils "^3.0.0"
Update dependency eslint-plugin-ghost to v2
2020-10-23 12:01:27 +03:00
lodash.kebabcase "^4.1.1"
Update dependency eslint-plugin-ghost to v2.5.0 (#13149) Co-authored-by: Renovate Bot <bot@renovateapp.com> This version of eslint contains changes for Admin only
2021-07-16 15:13:04 +03:00
requireindex "^1.2.0"
Update dependency eslint-plugin-ghost to v1.0.1
2020-03-25 21:31:55 +03:00
snake-case "^3.0.3"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
eslint-plugin-es@^3.0.0:
version "3.0.1"
resolved "https://registry.yarnpkg.com/eslint-plugin-es/-/eslint-plugin-es-3.0.1.tgz#75a7cdfdccddc0589934aeeb384175f221c57893"
integrity sha512-GUmAsJaN4Fc7Gbtl8uOBlayo2DqhwWvEzykMHSCZHU3XdJ+NSzzZcVhXh3VxX5icqQ+oQdIEawXX8xkR3mIFmQ==
dependencies:
eslint-utils "^2.0.0"
regexpp "^3.0.0"
Update dependency eslint-plugin-ghost to v2.6.0
2021-07-19 15:50:50 +03:00
eslint-plugin-ghost@2.6.0:
version "2.6.0"
resolved "https://registry.yarnpkg.com/eslint-plugin-ghost/-/eslint-plugin-ghost-2.6.0.tgz#cbf2ca2981e707ca595a04ada96e5c8a499a058b"
integrity sha512-GpSLV5okek0YbXf5apVCj91Nz/pvvUrrWqZhLc0MEBIFTR252LSDce+4ZRaplcQXbVCkKFLjXMBp5YHquqLh9Q==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
dependencies:
Update dependency eslint-plugin-ghost to v2.5.0 (#13149) Co-authored-by: Renovate Bot <bot@renovateapp.com> This version of eslint contains changes for Admin only
2021-07-16 15:13:04 +03:00
eslint-plugin-ember "10.5.1"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
eslint-plugin-mocha "7.0.1"
eslint-plugin-node "11.1.0"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
eslint-plugin-sort-imports-es6-autofix "0.5.0"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
eslint-plugin-unicorn "31.0.0"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
eslint-plugin-mocha@7.0.1:
version "7.0.1"
resolved "https://registry.yarnpkg.com/eslint-plugin-mocha/-/eslint-plugin-mocha-7.0.1.tgz#b2e9e8ebef7836f999a83f8bab25d0e0c05f0d28"
integrity sha512-zkQRW9UigRaayGm/pK9TD5RjccKXSgQksNtpsXbG9b6L5I+jNx7m98VUbZ4w1H1ArlNA+K7IOH+z8TscN6sOYg==
Updated tests eslint config to use eslint-plugin-ghost@0.5.0 no issue - bump eslint-plugin-ghost to v0.5.0 - update core/test eslint config to use "ghost:test" in place of custom ruleset - apply automated eslint fixes
2019-08-19 14:41:09 +03:00
dependencies:
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
eslint-utils "^2.0.0"
ramda "^0.27.0"
eslint-plugin-node@11.1.0:
version "11.1.0"
resolved "https://registry.yarnpkg.com/eslint-plugin-node/-/eslint-plugin-node-11.1.0.tgz#c95544416ee4ada26740a30474eefc5402dc671d"
integrity sha512-oUwtPJ1W0SKD0Tr+wqu92c5xuCeQqB3hSCHasn/ZgjFdA9iDGNkNf2Zi9ztY7X+hNuMib23LNGRm6+uN+KLE3g==
dependencies:
eslint-plugin-es "^3.0.0"
eslint-utils "^2.0.0"
ignore "^5.1.1"
minimatch "^3.0.4"
resolve "^1.10.1"
semver "^6.1.0"
Updated tests eslint config to use eslint-plugin-ghost@0.5.0 no issue - bump eslint-plugin-ghost to v0.5.0 - update core/test eslint config to use "ghost:test" in place of custom ruleset - apply automated eslint fixes
2019-08-19 14:41:09 +03:00
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
eslint-plugin-sort-imports-es6-autofix@0.5.0:
version "0.5.0"
resolved "https://registry.yarnpkg.com/eslint-plugin-sort-imports-es6-autofix/-/eslint-plugin-sort-imports-es6-autofix-0.5.0.tgz#dabae09a457eac6e95c52d8edd7855f576d014b6"
integrity sha512-KEX2Uz6bAs67jDYiH/OT1xz1E7AzIJJOIRg1F7OnFAfUVlpws3ldSZj5oZySRHfoVkWqDX9GGExYxckdLrWhwg==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
dependencies:
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
eslint "^6.2.2"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
eslint-plugin-unicorn@31.0.0:
version "31.0.0"
resolved "https://registry.yarnpkg.com/eslint-plugin-unicorn/-/eslint-plugin-unicorn-31.0.0.tgz#53eef3f5152ddaa531888f77a420313e30d9864a"
integrity sha512-HR3gI4ANtV8A+0FLAaxjBD/G5J3PWBo+7OswyGeK5nylGqtKLJVbnPksIkBgmVg+SFpxu5MnjaxQQI+9KjyVAg==
dependencies:
ci-info "^3.1.1"
clean-regexp "^1.0.0"
eslint-template-visitor "^2.3.2"
eslint-utils "^2.1.0"
eslint-visitor-keys "^2.0.0"
import-modules "^2.1.0"
is-builtin-module "^3.1.0"
lodash "^4.17.21"
pluralize "^8.0.0"
read-pkg-up "^7.0.1"
regexp-tree "^0.1.23"
reserved-words "^0.1.2"
safe-regex "^2.1.1"
semver "^7.3.5"
Lock file maintenance
2021-07-05 04:25:22 +03:00
eslint-scope@^5.0.0, eslint-scope@^5.1.1:
Update dependency eslint to v7.10.0
2020-09-28 03:06:09 +03:00
version "5.1.1"
resolved "https://registry.yarnpkg.com/eslint-scope/-/eslint-scope-5.1.1.tgz#e786e59a66cb92b3f6c1fb0d508aab174848f48c"
integrity sha512-2NxwbF/hZ0KpepYN0cNbo+FN6XoK7GaHlQhgx/hIZl6Va0bF45RQOOwhLIy8lQDbuCiadSLCBnH2CFYquit5bw==
dependencies:
esrecurse "^4.3.0"
estraverse "^4.1.1"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
eslint-template-visitor@^2.3.2:
version "2.3.2"
resolved "https://registry.yarnpkg.com/eslint-template-visitor/-/eslint-template-visitor-2.3.2.tgz#b52f96ff311e773a345d79053ccc78275bbc463d"
integrity sha512-3ydhqFpuV7x1M9EK52BPNj6V0Kwu0KKkcIAfpUhwHbR8ocRln/oUHgfxQupY8O1h4Qv/POHDumb/BwwNfxbtnA==
dependencies:
"@babel/core" "^7.12.16"
"@babel/eslint-parser" "^7.12.16"
eslint-visitor-keys "^2.0.0"
esquery "^1.3.1"
multimap "^1.1.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
eslint-utils@^1.4.3:
version "1.4.3"
resolved "https://registry.yarnpkg.com/eslint-utils/-/eslint-utils-1.4.3.tgz#74fec7c54d0776b6f67e0251040b5806564e981f"
integrity sha512-fbBN5W2xdY45KulGXmLHZ3c3FHfVYmKg0IrAKGOkT/464PQsx2UeIzfz1RmEci+KLm1bBaAzZAh8+/E+XAeZ8Q==
dependencies:
eslint-visitor-keys "^1.1.0"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
eslint-utils@^2.0.0, eslint-utils@^2.1.0:
Update dependency eslint to v7.5.0
2020-07-20 08:35:46 +03:00
version "2.1.0"
resolved "https://registry.yarnpkg.com/eslint-utils/-/eslint-utils-2.1.0.tgz#d2de5e03424e707dc10c74068ddedae708741b27"
integrity sha512-w94dQYoauyvlDc43XnGB8lU3Zt713vNChgt4EWwhXAP2XkBvndfxF0AgIqKOOasjPIPzj9JqgwkwbCYD0/V3Zg==
dependencies:
eslint-visitor-keys "^1.1.0"
Update dependency eslint-plugin-ghost to v2.5.0 (#13149) Co-authored-by: Renovate Bot <bot@renovateapp.com> This version of eslint contains changes for Admin only
2021-07-16 15:13:04 +03:00
eslint-utils@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/eslint-utils/-/eslint-utils-3.0.0.tgz#8aebaface7345bb33559db0a1f13a1d2d48c3672"
integrity sha512-uuQC43IGctw68pJA1RgbQS8/NP7rch6Cwd4j3ZBtgo4/8Flj4eGE7ZYSZRN3iq5pVUv6GPdW5Z1RFleo84uLDA==
dependencies:
eslint-visitor-keys "^2.0.0"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
eslint-visitor-keys@^1.1.0, eslint-visitor-keys@^1.3.0:
Update dependency eslint to v7.5.0
2020-07-20 08:35:46 +03:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-1.3.0.tgz#30ebd1ef7c2fdff01c3a4f151044af25fab0523e"
integrity sha512-6J72N8UNa462wa/KFODt/PJ3IU60SDpC3QXC1Hjc1BXXpfL2C9R5+AU7jhe0F6GREqVMh4Juu+NY7xn+6dipUQ==
Update dependency eslint to v7.2.0
2020-06-08 03:58:20 +03:00
Lock file maintenance
2021-06-01 18:19:18 +03:00
eslint-visitor-keys@^2.0.0, eslint-visitor-keys@^2.1.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "2.1.0"
resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-2.1.0.tgz#f65328259305927392c938ed44eb0a5c9b2bd303"
integrity sha512-0rSmRBzXgDzIsD6mGdJgevzgezI534Cer5L/vyMX0kHzT/jiB43jRhd9YUlMGYLQy2zprNmoT8qasCGtY+QaKw==
Update dependency eslint to v7.11.0
2020-10-10 00:06:17 +03:00
Update dependency eslint to v7.32.0
2021-07-31 02:58:43 +03:00
eslint@7.32.0:
version "7.32.0"
resolved "https://registry.yarnpkg.com/eslint/-/eslint-7.32.0.tgz#c6d328a14be3fb08c8d1d21e12c02fdb7a2a812d"
integrity sha512-VHZ8gX+EDfz+97jGcgyGCyRia/dPOd6Xh9yPv8Bl1+SoaIwD+a/vlrOmGRUyOYu7MwUhc7CxqeaDZU13S4+EpA==
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
dependencies:
Update dependency eslint to v7.20.0
2021-02-16 15:50:23 +03:00
"@babel/code-frame" "7.12.11"
Update dependency eslint to v7.31.0
2021-07-19 04:06:44 +03:00
"@eslint/eslintrc" "^0.4.3"
Update Test & linting packages
2021-07-05 03:37:17 +03:00
"@humanwhocodes/config-array" "^0.5.0"
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
ajv "^6.10.0"
chalk "^4.0.0"
cross-spawn "^7.0.2"
debug "^4.0.1"
doctrine "^3.0.0"
Update dependency eslint to v7.3.0
2020-06-19 22:29:27 +03:00
enquirer "^2.3.5"
Update dependency eslint to v7.27.0
2021-05-24 03:31:56 +03:00
escape-string-regexp "^4.0.0"
Update dependency eslint to v7.10.0
2020-09-28 03:06:09 +03:00
eslint-scope "^5.1.1"
Update dependency eslint to v7.5.0
2020-07-20 08:35:46 +03:00
eslint-utils "^2.1.0"
Update dependency eslint to v7.11.0
2020-10-10 00:06:17 +03:00
eslint-visitor-keys "^2.0.0"
Update dependency eslint to v7.15.0
2020-12-07 03:07:07 +03:00
espree "^7.3.1"
Update dependency eslint to v7.20.0
2021-02-16 15:50:23 +03:00
esquery "^1.4.0"
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
esutils "^2.0.2"
Update dependency eslint to v7.27.0
2021-05-24 03:31:56 +03:00
fast-deep-equal "^3.1.3"
Update Test & linting packages
2021-03-01 04:18:17 +03:00
file-entry-cache "^6.0.1"
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
functional-red-black-tree "^1.0.1"
Update dependency eslint to v7.28.0
2021-06-05 02:10:06 +03:00
glob-parent "^5.1.2"
Update dependency eslint to v7.22.0
2021-03-13 02:16:42 +03:00
globals "^13.6.0"
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
ignore "^4.0.6"
import-fresh "^3.0.0"
imurmurhash "^0.1.4"
is-glob "^4.0.0"
js-yaml "^3.13.1"
json-stable-stringify-without-jsonify "^1.0.1"
levn "^0.4.1"
Update dependency eslint to v7.27.0
2021-05-24 03:31:56 +03:00
lodash.merge "^4.6.2"
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
minimatch "^3.0.4"
natural-compare "^1.4.0"
optionator "^0.9.1"
progress "^2.0.0"
regexpp "^3.1.0"
semver "^7.2.1"
strip-ansi "^6.0.0"
strip-json-comments "^3.1.0"
Update dependency eslint to v7.27.0
2021-05-24 03:31:56 +03:00
table "^6.0.9"
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
text-table "^0.2.0"
v8-compile-cache "^2.0.3"
eslint@^6.2.2, eslint@^6.8.0:
Update Test & linting packages
2020-02-03 16:44:38 +03:00
version "6.8.0"
resolved "https://registry.yarnpkg.com/eslint/-/eslint-6.8.0.tgz#62262d6729739f9275723824302fb227c8c93ffb"
integrity sha512-K+Iayyo2LtyYhDSYwz5D5QdWw0hCacNzyq1Y821Xna2xSJj7cijoLLYmLxTQgcgZ9mC61nryMy9S7GRbYpI5Ig==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
"@babel/code-frame" "^7.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ajv "^6.10.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
chalk "^2.1.0"
cross-spawn "^6.0.5"
debug "^4.0.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
doctrine "^3.0.0"
Update Test & linting packages
2019-08-16 22:07:23 +03:00
eslint-scope "^5.0.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
eslint-utils "^1.4.3"
eslint-visitor-keys "^1.1.0"
espree "^6.1.2"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
esquery "^1.0.1"
esutils "^2.0.2"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
file-entry-cache "^5.0.1"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
functional-red-black-tree "^1.0.1"
Update Test & linting packages
2019-08-16 22:07:23 +03:00
glob-parent "^5.0.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
globals "^12.1.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
ignore "^4.0.6"
import-fresh "^3.0.0"
imurmurhash "^0.1.4"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
inquirer "^7.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
is-glob "^4.0.0"
js-yaml "^3.13.1"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
json-stable-stringify-without-jsonify "^1.0.1"
levn "^0.3.0"
Update Test & linting packages
2019-08-16 22:07:23 +03:00
lodash "^4.17.14"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
minimatch "^3.0.4"
mkdirp "^0.5.1"
natural-compare "^1.4.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
optionator "^0.8.3"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
progress "^2.0.0"
regexpp "^2.0.1"
Update Test & linting packages
2019-08-16 22:07:23 +03:00
semver "^6.1.2"
strip-ansi "^5.2.0"
strip-json-comments "^3.0.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
table "^5.2.3"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
text-table "^0.2.0"
Update Test & linting packages
2019-08-16 22:07:23 +03:00
v8-compile-cache "^2.0.3"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Update dependency knex to v0.20.13
2020-04-01 20:10:27 +03:00
esm@^3.2.25:
version "3.2.25"
resolved "https://registry.yarnpkg.com/esm/-/esm-3.2.25.tgz#342c18c29d56157688ba5ce31f8431fbb795cc10"
integrity sha512-U1suiZ2oDVWv4zPO56S0NcR5QriEahGtdN2OR6FiOG4WJvcjBVFB0qI4+eKoWFH483PKGuLuu6V8Z4T5g63UVA==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
espree@^6.1.2:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "6.2.1"
resolved "https://registry.yarnpkg.com/espree/-/espree-6.2.1.tgz#77fc72e1fd744a2052c20f38a5b575832e82734a"
integrity sha512-ysCxRQY3WaXJz9tdbWOwuWr5Y/XrPTGX9Kiz3yoUXwW0VZ4w30HTkQLaGx/+ttFjF8i+ACbArnB4ce68a9m5hw==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
acorn "^7.1.1"
acorn-jsx "^5.2.0"
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
eslint-visitor-keys "^1.1.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
espree@^7.3.0, espree@^7.3.1:
Update dependency eslint to v7.15.0
2020-12-07 03:07:07 +03:00
version "7.3.1"
resolved "https://registry.yarnpkg.com/espree/-/espree-7.3.1.tgz#f2df330b752c6f55019f8bd89b7660039c1bbbb6"
integrity sha512-v3JCNCE64umkFpmkFGqzVKsOT0tN1Zr+ueqLZfpV1Ob8e+CEgPWa+OxCoGH3tnhimMKIaBm4m/vaRpJ/krRz2g==
dependencies:
acorn "^7.4.0"
acorn-jsx "^5.3.1"
eslint-visitor-keys "^1.3.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
esprima@1.2.2:
version "1.2.2"
resolved "https://registry.yarnpkg.com/esprima/-/esprima-1.2.2.tgz#76a0fd66fcfe154fd292667dc264019750b1657b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-dqD9Zvz+FU/SkmZ9wmQBl1CxZXs=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
esprima@3.x.x:
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
version "3.1.3"
resolved "https://registry.yarnpkg.com/esprima/-/esprima-3.1.3.tgz#fdca51cee6133895e3c88d535ce49dbff62a4633"
integrity sha1-/cpRzuYTOJXjyI1TXOSdv/YqRjM=
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
esprima@^4.0.0, esprima@^4.0.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "4.0.1"
resolved "https://registry.yarnpkg.com/esprima/-/esprima-4.0.1.tgz#13b04cdb3e6c5d19df91ab6987a8695619b0aa71"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
esquery@^1.0.1, esquery@^1.3.1, esquery@^1.4.0:
Update dependency eslint to v7.20.0
2021-02-16 15:50:23 +03:00
version "1.4.0"
resolved "https://registry.yarnpkg.com/esquery/-/esquery-1.4.0.tgz#2148ffc38b82e8c7057dfed48425b3e61f0f24a5"
integrity sha512-cCDispWt5vHHtwMY2YrAQ4ibFkAL8RbH5YGBnZBc90MolvvfkkQcJro/aZiAQUlQ3qgrYS6D6v8Gc5G5CQsc9w==
dependencies:
estraverse "^5.1.0"
Update dependency eslint to v7.10.0
2020-09-28 03:06:09 +03:00
esrecurse@^4.3.0:
version "4.3.0"
resolved "https://registry.yarnpkg.com/esrecurse/-/esrecurse-4.3.0.tgz#7ad7964d679abb28bee72cec63758b1c5d2c9921"
integrity sha512-KmfKL3b6G+RXvP8N1vr3Tq1kL/oCFgn2NYXEtqP8/L3pKapUA4G8cFVaoF3SU323CD4XypR/ffioHmkti6/Tag==
dependencies:
estraverse "^5.2.0"
Lock file maintenance
2021-05-05 18:56:03 +03:00
estraverse@^4.1.1, estraverse@^4.2.0:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "4.3.0"
resolved "https://registry.yarnpkg.com/estraverse/-/estraverse-4.3.0.tgz#398ad3f3c5a24948be7725e83d11a7de28cdbd1d"
integrity sha512-39nnKffWz8xN1BU/2c79n9nB9HDzo0niYUqx6xyqUnyoAnQyyWpOTdZEeiCch8BBu515t4wp9ZmgVfVhn9EBpw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
estraverse@^5.1.0, estraverse@^5.2.0:
Update dependency eslint to v7.10.0
2020-09-28 03:06:09 +03:00
version "5.2.0"
resolved "https://registry.yarnpkg.com/estraverse/-/estraverse-5.2.0.tgz#307df42547e6cc7324d3cf03c155d5cdb8c53880"
integrity sha512-BxbNGGNm0RyRYvUdHpIwv9IWzeM9XClbOxwoATuFdOE7ZE6wHL+HQ5T8hoPM+zHvmKzzsEqhgy0GrQ5X13afiQ==
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 21:07:33 +03:00
esutils@^2.0.2:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "2.0.3"
resolved "https://registry.yarnpkg.com/esutils/-/esutils-2.0.3.tgz#74d2eb4de0b8da1293711910d50775b9b710ef64"
integrity sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
etag@~1.8.1:
version "1.8.1"
resolved "https://registry.yarnpkg.com/etag/-/etag-1.8.1.tgz#41ae2eeb65efa62268aebfea83ac7d79299b0887"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Qa4u62XvpiJorr/qg6x9eSmbCIc=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
eventemitter2@~0.4.13:
version "0.4.14"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/eventemitter2/-/eventemitter2-0.4.14.tgz#8f61b75cde012b2e9eb284d4545583b5643b61ab"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-j2G3XN4BKy6esoTUVFWDtWQ7Yas=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
exit-on-epipe@~1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/exit-on-epipe/-/exit-on-epipe-1.0.1.tgz#0bdd92e87d5285d267daa8171d0eb06159689692"
integrity sha512-h2z5mrROTxce56S+pnvAV890uu7ls7f1kEvVGJbw1OlFH3/mlJ5bkXu0KRyW94v37zzHPiUd55iLn3DA7TjWpw==
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
exit@~0.1.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/exit/-/exit-0.1.2.tgz#0632638f8d877cc82107d30a0fff1a17cba1cd0c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-BjJjj42HfMghB9MKD/8aF8uhzQw=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
expand-brackets@^2.1.4:
version "2.1.4"
resolved "https://registry.yarnpkg.com/expand-brackets/-/expand-brackets-2.1.4.tgz#b77735e315ce30f6b6eff0f83b04151a22449622"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-t3c14xXOMPa27/D4OwQVGiJEliI=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
debug "^2.3.3"
define-property "^0.2.5"
extend-shallow "^2.0.1"
posix-character-classes "^0.1.0"
regex-not "^1.0.0"
snapdragon "^0.8.1"
to-regex "^3.0.1"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
expand-template@^2.0.3:
version "2.0.3"
resolved "https://registry.yarnpkg.com/expand-template/-/expand-template-2.0.3.tgz#6e14b3fcee0f3a6340ecb57d2e8918692052a47c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
expand-tilde@^2.0.0, expand-tilde@^2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/expand-tilde/-/expand-tilde-2.0.2.tgz#97e801aa052df02454de46b02bf621642cdc8502"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-l+gBqgUt8CRU3kawK/YhZCzchQI=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
homedir-polyfill "^1.0.1"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
express-brute@1.0.1, express-brute@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/express-brute/-/express-brute-1.0.1.tgz#9f36d107fe34e40a682593e39bffcc53102b5335"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
integrity sha1-nzbRB/405ApoJZPjm//MUxArUzU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
long-timeout "~0.1.1"
underscore "~1.8.3"
Update dependency express-hbs to v2.4.0
2021-04-22 19:36:14 +03:00
express-hbs@2.4.0:
version "2.4.0"
resolved "https://registry.yarnpkg.com/express-hbs/-/express-hbs-2.4.0.tgz#b91ad28a35319ec08be9350db65169904bc69490"
integrity sha512-CruS8DA6m8i20MTjWpE6X8zu6q0rbQJbQyIp7V7NoYD1znf0krnCHQ8tVB7I9pJSZYnOPj/VPSByNU3sVDxJfw==
dependencies:
bluebird "^3.5.3"
handlebars "^4.7.7"
lodash "^4.17.21"
readdirp "^3.6.0"
optionalDependencies:
js-beautify "^1.13.11"
Update dependency express-jwt to v6.1.0
2021-08-12 01:56:50 +03:00
express-jwt@6.1.0:
version "6.1.0"
resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-6.1.0.tgz#5818c813e245b0eb361c5cf161425cf16f9c8591"
integrity sha512-mmSR52Ps1FMeGwchroHzEJONWhsobd5KHVVKBffYiUEpZh9iK9wI9ZWkmzY5ROwWQtJLNGHV/VUMLh2M208s4Q==
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
dependencies:
async "^1.5.0"
Update dependency express-jwt to v6.1.0
2021-08-12 01:56:50 +03:00
express-unless "^1.0.0"
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
jsonwebtoken "^8.1.0"
lodash.set "^4.0.0"
🎨Added `absolute_url` flag to public api (#9833) closes #9832 The API _should_ be returning absolute URLs for everything, 3rd party applications require absolute urls to read and display ghost data correctly. Currently they have to concat the blog url and the resource url, which is very uncomfortable. Changing the public api like this would be considered a breaking change however so we've opted to put it behind a query parameter named `absolute_urls`.
2018-08-31 13:02:39 +03:00
express-query-boolean@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/express-query-boolean/-/express-query-boolean-2.0.0.tgz#ea56ac8138e2b95b171b8eee2af88738302941c3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-4dU/1HPm8lkTPR12+HFUXqCarcsC19OKOkb4otLOuADfPYrQMaugPJkSmxNsqwmWYjozvT6vdTiqkgeBHkzOow==
🎨Added `absolute_url` flag to public api (#9833) closes #9832 The API _should_ be returning absolute URLs for everything, 3rd party applications require absolute urls to read and display ghost data correctly. Currently they have to concat the blog url and the resource url, which is very uncomfortable. Changing the public api like this would be considered a breaking change however so we've opted to put it behind a query parameter named `absolute_urls`.
2018-08-31 13:02:39 +03:00
Update dependency express-session to v1.17.2
2021-05-19 23:47:30 +03:00
express-session@1.17.2:
version "1.17.2"
resolved "https://registry.yarnpkg.com/express-session/-/express-session-1.17.2.tgz#397020374f9bf7997f891b85ea338767b30d0efd"
integrity sha512-mPcYcLA0lvh7D4Oqr5aNJFMtBMKPLl++OKKxkHzZ0U0oDq1rpKBnkR5f5vCHR26VeArlTOEF9td4x5IjICksRQ==
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
dependencies:
Update dependency express-session to v1.17.2
2021-05-19 23:47:30 +03:00
cookie "0.4.1"
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
cookie-signature "1.0.6"
debug "2.6.9"
Update dependency express-session to v1.16.2
2019-07-02 03:40:30 +03:00
depd "~2.0.0"
on-headers "~1.0.2"
parseurl "~1.3.3"
Update dependency express-session to v1.17.2
2021-05-19 23:47:30 +03:00
safe-buffer "5.2.1"
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
uid-safe "~2.1.5"
Update dependency express-jwt to v6.1.0
2021-08-12 01:56:50 +03:00
express-unless@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/express-unless/-/express-unless-1.0.0.tgz#ecd1c354c5ccf7709a8a17ece617934e037cccd8"
integrity sha512-zXSSClWBPfcSYjg0hcQNompkFN/MxQQ53eyrzm9BYgik2ut2I7PxAf2foVqBRMYCwWaZx/aWodi+uk76npdSAw==
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
Update dependency gscan to v3.5.4
2020-05-01 13:15:50 +03:00
express@4.17.1, express@^4.16.4:
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
version "4.17.1"
resolved "https://registry.yarnpkg.com/express/-/express-4.17.1.tgz#4491fc38605cf51f8629d39c2b5d026f98a4c134"
integrity sha512-mHJ9O79RqluphRrcw2X/GTh3k9tVv8YcoyY4Kkh4WDMUYKRZUq0h1o0w2rrrxBqM7VoeUVqgb27xlEMXTnYt4g==
dependencies:
accepts "~1.3.7"
array-flatten "1.1.1"
body-parser "1.19.0"
content-disposition "0.5.3"
content-type "~1.0.4"
cookie "0.4.0"
cookie-signature "1.0.6"
debug "2.6.9"
depd "~1.1.2"
encodeurl "~1.0.2"
escape-html "~1.0.3"
etag "~1.8.1"
finalhandler "~1.1.2"
fresh "0.5.2"
merge-descriptors "1.0.1"
methods "~1.1.2"
on-finished "~2.3.0"
parseurl "~1.3.3"
path-to-regexp "0.1.7"
proxy-addr "~2.0.5"
qs "6.7.0"
range-parser "~1.2.1"
safe-buffer "5.1.2"
send "0.17.1"
serve-static "1.14.1"
setprototypeof "1.1.1"
statuses "~1.5.0"
type-is "~1.6.18"
utils-merge "1.0.1"
vary "~1.1.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
extend-shallow@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/extend-shallow/-/extend-shallow-2.0.1.tgz#51af7d614ad9a9f610ea1bafbb989d6b1c56890f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Ua99YUrZqfYQ6huvu5idaxxWiQ8=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
is-extendable "^0.1.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
extend-shallow@^3.0.0, extend-shallow@^3.0.2:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/extend-shallow/-/extend-shallow-3.0.2.tgz#26a71aaf073b39fb2127172746131c2704028db8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Jqcarwc7OfshJxcnRhMcJwQCjbg=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
assign-symbols "^1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-extendable "^1.0.1"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
extend@^3.0.0, extend@^3.0.2, extend@~3.0.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/extend/-/extend-3.0.2.tgz#f8b1136b4071fbd8eb140aff858b1019ec2915fa"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
external-editor@^3.0.3:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/external-editor/-/external-editor-3.1.0.tgz#cb03f740befae03ea4d283caed2741a83f335495"
integrity sha512-hMQ4CX1p1izmuLYyZqLMO/qGNw10wSv9QDCPfzXfyFrOaCSSoRfqE1Kf1s5an66J5JZC62NewG+mK49jOCtQew==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
chardet "^0.7.0"
iconv-lite "^0.4.24"
tmp "^0.0.33"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
extglob@^2.0.4:
version "2.0.4"
resolved "https://registry.yarnpkg.com/extglob/-/extglob-2.0.4.tgz#ad00fe4dc612a9232e8718711dc5cb5ab0285543"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Nmb6QXkELsuBr24CJSkilo6UHHgbekK5UiZgfE6UHD3Eb27YC6oD+bhcT+tJ6cl8dmsgdQxnWlcry8ksBIBLpw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
array-unique "^0.3.2"
define-property "^1.0.0"
expand-brackets "^2.1.4"
extend-shallow "^2.0.1"
fragment-cache "^0.2.1"
regex-not "^1.0.0"
snapdragon "^0.8.1"
to-regex "^3.0.1"
Update dependency @tryghost/zip to v1.1.13
2021-05-07 14:19:21 +03:00
extract-zip@2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/extract-zip/-/extract-zip-2.0.1.tgz#663dca56fe46df890d5f131ef4a06d22bb8ba13a"
integrity sha512-GDhU9ntwuKyGXdZBUgTIe+vXnWj0fppUEtMDL0+idd5Sta8TGpHssn/eusA9mrPr9qNDym6SxAYZjNvCn/9RBg==
dependencies:
debug "^4.1.1"
get-stream "^5.1.0"
yauzl "^2.10.0"
optionalDependencies:
"@types/yauzl" "^2.9.1"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
extsprintf@1.3.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/extsprintf/-/extsprintf-1.3.0.tgz#96918440e3041a7a414f8c52e3c574eb3c3e1e05"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-lpGEQOMEGnpBT4xS48V06zw+HgU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
extsprintf@^1.2.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/extsprintf/-/extsprintf-1.4.0.tgz#e2689f8f356fad62cca65a3a91c5df5f9551692f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-4mifjzVvrWLMplo6kcXfX5VRaS8=
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
Update dependency eslint to v7.27.0
2021-05-24 03:31:56 +03:00
fast-deep-equal@^3.1.1, fast-deep-equal@^3.1.3:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "3.1.3"
resolved "https://registry.yarnpkg.com/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz#3a7d56b559d6cbc3eb512325244e619a65c6c525"
integrity sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==
Update dependency ajv to v6.11.0
2020-02-17 05:16:58 +03:00
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
fast-json-stable-stringify@^2.0.0:
Updated Ignition and @tryghost/errors dependencies no issue - These dependencies needed to be bumped together
2020-05-26 14:51:49 +03:00
version "2.1.0"
resolved "https://registry.yarnpkg.com/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz#874bf69c6f404c2b5d99c481341399fd55892633"
integrity sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
fast-levenshtein@^2.0.6, fast-levenshtein@~2.0.6:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.0.6"
resolved "https://registry.yarnpkg.com/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz#3d8a5c66883a16a30ca8643e851f19baa7797917"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-PYpcZog6FqMMqGQ+hR8Zuqd5eRc=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency supertest to v5
2020-09-25 16:36:48 +03:00
fast-safe-stringify@^2.0.7:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/fast-safe-stringify/-/fast-safe-stringify-2.1.1.tgz#c406a83b6e70d9e35ce3b30a81141df30aeba884"
integrity sha512-W+KJc2dmILlPplD/H4K9l9LcAHAfPtP6BY84uVLXQ6Evcz9Lcg33Y2z1IVblT6xdY54PXYVHEv+0Wpq8Io6zkA==
Update dependency supertest to v5
2020-09-25 16:36:48 +03:00
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
fast-xml-parser@3.19.0:
version "3.19.0"
resolved "https://registry.yarnpkg.com/fast-xml-parser/-/fast-xml-parser-3.19.0.tgz#cb637ec3f3999f51406dd8ff0e6fc4d83e520d01"
integrity sha512-4pXwmBplsCPv8FOY1WRakF970TjNGnGnfbOnLqjlYvMiF1SR3yOHyxMR/YCXpPTOspNF5gwudqktIP4VsWkvBg==
Bumped selected dependencies to unpin sub-dependencies no issue - we've been unpinning dependencies in our libraries to remove duplicates - this commit bumps packages from the Utils repo and NQL, all of which contain changes to unpin their own dependencies
2021-04-19 12:46:47 +03:00
fastq@^1.11.0:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "1.13.0"
resolved "https://registry.yarnpkg.com/fastq/-/fastq-1.13.0.tgz#616760f88a7526bdfc596b7cab8c18938c36b98c"
integrity sha512-YpkpUnK8od0o1hmeSc7UUs/eB/vIPWJYjKck2QKIzAf71Vm1AAQ3EbuZB3g2JIy+pg+ERD0vqI79KyZiB2e2Nw==
Added job-manager & wired up shutdown and testmode - Bottom line - we need to manage shutting down gracefully when doing long-running tasks - To achieve that, we're going to use job queues In this commit: - added new @tryghost/job-manager dependency - added a minimal job service, that handles in passing things like logging and (maybe later) config - job service is wired up to server shutdown, so that the queue finishes before the server exits - also added a new job endpoint to testmode so that it's easy to test job behaviour without needing to do real work
2020-08-11 23:26:34 +03:00
dependencies:
reusify "^1.0.4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
faye-websocket@~0.10.0:
version "0.10.0"
resolved "https://registry.yarnpkg.com/faye-websocket/-/faye-websocket-0.10.0.tgz#4e492f8d04dfb6f89003507f6edbf2d501e7c6f4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-TkkvjQTftviQA1B/btvy1QHnxvQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
websocket-driver ">=0.5.1"
Update dependency @tryghost/zip to v1
2020-04-08 14:57:26 +03:00
fd-slicer@~1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/fd-slicer/-/fd-slicer-1.1.0.tgz#25c7c89cb1f9077f8891bbe61d8f390eae256f1e"
integrity sha1-JcfInLH5B3+IkbvmHY85Dq4lbx4=
dependencies:
pend "~1.2.0"
Update dependency @lodder/grunt-postcss to v3
2020-10-20 11:41:14 +03:00
figures@^3.0.0, figures@^3.2.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "3.2.0"
resolved "https://registry.yarnpkg.com/figures/-/figures-3.2.0.tgz#625c18bd293c604dc4a8ddb2febf0c88341746af"
integrity sha512-yaduQFRKLXYOGgEn6AZau90j3ggSOyiqXU0F9JZfeXYhNa+Jk4X+s45A2zg5jns87GAFa34BBm2kXw4XpNcbdg==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
dependencies:
escape-string-regexp "^1.0.5"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
file-entry-cache@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/file-entry-cache/-/file-entry-cache-5.0.1.tgz#ca0f6efa6dd3d561333fb14515065c2fafdf439c"
integrity sha512-bCg29ictuBaKUwwArK4ouCaqDgLZcysCFLmM/Yn/FDoqndh/9vNuQfXRDvTuXKLxfD/JtZQGKFT8MGcJBK644g==
dependencies:
flat-cache "^2.0.1"
Update Test & linting packages
2021-03-01 04:18:17 +03:00
file-entry-cache@^6.0.1:
version "6.0.1"
resolved "https://registry.yarnpkg.com/file-entry-cache/-/file-entry-cache-6.0.1.tgz#211b2dd9659cb0394b073e7323ac3c933d522027"
integrity sha512-7Gps/XWymbLk2QLYK4NzpMOrYjMhdIxXuIvy2QBsLE6ljuodKvdkWs/cpyJJ3CVIVpH0Oi1Hvg1ovbMzLdFBBg==
Update dependency eslint to v7.15.0
2020-12-07 03:07:07 +03:00
dependencies:
flat-cache "^3.0.4"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
file-extension@~4.0.5:
version "4.0.5"
resolved "https://registry.yarnpkg.com/file-extension/-/file-extension-4.0.5.tgz#ae6cef34c28e7313a92baa4aa955755cacdf0ce3"
integrity sha512-l0rOL3aKkoi6ea7MNZe6OHgqYYpn48Qfflr8Pe9G9JPPTx5A+sfboK91ZufzIs59/lPqh351l0eb6iKU9J5oGg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
file-sync-cmp@^0.1.0:
version "0.1.1"
resolved "https://registry.yarnpkg.com/file-sync-cmp/-/file-sync-cmp-0.1.1.tgz#a5e7a8ffbfa493b43b923bbd4ca89a53b63b612b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-peeo/7+kk7Q7kju9TKiaU7Y7YSs=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
file-uri-to-path@1:
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
version "1.0.0"
resolved "https://registry.yarnpkg.com/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz#553a7b8446ff6f684359c445f1e37a05dacc33dd"
integrity sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
fill-range@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/fill-range/-/fill-range-4.0.0.tgz#d544811d428f98eb06a63dc402d2403c328c38f7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-1USBHUKPmOsGpj3EAtJAPDKMOPc=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
extend-shallow "^2.0.1"
is-number "^3.0.0"
repeat-string "^1.6.1"
to-regex-range "^2.1.0"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
fill-range@^7.0.1:
version "7.0.1"
resolved "https://registry.yarnpkg.com/fill-range/-/fill-range-7.0.1.tgz#1919a6a7c75fe38b2c7c77e5198535da9acdda40"
integrity sha512-qOo9F+dMUmC2Lcb4BbVvnKJxTPjCm+RRpe4gDuGrzkL7mEVl/djYSu2OdQ2Pa302N4oqkSg9ir6jaLWJ2USVpQ==
dependencies:
to-regex-range "^5.0.1"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
finalhandler@~1.1.2:
version "1.1.2"
resolved "https://registry.yarnpkg.com/finalhandler/-/finalhandler-1.1.2.tgz#b7e7d000ffd11938d0fdb053506f6ebabe9f587d"
integrity sha512-aAWcW57uxVNrQZqFXjITpW3sIUQmHGG3qSb9mUah9MgMC4NeWhNOlNjXEYq3HjRAvL6arUviZGGJsBg6z0zsWA==
dependencies:
debug "2.6.9"
encodeurl "~1.0.2"
escape-html "~1.0.3"
on-finished "~2.3.0"
parseurl "~1.3.3"
statuses "~1.5.0"
unpipe "~1.0.0"
Update dependency ghost-ignition to v4.6.3
2021-06-14 20:44:17 +03:00
find-root@1.1.0, find-root@^1.1.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/find-root/-/find-root-1.1.0.tgz#abcfc8ba76f708c42a97b3d685b7e9450bfb9ce4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-NKfW6bec6GfKc0SGx1e07QZY9PE99u0Bft/0rzSD5k3sO/vwkVUpDUKVm5Gpp5Ue3YfShPFTX2070tDs5kB9Ng==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
find-up@5.0.0, find-up@^5.0.0:
Update dependency mocha to v8.1.2
2020-08-25 22:51:28 +03:00
version "5.0.0"
resolved "https://registry.yarnpkg.com/find-up/-/find-up-5.0.0.tgz#4c92819ecb7083561e4f4a240a86be5198f536fc"
integrity sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng==
Update Test & linting packages
2020-07-21 20:38:46 +03:00
dependencies:
Update dependency mocha to v8.1.2
2020-08-25 22:51:28 +03:00
locate-path "^6.0.0"
Update Test & linting packages
2020-07-21 20:38:46 +03:00
path-exists "^4.0.0"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
find-up@^4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/find-up/-/find-up-4.1.0.tgz#97afe7d6cdc0bc5928584b7c8d7b16e8a9aa5d19"
integrity sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==
dependencies:
locate-path "^5.0.0"
path-exists "^4.0.0"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
findup-sync@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/findup-sync/-/findup-sync-3.0.0.tgz#17b108f9ee512dfb7a5c7f3c8b27ea9e1a9c08d1"
integrity sha512-YbffarhcicEhOrm4CtrwdKBdCuz576RLdhJDsIfvNtxUuhdRet1qZcsMjqbePtAseKdAnDyM/IyXbu7PRPRLYg==
dependencies:
detect-file "^1.0.0"
is-glob "^4.0.0"
micromatch "^3.0.4"
resolve-dir "^1.0.1"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
findup-sync@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/findup-sync/-/findup-sync-4.0.0.tgz#956c9cdde804052b881b428512905c4a5f2cdef0"
integrity sha512-6jvvn/12IC4quLBL1KNokxC7wWTvYncaVUYSoxWw7YykPLuRrnv4qdHcSOywOI5RpkOVGeQRtWM8/q+G6W6qfQ==
dependencies:
detect-file "^1.0.0"
is-glob "^4.0.0"
micromatch "^4.0.2"
resolve-dir "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
findup-sync@~0.3.0:
version "0.3.0"
resolved "https://registry.yarnpkg.com/findup-sync/-/findup-sync-0.3.0.tgz#37930aa5d816b777c03445e1966cc6790a4c0b16"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-N5MKpdgWt3fANEXhlmzGeQpMCxY=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
glob "~5.0.0"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
fined@^1.0.1, fined@^1.2.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/fined/-/fined-1.2.0.tgz#d00beccf1aa2b475d16d423b0238b713a2c4a37b"
integrity sha512-ZYDqPLGxDkDhDZBjZBb+oD1+j0rA4E0pXY50eplAAOPg2N/gUBSSk5IM1/QhPfyVo19lJ+CvXpqfvk+b2p/8Ng==
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
expand-tilde "^2.0.2"
is-plain-object "^2.0.3"
object.defaults "^1.1.0"
object.pick "^1.2.0"
parse-filepath "^1.0.1"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
flagged-respawn@^1.0.0, flagged-respawn@^1.0.1:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/flagged-respawn/-/flagged-respawn-1.0.1.tgz#e7de6f1279ddd9ca9aac8a5971d618606b3aab41"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-lNaHNVymajmk0OJMBn8fVUAU1BtDeKIqKoVhk4xAALB57aALg6b4W0MfJ/cUE0g9YBXy5XhSlPIpYIJ7HaY/3Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
flat-cache@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/flat-cache/-/flat-cache-2.0.1.tgz#5d296d6f04bda44a4630a301413bdbc2ec085ec0"
integrity sha512-LoQe6yDuUMDzQAEH8sgmh4Md6oZnc/7PjtwjNFSzveXqSHt6ka9fPBuso7IGf9Rz4uqnSnWiFH2B/zj24a5ReA==
dependencies:
flatted "^2.0.0"
rimraf "2.6.3"
write "1.0.3"
Update dependency eslint to v7.15.0
2020-12-07 03:07:07 +03:00
flat-cache@^3.0.4:
version "3.0.4"
resolved "https://registry.yarnpkg.com/flat-cache/-/flat-cache-3.0.4.tgz#61b0338302b2fe9f957dcc32fc2a87f1c3048b11"
integrity sha512-dm9s5Pw7Jc0GvMYbshN6zchCA9RgQlzzEZX3vylR9IqFfS8XciblUXOKfW6SiuJ0e13eDYZoZV5wdrev7P3Nwg==
dependencies:
flatted "^3.1.0"
rimraf "^3.0.2"
Update dependency mocha to v8.2.0
2020-10-17 00:23:19 +03:00
flat@^5.0.2:
version "5.0.2"
resolved "https://registry.yarnpkg.com/flat/-/flat-5.0.2.tgz#8ca6fe332069ffa9d324c327198c598259ceb241"
integrity sha512-b6suED+5/3rTpUBdG1gupIl8MPFCAMA0QXwmljLhvCUKcUvdE4gWky9zpuGCcXHOsz4J9wPGNWq6OKpmIzz3hQ==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
flatted@^2.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "2.0.2"
resolved "https://registry.yarnpkg.com/flatted/-/flatted-2.0.2.tgz#4575b21e2bcee7434aa9be662f4b7b5f9c2b5138"
integrity sha512-r5wGx7YeOwNWNlCA0wQ86zKyDLMQr+/RB8xy74M4hTphfmjlijTSSXGuH8rnvKZnfT9i+75zmd8jcKdMR4O6jA==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
Update dependency eslint to v7.15.0
2020-12-07 03:07:07 +03:00
flatted@^3.1.0:
Lock file maintenance
2021-08-02 05:46:09 +03:00
version "3.2.2"
resolved "https://registry.yarnpkg.com/flatted/-/flatted-3.2.2.tgz#64bfed5cb68fe3ca78b3eb214ad97b63bedce561"
integrity sha512-JaTY/wtrcSyvXJl4IMFHPKyFur1sE9AUqc0QnhOaJ0CxHtAoIV8pYDzeEfAaNEtGkOfq4gr3LBFmdXW5mOQFnA==
Update dependency eslint to v7.15.0
2020-12-07 03:07:07 +03:00
Lock file maintenance
2021-09-06 03:36:57 +03:00
follow-redirects@^1.14.0:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "1.14.4"
resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.14.4.tgz#838fdf48a8bbdd79e52ee51fb1c94e3ed98b9379"
integrity sha512-zwGkiSXC1MUJG/qmeIFH2HBJx9u0V46QGUe3YR1fXG8bXQxq7fLj0RjLZQ5nubr9qNJUZrH+xUcwXEoXNpfS+g==
Update dependency jwks-rsa to v1.12.1
2021-01-04 08:09:00 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
for-in@^1.0.1, for-in@^1.0.2:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/for-in/-/for-in-1.0.2.tgz#81068d295a8142ec0ac726c6e2200c30fb6d5e80"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-gQaNKVqBQuwKxybG4iAMMPttXoA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
for-own@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/for-own/-/for-own-1.0.0.tgz#c63332f415cedc4b04dbfe70cf836494c53cb44b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-xjMy9BXO3EsE2/5wz4NklMU8tEs=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
for-in "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
foreground-child@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/foreground-child/-/foreground-child-2.0.0.tgz#71b32800c9f15aa8f2f83f4a6bd9bff35d861a53"
integrity sha512-dCIq9FpEcyQyXKCkyzmlPTFNgrCzPudOe+mhvJU5zAtlBnGVy2yKxtfsxK2tQBThwq225jcvBjpw1Gr40uzZCA==
dependencies:
cross-spawn "^7.0.0"
signal-exit "^3.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
forever-agent@~0.6.1:
version "0.6.1"
resolved "https://registry.yarnpkg.com/forever-agent/-/forever-agent-0.6.1.tgz#fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-+8cfDEGt6zf5bFd60e1C2P2sypE=
Update dependency supertest to v5
2020-09-25 16:36:48 +03:00
form-data@^2.3.3:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "2.5.1"
resolved "https://registry.yarnpkg.com/form-data/-/form-data-2.5.1.tgz#f2cbec57b5e59e23716e128fe44d4e5dd23895f4"
integrity sha512-m21N3WOmEEURgk6B9GLOE4RuWOFf28Lhh9qGYeNlGq4VDXUlJy2th2slBNU8Gp8EzloYZOibZJ7t5ecIrFSjVA==
Lock file maintenance
2019-08-01 08:14:51 +03:00
dependencies:
asynckit "^0.4.0"
combined-stream "^1.0.6"
mime-types "^2.1.12"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency supertest to v5
2020-09-25 16:36:48 +03:00
form-data@^3.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "3.0.1"
resolved "https://registry.yarnpkg.com/form-data/-/form-data-3.0.1.tgz#ebd53791b78356a99af9a300d4282c4d5eb9755f"
integrity sha512-RHkBKtLWUVwd7SqRIvCZMEvAMoGUp0XU+seQiZejj0COz3RI3hWP4sCv3gZWWLjJTd7rGwcsF5eKZGii0r/hbg==
Update dependency supertest to v5
2020-09-25 16:36:48 +03:00
dependencies:
asynckit "^0.4.0"
combined-stream "^1.0.8"
mime-types "^2.1.12"
Update metascraper to v5.24.2
2021-08-16 14:12:26 +03:00
form-data@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/form-data/-/form-data-4.0.0.tgz#93919daeaf361ee529584b9b31664dc12c9fa452"
integrity sha512-ETEklSGi5t0QMZuiXoA/Q6vcnxcLQP5vdugSpuAyi6SVGi2clPPp+xgEhuMaHC+zGgn31Kd235W35f7Hykkaww==
dependencies:
asynckit "^0.4.0"
combined-stream "^1.0.8"
mime-types "^2.1.12"
Lock file maintenance
2019-08-01 08:14:51 +03:00
form-data@~2.3.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.3.3"
resolved "https://registry.yarnpkg.com/form-data/-/form-data-2.3.3.tgz#dcce52c05f644f298c6a7ab936bd724ceffbf3a6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-1lLKB2Mu3aGP1Q/2eCOx0fNbRMe7XdwktwOruhfqqd0rIJWwN4Dh+E3hrPSlDCXnSR7UtZ1N38rVXm+6+MEhJQ==
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
dependencies:
asynckit "^0.4.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
combined-stream "^1.0.6"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
mime-types "^2.1.12"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
Update dependency supertest to v5
2020-09-25 16:36:48 +03:00
formidable@^1.2.2:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.2.2"
resolved "https://registry.yarnpkg.com/formidable/-/formidable-1.2.2.tgz#bf69aea2972982675f00865342b982986f6b8dd9"
integrity sha512-V8gLm+41I/8kguQ4/o1D3RIHRmhYFG4pnNyonvua+40rqcEmT4+V71yaZ3B457xbbgCsCfjSPi65u/W6vK1U5Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2021-06-01 18:19:18 +03:00
forwarded@0.2.0:
version "0.2.0"
resolved "https://registry.yarnpkg.com/forwarded/-/forwarded-0.2.0.tgz#2269936428aad4c15c7ebe9779a84bf0b2a81811"
integrity sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
fragment-cache@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/fragment-cache/-/fragment-cache-0.2.1.tgz#4290fad27f13e89be7f33799c6bc5a0abfff0d19"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-QpD60n8T6Jvn8zeZxrxaCr//DRk=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
map-cache "^0.2.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
fresh@0.5.2:
version "0.5.2"
resolved "https://registry.yarnpkg.com/fresh/-/fresh-0.5.2.tgz#3d8cadd90d976569fa835ab1f8e4b23a105605a7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-PYyt2Q2XZWn6g1qx+OSyOhBWBac=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
fs-constants@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/fs-constants/-/fs-constants-1.0.0.tgz#6be0de9be998ce16af8afc24497b9ee9b7ccd9ad"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Extracted `package-json` lib to Utils refs https://github.com/TryGhost/Utils/commit/37ebe723c6867a3f85d5570c0c2abb2ac2b365be - `package-json` was a standalone library using dependency injection so we could pull it out into its own package in Utils - this was done in the commit referenced above - this commit removes the implementation and tests in Ghost and replaces the require in the initialization wrapper with the new package
2021-05-07 14:11:53 +03:00
fs-extra@10.0.0, fs-extra@^10.0.0:
Update dependency fs-extra to v10
2021-05-05 17:51:30 +03:00
version "10.0.0"
resolved "https://registry.yarnpkg.com/fs-extra/-/fs-extra-10.0.0.tgz#9ff61b655dde53fb34a82df84bb214ce802e17c1"
integrity sha512-C5owb14u9eJwizKGdchcDUQeFtlSHHthBk8pbX9Vc1PFZrLombudjDnNns88aYslCyF6IY5SUw3Roz6xShcEIQ==
dependencies:
graceful-fs "^4.2.0"
jsonfile "^6.0.1"
universalify "^2.0.0"
Bumped selected dependencies to unpin sub-dependencies no issue - we've been unpinning dependencies in our libraries to remove duplicates - this commit bumps packages from the Utils repo and NQL, all of which contain changes to unpin their own dependencies
2021-04-19 12:46:47 +03:00
fs-extra@9.1.0, fs-extra@^9.1.0:
Update dependency fs-extra to v9.1.0
2021-01-19 20:55:11 +03:00
version "9.1.0"
resolved "https://registry.yarnpkg.com/fs-extra/-/fs-extra-9.1.0.tgz#5954460c764a8da2094ba3554bf839e6b9a7c86d"
integrity sha512-hcg3ZmepS30/7BSFqRvoo3DOMQu7IjqxO5nCDt+zM9XWjb33Wg7ziNT+Qvqbuc3+gWpzO02JubVyk2G4Zvo1OQ==
dependencies:
at-least-node "^1.0.0"
graceful-fs "^4.2.0"
jsonfile "^6.0.1"
universalify "^2.0.0"
Lock file maintenance
2021-08-16 04:04:05 +03:00
fs-minipass@^1.2.7:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "1.2.7"
resolved "https://registry.yarnpkg.com/fs-minipass/-/fs-minipass-1.2.7.tgz#ccff8570841e7fe4265693da88936c55aed7f7c7"
integrity sha512-GWSSJGFy4e9GUeCcbIkED+bgAoFyj7XF1mV8rma3QW4NIqX9Kyx79N/PF61H5udOV3aY1IaMLs6pGbH71nlCTA==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
minipass "^2.6.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
fs-minipass@^2.0.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/fs-minipass/-/fs-minipass-2.1.0.tgz#7f5036fdbf12c63c169190cbe4199c852271f9fb"
integrity sha512-V/JgOLFCS+R6Vcq0slCuaeWEdNC3ouDlJMNIsacH2VtALiu9mV4LPrHc5cDl8k5aw6J8jwgWWpiTo5RYhmIzvg==
dependencies:
minipass "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
fs.realpath@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/fs.realpath/-/fs.realpath-1.0.0.tgz#1504ad2523158caa40db4a2787cb01411994ea4f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-FQStJSMVjKpA20onh8sBQRmU6k8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Removed grunt-mocha-cli - we no longer rely on grunt for any testing, and call mocha directly
2021-07-07 11:19:13 +03:00
fsevents@~2.3.2:
Update dependency mocha to v8.3.0
2021-02-11 22:44:24 +03:00
version "2.3.2"
resolved "https://registry.yarnpkg.com/fsevents/-/fsevents-2.3.2.tgz#8a526f78b8fdf4623b709e0b975c52c24c02fd1a"
integrity sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==
Update dependency sqlite3 to v5
2021-04-15 16:46:12 +03:00
fstream@^1.0.0, fstream@^1.0.12:
version "1.0.12"
resolved "https://registry.yarnpkg.com/fstream/-/fstream-1.0.12.tgz#4e8ba8ee2d48be4f7d0de505455548eae5932045"
integrity sha512-WvJ193OHa0GHPEL+AycEJgxvBEwyfRkN1vhjca23OaPVMCaLCXTd5qAu82AjTcgP1UJmytkOKb63Ypde7raDIg==
dependencies:
graceful-fs "^4.1.2"
inherits "~2.0.0"
mkdirp ">=0.5 0"
rimraf "2"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
ftp@~0.3.10:
version "0.3.10"
resolved "https://registry.yarnpkg.com/ftp/-/ftp-0.3.10.tgz#9197d861ad8142f3e63d5a83bfe4c59f7330885d"
integrity sha1-kZfYYa2BQvPmPVqDv+TFn3MwiF0=
dependencies:
readable-stream "1.1.x"
xregexp "2.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
function-bind@^1.1.1:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/function-bind/-/function-bind-1.1.1.tgz#a56899d3ea3c9bab874bb9773b7c5ede92f4895d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-yIovAzMX49sF8Yl58fSCWJ5svSLuaibPxXQJFLmBObTuCr0Mf1KiPopGM9NiFjiYBCbfaa2Fh6breQ6ANVTI0A==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
functional-red-black-tree@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/functional-red-black-tree/-/functional-red-black-tree-1.0.1.tgz#1b0ab3bd553b2a0d6399d29c0e3ea0b252078327"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-GwqzvVU7Kg1jmdKcDj6gslIHgyc=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
gauge@~2.7.3:
🙀 Image field naming & new img_url helper (#8364) * 🙀 change database schema for images - rename user/post/tag images - contains all the required changes from the schema change * Refactor helper/meta data - rename cover to cover_image - also rename default settings to match the pattern - rename image to profile_image for user - rename image to feature_image for tags/posts * {{image}} >>> {{img_url}} - rename - change the functionality - attr is required - e.g. {{img_url feature_image}} * gscan 1.0.0 - update yarn.lock * Update casper reference: 1.0-changes - see https://github.com/TryGhost/Casper/commit/5487b4da8d2ad7c6a6d003a3a0ee1a860e0de34d
2017-04-24 20:21:47 +03:00
version "2.7.4"
resolved "https://registry.yarnpkg.com/gauge/-/gauge-2.7.4.tgz#2c03405c7538c39d7eb37b317022e325fb018bf7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-LANAXHU4w51+s3sxcCLjJfsBi/c=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
aproba "^1.0.3"
console-control-strings "^1.0.0"
has-unicode "^2.0.0"
object-assign "^4.1.0"
signal-exit "^3.0.0"
string-width "^1.0.1"
strip-ansi "^3.0.1"
wide-align "^1.1.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
gaze@^1.1.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/gaze/-/gaze-1.1.3.tgz#c441733e13b927ac8c0ff0b4c3b033f28812924a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-BRdNm8hbWzFzWHERTrejLqwHDfS4GibPoq5wjTPIoJHoBtKGPg3xAFfxmM+9ztbXelxcf2hwQcaz1PtmFeue8g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
globule "^1.0.0"
Update dependency @tryghost/adapter-manager to v0.1.4
2020-05-08 18:58:44 +03:00
gelf-stream@1.1.1, gelf-stream@^1.1.1:
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/gelf-stream/-/gelf-stream-1.1.1.tgz#9cea9b6386ac301c741838ca3cb91e66dbfbf669"
integrity sha1-nOqbY4asMBx0GDjKPLkeZtv79mk=
dependencies:
gelfling "^0.3.0"
gelfling@^0.3.0:
version "0.3.1"
resolved "https://registry.yarnpkg.com/gelfling/-/gelfling-0.3.1.tgz#336a98f81510f9ae0af2a494e17468a116a9dc04"
integrity sha1-M2qY+BUQ+a4K8qSU4XRooRap3AQ=
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
gensync@^1.0.0-beta.2:
version "1.0.0-beta.2"
resolved "https://registry.yarnpkg.com/gensync/-/gensync-1.0.0-beta.2.tgz#32a6ee76c3d7f52d46b2b1ae5d93fea8580a25e0"
integrity sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg==
Lock file maintenance
2021-05-05 18:56:03 +03:00
get-caller-file@^2.0.5:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
version "2.0.5"
resolved "https://registry.yarnpkg.com/get-caller-file/-/get-caller-file-2.0.5.tgz#4f94412a82db32f36e3b0b9741f8a97feb031f7e"
integrity sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==
Lock file maintenance
2021-05-05 18:56:03 +03:00
get-intrinsic@^1.0.2:
version "1.1.1"
resolved "https://registry.yarnpkg.com/get-intrinsic/-/get-intrinsic-1.1.1.tgz#15f59f376f855c446963948f0d24cd3637b4abc6"
integrity sha512-kWZrnVM42QCiEA2Ig1bG8zjoIMOgxWwYCEeNdwY6Tv/cOSeGpcoX4pXHfKUxNKVoArnrEr2e9srnAxxGIraS9Q==
dependencies:
function-bind "^1.1.1"
has "^1.0.3"
has-symbols "^1.0.1"
Removed unused release-utils dependency no issue - this is no longer needed because we moved the main release code out
2020-04-03 16:25:28 +03:00
get-stream@^4.1.0:
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
version "4.1.0"
resolved "https://registry.yarnpkg.com/get-stream/-/get-stream-4.1.0.tgz#c1b255575f3dc21d59bfc79cd3d2b46b1c3a54b5"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-GMat4EJ5161kIy2HevLlr4luNjBgvmj413KaQA7jt4V8B4RDsfpHk7WQ9GVqfYyyx8OS/L66Kox+rJRNklLK7w==
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
dependencies:
pump "^3.0.0"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
get-stream@^5.1.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "5.2.0"
resolved "https://registry.yarnpkg.com/get-stream/-/get-stream-5.2.0.tgz#4966a1795ee5ace65e706c4b7beb71257d6e22d3"
integrity sha512-nBF+F1rAZVCu/p7rjzgA+Yb4lfYXrpl7a6VmJrU8wF9I1CKvP/QwPNZHnOlwbTkY6dvtFIzFMSyQXbLoTQPRpA==
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
dependencies:
pump "^3.0.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
get-uri@^2.0.0:
version "2.0.4"
resolved "https://registry.yarnpkg.com/get-uri/-/get-uri-2.0.4.tgz#d4937ab819e218d4cb5ae18e4f5962bef169cc6a"
integrity sha512-v7LT/s8kVjs+Tx0ykk1I+H/rbpzkHvuIq87LmeXptcf5sNWm9uQiwjNAt94SJPA1zOlCntmnOlJvVWKmzsxG8Q==
dependencies:
data-uri-to-buffer "1"
debug "2"
extend "~3.0.2"
file-uri-to-path "1"
ftp "~0.3.10"
readable-stream "2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
get-value@^2.0.3, get-value@^2.0.6:
version "2.0.6"
resolved "https://registry.yarnpkg.com/get-value/-/get-value-2.0.6.tgz#dc15ca1c672387ca76bd37ac0a395ba2042a2c28"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-3BXKHGcjh8p2vTesCjlbogQqLCg=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
getobject@~1.0.0:
Lock file maintenance
2021-08-23 05:05:27 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/getobject/-/getobject-1.0.2.tgz#25ec87a50370f6dcc3c6ba7ef43c4c16215c4c89"
integrity sha512-2zblDBaFcb3rB4rF77XVnuINOE2h2k/OnqXAiy0IrTxUfV1iFp3la33oAQVY9pCpWU268WFYVt2t71hlMuLsOg==
Lock file maintenance
2019-08-01 08:14:51 +03:00
Update dependency knex to v0.19.3
2019-09-02 03:32:28 +03:00
getopts@2.2.5:
version "2.2.5"
resolved "https://registry.yarnpkg.com/getopts/-/getopts-2.2.5.tgz#67a0fe471cacb9c687d817cab6450b96dde8313b"
integrity sha512-9jb7AW5p3in+IiJWhQiZmmwkpLaR/ccTWdWQCtZM66HJcHHLegowh4q4tSD7gouUyeNvFWRavfK9GXosQHDpFA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
getpass@^0.1.1:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "0.1.7"
resolved "https://registry.yarnpkg.com/getpass/-/getpass-0.1.7.tgz#5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Xv+OPmhNVprkyysSgmBOi6YhSfo=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
assert-plus "^1.0.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
ghost-ignition@4.6.2:
Updated selected Utils packages to unpin dependencies no issue - I recently unpinned dependencies in the Utils monorepo so we can avoid multiple versions of the same package - this commit bumps all the packages that I published, that do not have other changes. Other team members should merge these
2021-04-16 15:59:15 +03:00
version "4.6.2"
resolved "https://registry.yarnpkg.com/ghost-ignition/-/ghost-ignition-4.6.2.tgz#c88166eb93bfcc94408c84783c62838111154b71"
integrity sha512-ls78Gr5pbwjzMySo7eYmAW4aOAjbNHxM54GKucFrTeOoGZHgGlOaXJMhCwLD68UW9ZD35yXsU9KhzSnNpUhemg==
dependencies:
"@tryghost/bunyan-rotating-filestream" "0.0.7"
"@tryghost/elasticsearch-bunyan" "0.1.1"
bunyan "1.8.15"
bunyan-loggly "1.4.2"
caller "1.0.1"
debug "4.3.1"
find-root "1.1.0"
fs-extra "9.1.0"
gelf-stream "1.1.1"
json-stringify-safe "5.0.1"
lodash "4.17.21"
moment "2.27.0"
nconf "0.11.2"
prettyjson "1.2.1"
uuid "8.3.2"
Lock file maintenance
2021-09-20 03:12:18 +03:00
ghost-ignition@4.6.3, ghost-ignition@^4.2.4, ghost-ignition@^4.6.2:
✨ Added detection of conditional partials in themes refs https://github.com/TryGhost/Team/issues/781 refs https://github.com/TryGhost/Team/issues/774 - Previous versions of gscan weren't able to detect partial usage inside of a heprer, e.g.: "{{#if author}}{{> "missingpartial"}}{{/if}}". It's important to be able to detect these on theme upload/validation stage to avoid errors during the runtime. - The updated version provides additional information about used and unused partials and helpers. - With this change users might start seeing a "fatal" error during an upload/activation of a theme previously passing validation. Currently active themes with partials used in the context will still allow for a boot, but will log a 422 error pointing to missing partial.
2021-06-16 18:53:16 +03:00
version "4.6.3"
resolved "https://registry.yarnpkg.com/ghost-ignition/-/ghost-ignition-4.6.3.tgz#eea33bbd84e4e26096f9b7c8838f972acdab7533"
integrity sha512-F9Kms91NG7miRH8FdmvHvWGt9crVHaKYap3gFrGekCi0TTpssN6duGi0NERSqAcf+7gC7QXT3BP/yCWwBr3fqw==
dependencies:
"@tryghost/bunyan-rotating-filestream" "0.0.7"
"@tryghost/elasticsearch-bunyan" "0.1.1"
"@tryghost/root-utils" "^0.1.0"
bunyan "1.8.15"
bunyan-loggly "1.4.2"
caller "1.0.1"
debug "4.3.1"
find-root "1.1.0"
fs-extra "9.1.0"
gelf-stream "1.1.1"
json-stringify-safe "5.0.1"
lodash "4.17.21"
moment "2.27.0"
nconf "0.11.2"
prettyjson "1.2.1"
uuid "8.3.2"
Updated ghost-storage-base to v0.0.6 no issue - this package has been bumped to support Node 12 + 14 - AFAICT I added it to the Renovate list back when we had some timezone issues with moment, but we've since pinned the version of moment so we shouldn't experience that now - therefore this commit also removes it from the Renovate ignore list
2021-09-09 00:59:22 +03:00
ghost-storage-base@0.0.6:
version "0.0.6"
resolved "https://registry.yarnpkg.com/ghost-storage-base/-/ghost-storage-base-0.0.6.tgz#b390e6a501af31ec8463aafa3286a25de6da08c8"
integrity sha512-7t77iWWZA1Pk7X5O9cemMRb+DDisljUN2NEd06GNZ+Q43DtCkfLuTkoj0KRkT8bJf2yapsaVtXu5sIRYql4g0Q==
😱 🎨 Refactor storage adapter (#8229) refs #7687 There are four main changes in this PR: we have outsourced the base storage adapter to npm, because for storage developers it's annoying to inherit from a script within Ghost we hacked theme storage handling into the default local storage adapter - this was reverted, instead we have added a static theme storage here use classes instead of prototyping optimise the storage adapter in general - everything is explained in each commit ---- * rename local-file-store to LocalFileStorage I would like to keep the name pattern i have used for scheduling. If a file is a class, the file name reflects the class name. We can discuss this, if concerns are raised. * Transform LocalFileStorage to class and inherit from new base - inherit from npm ghost-storage-base - rewrite to class - no further refactoring, happens later * Rename core/test/unit/storage/local-file-store_spec.js -> core/test/unit/storage/LocalFileStorage_spec.js * Fix wrong require in core/test/unit/storage/LocalFileStorage_spec.js * remove base storage and test - see https://github.com/kirrg001/Ghost-Storage-Base - the test has moved to this repo as well * Use npm ghost-storage-base in storage/index.js * remove the concept of getStorage('themes') This concept was added when we added themes as a feature. Back then, we have changed the local storage adapter to support images and themes. This has added some hacks into the local storage adapters. We want to revert this change and add a simple static theme storage. Will adapt the api/themes layer in the next commits. * Revert LocalFileStorage - revert serve - revert delete * add storagePath as property to LocalFileStorage - define one property which holds the storage path - could be considered to pass from outside, but found that not helpful, as other storage adapters do not need this property - IMPORTANT: save has no longer a targetDir option, because this was used to pass the alternative theme storage path - IMPORTANT: exists has now an alternative targetDir, this makes sense, because - you can either ask the storage exists('my-file') and it will look in the base storage path - or you pass a specific path where to look exists('my-file', /path/to/dir) * LocalFileStorage: get rid of store pattern - getUniqueFileName(THIS) - this doesn't make sense, instances always have access to this by default * Add static theme storage - inherits from the local file storage, because they both operate on the file system - IMPORTANT: added a TODO to consider a merge of themes/loader and themes/storage - but will be definitely not part of this PR * Use new static theme storage in api/themes - storage functions are simplified! * Add https://github.com/kirrg001/Ghost-Storage-Base as dependency - tarball for now, as i am still testing - will release if PR review get's accepted * Adapt tests and jscs/jshint * 🐛 fix storage.read in favicon utility - wrong implementation of error handling * 🎨 optimise error messages for custom storage adapter errors * little renaming in the storage utlity - purpose is to have access to the custom storage instance and to the custom storage class - see next commit why * optimise instanceof base storage - instanceof is always tricky in javascript - if multiple modules exist, it can happen that instanceof is false * fix getTargetDir - the importer uses the `targetDir` option to ensure that images land in the correct folder * ghost-storage-base@0.0.1 package.json dependency
2017-04-05 17:10:34 +03:00
dependencies:
Updated ghost-storage-base to v0.0.6 no issue - this package has been bumped to support Node 12 + 14 - AFAICT I added it to the Renovate list back when we had some timezone issues with moment, but we've since pinned the version of moment so we shouldn't experience that now - therefore this commit also removes it from the Renovate ignore list
2021-09-09 00:59:22 +03:00
moment "2.27.0"
😱 🎨 Refactor storage adapter (#8229) refs #7687 There are four main changes in this PR: we have outsourced the base storage adapter to npm, because for storage developers it's annoying to inherit from a script within Ghost we hacked theme storage handling into the default local storage adapter - this was reverted, instead we have added a static theme storage here use classes instead of prototyping optimise the storage adapter in general - everything is explained in each commit ---- * rename local-file-store to LocalFileStorage I would like to keep the name pattern i have used for scheduling. If a file is a class, the file name reflects the class name. We can discuss this, if concerns are raised. * Transform LocalFileStorage to class and inherit from new base - inherit from npm ghost-storage-base - rewrite to class - no further refactoring, happens later * Rename core/test/unit/storage/local-file-store_spec.js -> core/test/unit/storage/LocalFileStorage_spec.js * Fix wrong require in core/test/unit/storage/LocalFileStorage_spec.js * remove base storage and test - see https://github.com/kirrg001/Ghost-Storage-Base - the test has moved to this repo as well * Use npm ghost-storage-base in storage/index.js * remove the concept of getStorage('themes') This concept was added when we added themes as a feature. Back then, we have changed the local storage adapter to support images and themes. This has added some hacks into the local storage adapters. We want to revert this change and add a simple static theme storage. Will adapt the api/themes layer in the next commits. * Revert LocalFileStorage - revert serve - revert delete * add storagePath as property to LocalFileStorage - define one property which holds the storage path - could be considered to pass from outside, but found that not helpful, as other storage adapters do not need this property - IMPORTANT: save has no longer a targetDir option, because this was used to pass the alternative theme storage path - IMPORTANT: exists has now an alternative targetDir, this makes sense, because - you can either ask the storage exists('my-file') and it will look in the base storage path - or you pass a specific path where to look exists('my-file', /path/to/dir) * LocalFileStorage: get rid of store pattern - getUniqueFileName(THIS) - this doesn't make sense, instances always have access to this by default * Add static theme storage - inherits from the local file storage, because they both operate on the file system - IMPORTANT: added a TODO to consider a merge of themes/loader and themes/storage - but will be definitely not part of this PR * Use new static theme storage in api/themes - storage functions are simplified! * Add https://github.com/kirrg001/Ghost-Storage-Base as dependency - tarball for now, as i am still testing - will release if PR review get's accepted * Adapt tests and jscs/jshint * 🐛 fix storage.read in favicon utility - wrong implementation of error handling * 🎨 optimise error messages for custom storage adapter errors * little renaming in the storage utlity - purpose is to have access to the custom storage instance and to the custom storage class - see next commit why * optimise instanceof base storage - instanceof is always tricky in javascript - if multiple modules exist, it can happen that instanceof is false * fix getTargetDir - the importer uses the `targetDir` option to ensure that images land in the correct folder * ghost-storage-base@0.0.1 package.json dependency
2017-04-05 17:10:34 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
github-from-package@0.0.0:
version "0.0.0"
resolved "https://registry.yarnpkg.com/github-from-package/-/github-from-package-0.0.0.tgz#97fb5d96bfde8973313f20e8288ef9a167fa64ce"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-l/tdlr/eiXMxPyDoKI75oWf6ZM4=
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Removed grunt-mocha-cli - we no longer rely on grunt for any testing, and call mocha directly
2021-07-07 11:19:13 +03:00
glob-parent@^5.0.0, glob-parent@^5.1.2, glob-parent@~5.1.2:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "5.1.2"
resolved "https://registry.yarnpkg.com/glob-parent/-/glob-parent-5.1.2.tgz#869832c58034fe68a4093c17dc15e8340d8401c4"
integrity sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==
Update Test & linting packages
2019-08-16 22:07:23 +03:00
dependencies:
is-glob "^4.0.1"
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
glob@7.1.7, glob@^7.0.0, glob@^7.0.3, glob@^7.1.2, glob@^7.1.3, glob@^7.1.4, glob@^7.1.6, glob@~7.1.1, glob@~7.1.6:
Update dependency glob to v7.1.7
2021-05-07 01:37:19 +03:00
version "7.1.7"
resolved "https://registry.yarnpkg.com/glob/-/glob-7.1.7.tgz#3b193e9233f01d42d0b3f78294bbeeb418f94a90"
integrity sha512-OvD9ENzPLbegENnYP5UUfJIirTg4+XwMWGaQfQTY0JenxNvvIKP3U3/tAQSPIu/lHxXYSZmpXlUHeqAIdKzBLQ==
dependencies:
fs.realpath "^1.0.0"
inflight "^1.0.4"
inherits "2"
minimatch "^3.0.4"
once "^1.3.0"
path-is-absolute "^1.0.0"
Update dependency glob to v7.2.0
2021-09-23 04:03:51 +03:00
glob@7.2.0:
version "7.2.0"
resolved "https://registry.yarnpkg.com/glob/-/glob-7.2.0.tgz#d15535af7732e02e948f4c41628bd910293f6023"
integrity sha512-lmLf6gtyrPq8tTjSmrO94wBeQbFR3HbLHbuyD69wuyQkImp2hWqMGB47OX65FBkPffO641IP9jWa1z4ivqG26Q==
dependencies:
fs.realpath "^1.0.0"
inflight "^1.0.4"
inherits "2"
minimatch "^3.0.4"
once "^1.3.0"
path-is-absolute "^1.0.0"
Update mocha to version 3.3.0 🚀 (#8376) * chore(package): update mocha to version 3.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-05-02 14:33:47 +03:00
glob@^6.0.1:
version "6.0.4"
resolved "https://registry.yarnpkg.com/glob/-/glob-6.0.4.tgz#0f08860f6a155127b2fadd4f9ce24b1aab6e4d22"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-DwiGD2oVUSey+t1PnOJLGqtuTSI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
inflight "^1.0.4"
inherits "2"
Update mocha to version 3.3.0 🚀 (#8376) * chore(package): update mocha to version 3.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-05-02 14:33:47 +03:00
minimatch "2 || 3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
once "^1.3.0"
path-is-absolute "^1.0.0"
Update dependency glob to v7
2019-07-04 07:39:11 +03:00
glob@~5.0.0:
version "5.0.15"
resolved "https://registry.yarnpkg.com/glob/-/glob-5.0.15.tgz#1bc936b9e02f4a603fcc222ecf7633d30b8b93b1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-G8k2ueAvSmA/zCIuz3Yz0wuLk7E=
Update dependency glob to v7
2019-07-04 07:39:11 +03:00
dependencies:
inflight "^1.0.4"
inherits "2"
minimatch "2 || 3"
once "^1.3.0"
path-is-absolute "^1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
global-modules@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/global-modules/-/global-modules-1.0.0.tgz#6d770f0eb523ac78164d72b5e71a8877265cc3ea"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-sKzpEkf11GpOFuw0Zzjzmt4B4UZwjOcG757PPvrfhxcLFbq0wpsgpOqxpxtxFiCG4DtG93M6XRVbF2oGdev7bg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
global-prefix "^1.0.1"
is-windows "^1.0.1"
resolve-dir "^1.0.0"
global-prefix@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/global-prefix/-/global-prefix-1.0.2.tgz#dbf743c6c14992593c655568cb66ed32c0122ebe"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-2/dDxsFJklk8ZVVoy2btMsASLr4=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
expand-tilde "^2.0.2"
homedir-polyfill "^1.0.1"
ini "^1.3.4"
is-windows "^1.0.1"
which "^1.2.14"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
globals@^11.1.0:
version "11.12.0"
resolved "https://registry.yarnpkg.com/globals/-/globals-11.12.0.tgz#ab8795338868a0babd8525758018c2a7eb95c42e"
integrity sha512-WOBp/EEGUiIsJSp7wcv/y6MO+lV9UoncWqxuFfm8eBwzWNgyfBd6Gz+IeKQ9jCmyhoH99g15M3T+QaVHFjizVA==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
globals@^12.1.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "12.4.0"
resolved "https://registry.yarnpkg.com/globals/-/globals-12.4.0.tgz#a18813576a41b00a24a97e7f815918c2e19925f8"
integrity sha512-BWICuzzDvDoH54NHKCseDanAhE3CeDorgDL5MT6LMXXj2WCnd9UC2szdk4AWLfjdgNBCXLUanXYcpBBKOSWGwg==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
dependencies:
type-fest "^0.8.1"
Update dependency eslint to v7.28.0
2021-06-05 02:10:06 +03:00
globals@^13.6.0, globals@^13.9.0:
Lock file maintenance
2021-08-16 04:04:05 +03:00
version "13.11.0"
resolved "https://registry.yarnpkg.com/globals/-/globals-13.11.0.tgz#40ef678da117fe7bd2e28f1fab24951bd0255be7"
integrity sha512-08/xrJ7wQjK9kkkRoI3OFUBbLx4f+6x3SGwcPvQ0QH6goFDrOU2oyAWrmh3dJezu65buo+HBMzAMQy6rovVC3g==
Update dependency eslint to v7.22.0
2021-03-13 02:16:42 +03:00
dependencies:
type-fest "^0.20.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
globule@^1.0.0:
Lock file maintenance
2021-08-23 05:05:27 +03:00
version "1.3.3"
resolved "https://registry.yarnpkg.com/globule/-/globule-1.3.3.tgz#811919eeac1ab7344e905f2e3be80a13447973c2"
integrity sha512-mb1aYtDbIjTu4ShMB85m3UzjX9BVKe9WCzsnfMSZk+K5GpIbBOexgg4PPCt5eHDEG5/ZQAUX2Kct02zfiPLsKg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
glob "~7.1.1"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
lodash "~4.17.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
minimatch "~3.0.2"
✨ Added capture of geolocation during member signup/signin no issue - updated `@tryghost/members-api` which now includes geolocation lookup from IP address during member signup and signin when geolocation data doesn't already exist
2020-02-27 13:46:37 +03:00
got@9.6.0, got@^9.6.0:
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
version "9.6.0"
resolved "https://registry.yarnpkg.com/got/-/got-9.6.0.tgz#edf45e7d67f99545705de1f7bbeeeb121765ed85"
integrity sha512-R7eWptXuGYxwijs0eV+v3o6+XH1IqVK8dJOEecQfTmkncw9AV4dcw/Dhxi8MdlqPthxxpZyizMzyg8RTmEsG+Q==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
"@sindresorhus/is" "^0.14.0"
"@szmarczak/http-timer" "^1.1.2"
cacheable-request "^6.0.0"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
decompress-response "^3.3.0"
duplexer3 "^0.1.4"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
get-stream "^4.1.0"
lowercase-keys "^1.0.1"
mimic-response "^1.0.1"
p-cancelable "^1.0.0"
to-readable-stream "^1.0.0"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
url-parse-lax "^3.0.0"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
got@~11.8.2:
version "11.8.2"
resolved "https://registry.yarnpkg.com/got/-/got-11.8.2.tgz#7abb3959ea28c31f3576f1576c1effce23f33599"
integrity sha512-D0QywKgIe30ODs+fm8wMZiAcZjypcCodPNuMz5H9Mny7RJ+IjJ10BdmGW7OM7fHXP+O7r6ZwapQ/YQmMSvB0UQ==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
dependencies:
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
"@sindresorhus/is" "^4.0.0"
"@szmarczak/http-timer" "^4.0.5"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
"@types/cacheable-request" "^6.0.1"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
"@types/responselike" "^1.0.0"
cacheable-lookup "^5.0.3"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
cacheable-request "^7.0.1"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
decompress-response "^6.0.0"
http2-wrapper "^1.0.0-beta.5.2"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
lowercase-keys "^2.0.0"
p-cancelable "^2.0.0"
responselike "^2.0.0"
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
graceful-fs@^4.1.2, graceful-fs@^4.1.6, graceful-fs@^4.2.0, graceful-fs@^4.2.6:
Lock file maintenance
2021-08-09 03:03:02 +03:00
version "4.2.8"
resolved "https://registry.yarnpkg.com/graceful-fs/-/graceful-fs-4.2.8.tgz#e412b8d33f5e006593cbd3cee6df9f2cebbe802a"
integrity sha512-qkIilPUYcNhJpd33n0GBXTB1MMPp14TxEsEs0pTrsSVucApsYzW5V+Q8Qxhik6KU3evy+qkAAowTByymK0avdg==
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
growl@1.10.5:
version "1.10.5"
resolved "https://registry.yarnpkg.com/growl/-/growl-1.10.5.tgz#f2735dc2283674fa67478b10181059355c369e5e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-qBr4OuELkhPenW6goKVXiv47US3clb3/IbuWF9KNKEijAy9oeHxU9IgzjvJhHkUzhaj7rOUD7+YGWqUjLp5oSA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
grunt-bg-shell@2.3.3:
version "2.3.3"
resolved "https://registry.yarnpkg.com/grunt-bg-shell/-/grunt-bg-shell-2.3.3.tgz#139ae8f9c76f68a0db4ee9dbbd4ec825b9227fff"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-E5ro+cdvaKDbTunbvU7IJbkif/8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
grunt-cli@~1.4.2:
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "1.4.3"
resolved "https://registry.yarnpkg.com/grunt-cli/-/grunt-cli-1.4.3.tgz#22c9f1a3d2780bf9b0d206e832e40f8f499175ff"
integrity sha512-9Dtx/AhVeB4LYzsViCjUQkd0Kw0McN2gYpdmGYKtE2a5Yt7v1Q+HYZVWhqXc/kGnxlMtqKDxSwotiGeFmkrCoQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Lock file maintenance
2021-06-01 18:19:18 +03:00
grunt-known-options "~2.0.0"
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
interpret "~1.1.0"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
liftup "~3.0.1"
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
nopt "~4.0.1"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
v8flags "~3.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
grunt-contrib-clean@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-clean/-/grunt-contrib-clean-2.0.0.tgz#3be7ca480da4b740aa5e9d863e2f7e8b24f8a68b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-g5ZD3ORk6gMa5ugZosLDQl3dZO7cI3R14U75hTM+dVLVxdMNJCPVmwf9OUt4v4eWgpKKWWoVK9DZc1amJp4nQw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
async "^2.6.1"
rimraf "^2.6.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
grunt-contrib-compress@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-compress/-/grunt-contrib-compress-2.0.0.tgz#c003a1dc5e01c42a244ddb189c01a4396208a335"
integrity sha512-r/dAGx4qG+rmBFF4lb/hTktW2huGMGxkSLf9msh3PPtq0+cdQRQerZJ30UKevX3BLQsohwLzO0p1z/LrH6aKXQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
adm-zip "^0.5.1"
archiver "^5.1.0"
chalk "^4.1.0"
lodash "^4.17.20"
pretty-bytes "^5.4.1"
stream-buffers "^3.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
grunt-contrib-copy@1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-copy/-/grunt-contrib-copy-1.0.0.tgz#7060c6581e904b8ab0d00f076e0a8f6e3e7c3573"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-cGDGWB6QS4qw0A8HbgqPbj58NXM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
chalk "^1.1.1"
file-sync-cmp "^0.1.0"
Pin dependency grunt-contrib-symlink to 1.0.0
2019-07-02 12:05:35 +03:00
grunt-contrib-symlink@1.0.0:
✨ Added pre-commit hook to handle submodules (#8302) refs #8235 Usage: - for existing development setups: `grunt symlink` (will create the pre-commit symlink) - for fresh development setups: `npm run init` (symlinking happens as part of the typical set up) - ✨ Added pre-commit hook to handle submodules - Checks to see if there are any submodules about to be committed - Output matches closely to `git st` to make it easy to read - Requires interaction from the committer to accept that this really should be committed - ✨ Use grunt symlink to register githooks - Grunt symlink will make a link to the pre-commit hook - It ONLY does this if there isn't already a pre-commit hook, so won't overwrite anything - It does this as part of npm run init, not grunt init, because a release repo would NEVER want this - This is a dev tool, that configures the repo for development
2017-04-13 10:26:48 +03:00
version "1.0.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-symlink/-/grunt-contrib-symlink-1.0.0.tgz#c83616c035711a6c0062a2810cf1c77ffc6bed2b"
Pin dependency grunt-contrib-symlink to 1.0.0
2019-07-02 12:05:35 +03:00
integrity sha1-yDYWwDVxGmwAYqKBDPHHf/xr7Ss=
✨ Added pre-commit hook to handle submodules (#8302) refs #8235 Usage: - for existing development setups: `grunt symlink` (will create the pre-commit symlink) - for fresh development setups: `npm run init` (symlinking happens as part of the typical set up) - ✨ Added pre-commit hook to handle submodules - Checks to see if there are any submodules about to be committed - Output matches closely to `git st` to make it easy to read - Requires interaction from the committer to accept that this really should be committed - ✨ Use grunt symlink to register githooks - Grunt symlink will make a link to the pre-commit hook - It ONLY does this if there isn't already a pre-commit hook, so won't overwrite anything - It does this as part of npm run init, not grunt init, because a release repo would NEVER want this - This is a dev tool, that configures the repo for development
2017-04-13 10:26:48 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
grunt-contrib-watch@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-watch/-/grunt-contrib-watch-1.1.0.tgz#c143ca5b824b288a024b856639a5345aedb78ed4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-yGweN+0DW5yM+oo58fRu/XIRrPcn3r4tQx+nL7eMRwjpvk+rQY6R8o94BPK0i2UhTg9FN21hS+m8vR8v9vXfeg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
async "^2.6.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
gaze "^1.1.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
lodash "^4.17.10"
tiny-lr "^1.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
grunt-express-server@0.5.4:
version "0.5.4"
resolved "https://registry.yarnpkg.com/grunt-express-server/-/grunt-express-server-0.5.4.tgz#8ce79c335c6cbb9ef50ee1dfaa61942028f43aeb"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Q9sTDOwxC46uviL1/LSXFflTMv+/WnwANtzxD7hwnEXaej79LS1AUZlWc/O5P+CWjKG69/1xJFn+CVP94fOQ6Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency grunt to v1.4.1
2021-05-25 04:40:38 +03:00
grunt-known-options@~2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/grunt-known-options/-/grunt-known-options-2.0.0.tgz#cac641e897f9a0a680b8c9839803d35f3325103c"
integrity sha512-GD7cTz0I4SAede1/+pAbmJRG44zFLPipVtdL9o3vqx9IEyb7b4/Y3s7r6ofI3CchR5GvYJ+8buCSioDv5dQLiA==
Update dependency grunt to v1.3.0
2020-08-25 14:59:30 +03:00
grunt-legacy-log-utils@~2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/grunt-legacy-log-utils/-/grunt-legacy-log-utils-2.1.0.tgz#49a8c7dc74051476dcc116c32faf9db8646856ef"
integrity sha512-lwquaPXJtKQk0rUM1IQAop5noEpwFqOXasVoedLeNzaibf/OPWjKYvvdqnEHNmU+0T0CaReAXIbGo747ZD+Aaw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency grunt to v1.3.0
2020-08-25 14:59:30 +03:00
chalk "~4.1.0"
lodash "~4.17.19"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency grunt to v1.3.0
2020-08-25 14:59:30 +03:00
grunt-legacy-log@~3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/grunt-legacy-log/-/grunt-legacy-log-3.0.0.tgz#1c6eaf92371ea415af31ea84ce50d434ef6d39c4"
integrity sha512-GHZQzZmhyq0u3hr7aHW4qUH0xDzwp2YXldLPZTCjlOeGscAOWWPftZG3XioW8MasGp+OBRIu39LFx14SLjXRcA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
colors "~1.1.2"
Update dependency grunt to v1.3.0
2020-08-25 14:59:30 +03:00
grunt-legacy-log-utils "~2.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
hooker "~0.2.3"
Update dependency grunt to v1.3.0
2020-08-25 14:59:30 +03:00
lodash "~4.17.19"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
grunt-legacy-util@~2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/grunt-legacy-util/-/grunt-legacy-util-2.0.1.tgz#0f929d13a2faf9988c9917c82bff609e2d9ba255"
integrity sha512-2bQiD4fzXqX8rhNdXkAywCadeqiPiay0oQny77wA2F3WF4grPJXCvAcyoWUJV+po/b15glGkxuSiQCK299UC2w==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
async "~3.2.0"
exit "~0.1.2"
getobject "~1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
hooker "~0.2.3"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
lodash "~4.17.21"
Update dependency grunt to v1.3.0
2020-08-25 14:59:30 +03:00
underscore.string "~3.3.5"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
which "~2.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
grunt-shell@3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/grunt-shell/-/grunt-shell-3.0.1.tgz#24e783901543c7269980d534902bedfb94e7ec9f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-C8eR4frw/NmIFIwSvzSLS4wOQBUzC+z6QhrKPzwt/tlaIqlzH35i/O2MggVOBj2Sh1tbaAqpASWxGiGsi4JMIQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
chalk "^2.4.1"
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 21:45:29 +03:00
npm-run-path "^2.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
strip-ansi "^5.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
grunt-subgrunt@1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/grunt-subgrunt/-/grunt-subgrunt-1.3.0.tgz#0b77c057a7b22ba15ef5977b7c5992a75f5e4181"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-rioBokPl1wlwjvTIAlisB/QE1vZpMtIE8S4T1hxH8fGESriajeLqBr8a9qh7nTAI+M2/yWjGGrQLJtL/VGvPSA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
async "^2.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
glob "^7.0.0"
grunt-update-submodules@0.4.1:
version "0.4.1"
resolved "https://registry.yarnpkg.com/grunt-update-submodules/-/grunt-update-submodules-0.4.1.tgz#46c485fe6413cc0bdd6988aa2803c4e7d997c366"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-RsSF/mQTzAvdaYiqKAPE59mXw2Y=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency grunt to v1.4.1
2021-05-25 04:40:38 +03:00
grunt@1.4.1:
version "1.4.1"
resolved "https://registry.yarnpkg.com/grunt/-/grunt-1.4.1.tgz#7d1e17db1f9c8108777f7273d6b9359755576f50"
integrity sha512-ZXIYXTsAVrA7sM+jZxjQdrBOAg7DyMUplOMhTaspMRExei+fD0BTwdWXnn0W5SXqhb/Q/nlkzXclSi3IH55PIA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
dateformat "~3.0.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
eventemitter2 "~0.4.13"
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
exit "~0.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
findup-sync "~0.3.0"
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
glob "~7.1.6"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
grunt-cli "~1.4.2"
Update dependency grunt to v1.4.1
2021-05-25 04:40:38 +03:00
grunt-known-options "~2.0.0"
Update dependency grunt to v1.3.0
2020-08-25 14:59:30 +03:00
grunt-legacy-log "~3.0.0"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
grunt-legacy-util "~2.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
iconv-lite "~0.4.13"
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
js-yaml "~3.14.0"
minimatch "~3.0.4"
mkdirp "~1.0.4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
nopt "~3.0.6"
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
rimraf "~3.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added syncing and theme exposure of custom theme settings (#13354) refs https://github.com/TryGhost/Team/issues/1070 - added `@tryghost/custom-theme-settings-service` as a dependency - `core/server/services/custom-theme-settings` creates an instance of the new service passing in the model used for storing the setting keys/values and a cache instance - requiring `core/shared/services/custom-theme-settings-cache` creates a cache instance, it has no dependencies so can be required anywhere and the first require will initialize the shared instance - updated the theme activation bridge to trigger the theme settings service to sync the newly activated theme settings and populate the cache - updated theme validation to pass `labs` through as an option so that we get custom theme settings back as part of the checked theme as that's what is passed to the custom theme settings service
2021-09-23 14:44:39 +03:00
gscan@4.3.1:
version "4.3.1"
resolved "https://registry.yarnpkg.com/gscan/-/gscan-4.3.1.tgz#c99edb27719ab931708e081bc6e2fe4868f64068"
integrity sha512-Bgmrfkt2w++ojhp/NSPItHTRphpbiSFZD0STw/JoU3NT0QRX6dXJ+Z5B0LxIyW6XtDy1DKBC6clD2FJBKwC2oQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Added syncing and theme exposure of custom theme settings (#13354) refs https://github.com/TryGhost/Team/issues/1070 - added `@tryghost/custom-theme-settings-service` as a dependency - `core/server/services/custom-theme-settings` creates an instance of the new service passing in the model used for storing the setting keys/values and a cache instance - requiring `core/shared/services/custom-theme-settings-cache` creates a cache instance, it has no dependencies so can be required anywhere and the first require will initialize the shared instance - updated the theme activation bridge to trigger the theme settings service to sync the newly activated theme settings and populate the cache - updated theme validation to pass `labs` through as an option so that we get custom theme settings back as part of the checked theme as that's what is passed to the custom theme settings service
2021-09-23 14:44:39 +03:00
"@sentry/node" "6.13.2"
"@tryghost/pretty-cli" "1.2.19"
"@tryghost/zip" "1.1.15"
Update dependency gscan to v3.5.4
2020-05-01 13:15:50 +03:00
bluebird "3.7.2"
Added syncing and theme exposure of custom theme settings (#13354) refs https://github.com/TryGhost/Team/issues/1070 - added `@tryghost/custom-theme-settings-service` as a dependency - `core/server/services/custom-theme-settings` creates an instance of the new service passing in the model used for storing the setting keys/values and a cache instance - requiring `core/shared/services/custom-theme-settings-cache` creates a cache instance, it has no dependencies so can be required anywhere and the first require will initialize the shared instance - updated the theme activation bridge to trigger the theme settings service to sync the newly activated theme settings and populate the cache - updated theme validation to pass `labs` through as an option so that we get custom theme settings back as part of the checked theme as that's what is passed to the custom theme settings service
2021-09-23 14:44:39 +03:00
chalk "4.1.2"
Update dependency gscan to v3.5.4
2020-05-01 13:15:50 +03:00
common-tags "1.8.0"
express "4.17.1"
🐛 Upgrade Gscan to 4.1.1 issue TryGhost/Team#864 Use latest gscan to fix issue where custom themes didn't work
2021-07-08 12:52:21 +03:00
express-hbs "2.4.0"
Updated gscan dependency to v4.0.0-pre.0 no issue - Renovate is being slow so I'm doing it manually
2021-02-09 19:17:09 +03:00
fs-extra "9.1.0"
🐛 Upgrade Gscan to 4.1.1 issue TryGhost/Team#864 Use latest gscan to fix issue where custom themes didn't work
2021-07-08 12:52:21 +03:00
ghost-ignition "4.6.3"
Added syncing and theme exposure of custom theme settings (#13354) refs https://github.com/TryGhost/Team/issues/1070 - added `@tryghost/custom-theme-settings-service` as a dependency - `core/server/services/custom-theme-settings` creates an instance of the new service passing in the model used for storing the setting keys/values and a cache instance - requiring `core/shared/services/custom-theme-settings-cache` creates a cache instance, it has no dependencies so can be required anywhere and the first require will initialize the shared instance - updated the theme activation bridge to trigger the theme settings service to sync the newly activated theme settings and populate the cache - updated theme validation to pass `labs` through as an option so that we get custom theme settings back as part of the checked theme as that's what is passed to the custom theme settings service
2021-09-23 14:44:39 +03:00
glob "7.2.0"
Bumped gscan to 4.0.0-pre.1 refs https://github.com/TryGhost/Team/issues/492 https://github.com/TryGhost/Ghost/commit/d0e0760dae009055f7ce300e68883934bf024913 - With Ghost 4.0 it will detect deprecated {{@labs.members}} warning and use of deprecated ghost-api v2 in theme's package.json
2021-03-01 09:26:09 +03:00
lodash "4.17.21"
Added syncing and theme exposure of custom theme settings (#13354) refs https://github.com/TryGhost/Team/issues/1070 - added `@tryghost/custom-theme-settings-service` as a dependency - `core/server/services/custom-theme-settings` creates an instance of the new service passing in the model used for storing the setting keys/values and a cache instance - requiring `core/shared/services/custom-theme-settings-cache` creates a cache instance, it has no dependencies so can be required anywhere and the first require will initialize the shared instance - updated the theme activation bridge to trigger the theme settings service to sync the newly activated theme settings and populate the cache - updated theme validation to pass `labs` through as an option so that we get custom theme settings back as part of the checked theme as that's what is passed to the custom theme settings service
2021-09-23 14:44:39 +03:00
multer "1.4.3"
Update dependency gscan to v3.5.4
2020-05-01 13:15:50 +03:00
pluralize "8.0.0"
require-dir "1.2.0"
Update dependency gscan to v4.0.2
2021-04-16 19:49:09 +03:00
semver "7.3.5"
🐛 Fixed an issue with zip files parsing. no issue Updated gscan to 3.6.1
2020-12-11 13:57:19 +03:00
uuid "8.3.2"
Update dependency gscan to v3.5.4
2020-05-01 13:15:50 +03:00
validator "13.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency @lodder/grunt-postcss to v3
2020-10-20 11:41:14 +03:00
gzip-size@^5.1.1:
version "5.1.1"
resolved "https://registry.yarnpkg.com/gzip-size/-/gzip-size-5.1.1.tgz#cb9bee692f87c0612b232840a873904e4c135274"
integrity sha512-FNHi6mmoHvs1mxZAds4PpdCS6QG8B4C1krxJsMutgxl5t3+GlRTzzI3NEkifXx2pVsOvJdOGSmIgDhQ55FwdPA==
dependencies:
duplexer "^0.1.1"
pify "^4.0.1"
Lock file maintenance
2021-05-05 18:56:03 +03:00
handlebars@^4.7.6, handlebars@^4.7.7:
Update dependency express-hbs to v2.3.5
2021-04-16 12:01:28 +03:00
version "4.7.7"
resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.7.7.tgz#9ce33416aad02dbd6c8fafa8240d5d98004945a1"
integrity sha512-aAcXm5OAfE/8IXkcZvCepKU3VzW1/39Fb5ZuqMtgI/hT8X2YgoMvBY5dLhq/cpOvw7Lk1nK/UF71aLG/ZnVYRA==
dependencies:
minimist "^1.2.5"
neo-async "^2.6.0"
source-map "^0.6.1"
wordwrap "^1.0.0"
optionalDependencies:
uglify-js "^3.1.4"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
har-schema@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/har-schema/-/har-schema-2.0.0.tgz#a94c2224ebcac04782a0d9035521f24735b7ec92"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-qUwiJOvKwEeCoNkDVSHyRzW37JI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
har-validator@~5.1.3:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "5.1.5"
resolved "https://registry.yarnpkg.com/har-validator/-/har-validator-5.1.5.tgz#1f0803b9f8cb20c0fa13822df1ecddb36bde1efd"
integrity sha512-nmT2T0lljbxdQZfspsno9hgrG3Uir6Ks5afism62poxqBM6sDnMEuPmzTq8XN0OEwqKLLdh1jQI3qyE66Nzb3w==
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
Lock file maintenance
2021-05-05 18:56:03 +03:00
ajv "^6.12.3"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
har-schema "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
has-ansi@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/has-ansi/-/has-ansi-2.0.0.tgz#34f5049ce1ecdf2b0649af3ef24e45ed35416d91"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-NPUEnOHs3ysGSa8+8k5F7TVBbZE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
ansi-regex "^2.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
has-flag@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-3.0.0.tgz#b5d454dc2199ae225699f3467e5a07f3b955bafd"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-tdRU3CGZriJWmfNGfloH87lVuv0=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
has-flag@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-4.0.0.tgz#944771fd9c81c81265c4d6941860da06bb59479b"
integrity sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==
Lock file maintenance
2021-05-05 18:56:03 +03:00
has-symbols@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/has-symbols/-/has-symbols-1.0.2.tgz#165d3070c00309752a1236a479331e3ac56f1423"
integrity sha512-chXa79rL/UC2KlX17jo3vRGz0azaWEx5tGqZg5pO3NUyEJVB17dMruQlzCCOfUvElghKcm5194+BCRvi2Rv/Gw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
has-unicode@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/has-unicode/-/has-unicode-2.0.1.tgz#e0e6fe6a28cf51138855e086d1691e771de2a8b9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-4Ob+aijPUROIVeCG0Wkedx3iqLk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
has-value@^0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/has-value/-/has-value-0.3.1.tgz#7b1f58bada62ca827ec0a2078025654845995e1f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ex9YutpiyoJ+wKIHgCVlSEWZXh8=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
get-value "^2.0.3"
has-values "^0.1.4"
isobject "^2.0.0"
has-value@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/has-value/-/has-value-1.0.0.tgz#18b281da585b1c5c51def24c930ed29a0be6b177"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-GLKB2lhbHFxR3vJMkw7SmgvmsXc=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
get-value "^2.0.6"
has-values "^1.0.0"
isobject "^3.0.0"
has-values@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/has-values/-/has-values-0.1.4.tgz#6d61de95d91dfca9b9a02089ad384bff8f62b771"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-bWHeldkd/Km5oCCJrThL/49it3E=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
has-values@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/has-values/-/has-values-1.0.0.tgz#95b0b63fec2146619a6fe57fe75628d5a39efe4f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-lbC2P+whRmGab+V/51Yo1aOe/k8=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
is-number "^3.0.0"
kind-of "^4.0.0"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
has-values@~2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/has-values/-/has-values-2.0.1.tgz#3876200ff86d8a8546a9264a952c17d5fc17579d"
integrity sha512-+QdH3jOmq9P8GfdjFg0eJudqx1FqU62NQJ4P16rOEHeRdl7ckgwn6uqQjzYE0ZoHVV/e5E2esuJ5Gl5+HUW19w==
dependencies:
kind-of "^6.0.2"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
has@^1.0.3:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/has/-/has-1.0.3.tgz#722d7cbfc1f6aa8241f16dd814e011e1f41e8796"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-f2dvO0VU6Oej7RkWJGrehjbzMAjFp5/VKPp5tTpWIV4JHHZK1/BxbFRtf/siA2SWTe09caDmVtYYzWEIbBS4zw==
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
function-bind "^1.1.1"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
he@1.2.0, he@^1.2.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/he/-/he-1.2.0.tgz#84ae65fa7eafb165fddb61566ae14baf05664f0f"
Update dependency html-to-text to v5
2019-07-02 03:43:18 +03:00
integrity sha512-F/1DnUGPopORZi0ni+CvrCgHQ5FyEAHRLSApuYWMmrbSwoN2Mn/7k+Gl38gJnR7yyDZk6WLXwiGod1JOWNDKGw==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
homedir-polyfill@^1.0.1:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/homedir-polyfill/-/homedir-polyfill-1.0.3.tgz#743298cef4e5af3e194161fbadcc2151d3a058e8"
integrity sha512-eSmmWE5bZTK2Nou4g0AI3zZ9rswp7GRKoKXS1BLUkvPviOqs4YTN1djQIqrXy9k5gEtdLPy86JjRwsNM9tnDcA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
parse-passwd "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
hooker@~0.2.3:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.2.3"
resolved "https://registry.yarnpkg.com/hooker/-/hooker-0.2.3.tgz#b834f723cc4a242aa65963459df6d984c5d3d959"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-uDT3I8xKJCqmWWNFnfbZhMXT2Vk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
hosted-git-info@^2.1.4:
version "2.8.9"
resolved "https://registry.yarnpkg.com/hosted-git-info/-/hosted-git-info-2.8.9.tgz#dffc0bf9a21c02209090f2aa69429e1414daf3f9"
integrity sha512-mxIDAb9Lsm6DoOJ7xH+5+X4y1LU/4Hi50L9C5sIswK3JzULS4bwk1FvjdBgvYR4bzT4tuUQiC15FE2f5HbLvYw==
Update dependency ghost-ignition to v4.4.1
2021-01-21 21:16:29 +03:00
hpagent@^0.1.1:
Lock file maintenance
2021-07-05 04:25:22 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/hpagent/-/hpagent-0.1.2.tgz#cab39c66d4df2d4377dbd212295d878deb9bdaa9"
integrity sha512-ePqFXHtSQWAFXYmj+JtOTHr84iNrII4/QRlAAPPE+zqnKy4xJo7Ie1Y4kC7AdB+LxLxSTTzBMASsEcy0q8YyvQ==
Update dependency ghost-ignition to v4.4.1
2021-01-21 21:16:29 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
html-encoding-sniffer@^2.0.1:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
version "2.0.1"
resolved "https://registry.yarnpkg.com/html-encoding-sniffer/-/html-encoding-sniffer-2.0.1.tgz#42a6dc4fd33f00281176e8b23759ca4e4fa185f3"
integrity sha512-D5JbOMBIR/TVZkubHT+OyT2705QvogUW4IBn6nHd756OwieSF9aDYFj4dv6HHEVGYbHaLETa3WggZYWWMyy3ZQ==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
whatwg-encoding "^1.0.5"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
html-escaper@^2.0.0:
version "2.0.2"
resolved "https://registry.yarnpkg.com/html-escaper/-/html-escaper-2.0.2.tgz#dfd60027da36a36dfcbe236262c00a5822681453"
integrity sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==
Update dependency html-to-text to v5
2019-07-02 03:43:18 +03:00
html-to-text@5.1.1:
version "5.1.1"
resolved "https://registry.yarnpkg.com/html-to-text/-/html-to-text-5.1.1.tgz#2d89db7bf34bc7bcb7d546b1b228991a16926e87"
integrity sha512-Bci6bD/JIfZSvG4s0gW/9mMKwBRoe/1RWLxUME/d6WUSZCdY7T60bssf/jFf7EYXRyqU4P5xdClVqiYU0/ypdA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency html-to-text to v5
2019-07-02 03:43:18 +03:00
he "^1.2.0"
htmlparser2 "^3.10.1"
lodash "^4.17.11"
minimist "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🔥 Removed netjet support refs: https://github.com/cloudflare/netjet/issues/46 - HTTP2/Push never made it, this module is therefore defunct
2021-06-28 16:02:33 +03:00
htmlparser2@^3.10.1, htmlparser2@^3.9.1:
Update dependency html-to-text to v5
2019-07-02 03:43:18 +03:00
version "3.10.1"
resolved "https://registry.yarnpkg.com/htmlparser2/-/htmlparser2-3.10.1.tgz#bd679dc3f59897b6a34bb10749c855bb53a9392f"
integrity sha512-IgieNijUMbkDovyoKObU1DUhm1iwNYE/fuifEoEHfd1oZKZDaONBSkal7Y01shxsM49R4XaMdGez3WnF9UfiCQ==
dependencies:
domelementtype "^1.3.1"
domhandler "^2.3.0"
domutils "^1.5.1"
entities "^1.1.1"
inherits "^2.0.1"
readable-stream "^3.1.1"
Update dependency sanitize-html to v2.3.0
2020-12-16 19:11:16 +03:00
htmlparser2@^4.0.0:
Update dependency sanitize-html to v1.22.0
2020-02-24 15:29:02 +03:00
version "4.1.0"
resolved "https://registry.yarnpkg.com/htmlparser2/-/htmlparser2-4.1.0.tgz#9a4ef161f2e4625ebf7dfbe6c0a2f52d18a59e78"
integrity sha512-4zDq1a1zhE4gQso/c5LP1OtrhYTncXNSpvJYtWJBtXAETPlMfi3IFNjGuQbYLuVY4ZR0QMqRVvo4Pdy9KLyP8Q==
dependencies:
domelementtype "^2.0.1"
domhandler "^3.0.0"
domutils "^2.0.0"
entities "^2.0.0"
Lock file maintenance
2021-05-05 18:56:03 +03:00
htmlparser2@^6.0.0, htmlparser2@^6.1.0:
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
version "6.1.0"
resolved "https://registry.yarnpkg.com/htmlparser2/-/htmlparser2-6.1.0.tgz#c4d762b6c3371a05dbe65e94ae43a9f845fb8fb7"
integrity sha512-gyyPk6rgonLFEDGoeRgQNaEUvdJ4ktTmmUh/h2t7s+M8oPpIPxgNACWa+6ESR57kXstwqPiCut0V8NRpcwgU7A==
dependencies:
domelementtype "^2.0.1"
domhandler "^4.0.0"
domutils "^2.5.2"
entities "^2.0.0"
Lock file maintenance
2021-06-01 18:19:18 +03:00
http-cache-semantics@^4.0.0, http-cache-semantics@^4.1.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "4.1.0"
resolved "https://registry.yarnpkg.com/http-cache-semantics/-/http-cache-semantics-4.1.0.tgz#49e91c5cbf36c9b94bcfcd71c23d5249ec74e390"
integrity sha512-carPklcUh7ROWRK7Cv27RPtdhYhUsela/ue5/jKzjegVvXDqM2ILE9Q2BGn9JZJh1g87cp56su/FgQSzcWS8cQ==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
http-errors@1.7.2:
version "1.7.2"
resolved "https://registry.yarnpkg.com/http-errors/-/http-errors-1.7.2.tgz#4f5029cf13239f31036e5b2e55292bcfbcc85c8f"
integrity sha512-uUQBt3H/cSIVfch6i1EuPNy/YsRSOUBXTVfZ+yR7Zjez3qjBz6i9+i4zjNaoqcoFVI4lQJ5plg63TvGfRSDCRg==
dependencies:
depd "~1.1.2"
inherits "2.0.3"
setprototypeof "1.1.1"
statuses ">= 1.5.0 < 2"
toidentifier "1.0.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
http-errors@1.7.3, http-errors@~1.7.2:
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
version "1.7.3"
resolved "https://registry.yarnpkg.com/http-errors/-/http-errors-1.7.3.tgz#6c619e4f9c60308c38519498c14fbb10aacebb06"
integrity sha512-ZTTX0MWrsQ2ZAhA1cejAwDLycFsd7I7nVtnkT3Ol0aqodaKW+0CTZDQ1uBv5whptCnc8e8HeRRJxRs0kmm/Qfw==
dependencies:
depd "~1.1.2"
inherits "2.0.4"
setprototypeof "1.1.1"
statuses ">= 1.5.0 < 2"
toidentifier "1.0.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
http-errors@~1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/http-errors/-/http-errors-1.4.0.tgz#6c0242dea6b3df7afda153c71089b31c6e82aabf"
integrity sha1-bAJC3qaz33r9oVPHEImzHG6Cqr8=
dependencies:
inherits "2.0.1"
statuses ">= 1.2.1 < 2"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
http-parser-js@>=0.5.1:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "0.5.3"
resolved "https://registry.yarnpkg.com/http-parser-js/-/http-parser-js-0.5.3.tgz#01d2709c79d41698bb01d4decc5e9da4e4a033d9"
integrity sha512-t7hjvef/5HEK7RWTdUzVUhl8zkEu+LlaE0IYzdMuvbSDipxBRpOn4Uhw8ZyECEa808iVT8XCjzo6xmYt4CiLZg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
http-proxy-agent@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/http-proxy-agent/-/http-proxy-agent-2.1.0.tgz#e4821beef5b2142a2026bd73926fe537631c5405"
integrity sha512-qwHbBLV7WviBl0rQsOzH6o5lwyOIvwp/BdFnvVxXORldu5TmjFfjzBcWUWS5kWAZhmv+JtiDhSuQCp4sBfbIgg==
dependencies:
agent-base "4"
debug "3.1.0"
Update metascraper to v5.21.10
2021-05-25 02:29:32 +03:00
http-proxy-agent@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/http-proxy-agent/-/http-proxy-agent-4.0.1.tgz#8a8c8ef7f5932ccf953c296ca8291b95aa74aa3a"
integrity sha512-k0zdNgqWTGA6aeIRVpvfVob4fL52dTfaehylg0Y4UvSySvOq/Y+BOyPrgpUrA7HylqvU8vIZGsRuXmspskV0Tg==
dependencies:
"@tootallnate/once" "1"
agent-base "6"
debug "4"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
http-signature@~1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/http-signature/-/http-signature-1.2.0.tgz#9aecd925114772f3d95b65a60abb8f7c18fbace1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-muzZJRFHcvPZW2WmCruPfBj7rOE=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
assert-plus "^1.0.0"
jsprim "^1.2.2"
sshpk "^1.7.0"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
http2-wrapper@^1.0.0-beta.5.2:
version "1.0.3"
resolved "https://registry.yarnpkg.com/http2-wrapper/-/http2-wrapper-1.0.3.tgz#b8f55e0c1f25d4ebd08b3b0c2c079f9590800b3d"
integrity sha512-V+23sDMr12Wnz7iTcDeJr3O6AIxlnvT/bmaAAAP/Xda35C90p9599p0F1eHR/N1KILWSoWVAiOMFjBBXaXSMxg==
dependencies:
quick-lru "^5.1.1"
resolve-alpn "^1.0.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
httpntlm@1.6.1:
version "1.6.1"
resolved "https://registry.yarnpkg.com/httpntlm/-/httpntlm-1.6.1.tgz#ad01527143a2e8773cfae6a96f58656bb52a34b2"
integrity sha1-rQFScUOi6Hc8+uapb1hla7UqNLI=
dependencies:
httpreq ">=0.4.22"
underscore "~1.7.0"
httpreq@>=0.4.22:
version "0.5.2"
resolved "https://registry.yarnpkg.com/httpreq/-/httpreq-0.5.2.tgz#be6777292fa1038d7771d7c01d9a5e1219de951c"
integrity sha512-2Jm+x9WkExDOeFRrdBCBSpLPT5SokTcRHkunV3pjKmX/cx6av8zQ0WtHUMDrYb6O4hBFzNU6sxJEypvRUVYKnw==
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
https-proxy-agent@^3.0.0:
version "3.0.1"
resolved "https://registry.yarnpkg.com/https-proxy-agent/-/https-proxy-agent-3.0.1.tgz#b8c286433e87602311b01c8ea34413d856a4af81"
integrity sha512-+ML2Rbh6DAuee7d07tYGEKOEi2voWPUGan+ExdPbPW6Z3svq+JCqr0v8WmKPOkz1vOVykPCBSuobe7G8GJUtVg==
dependencies:
agent-base "^4.3.0"
debug "^3.1.0"
Update dependency @sentry/node to v5.19.2
2020-07-14 11:04:55 +03:00
https-proxy-agent@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/https-proxy-agent/-/https-proxy-agent-5.0.0.tgz#e2a90542abb68a762e0a0850f6c9edadfd8506b2"
integrity sha512-EkYm5BcKUGiduxzSt3Eppko+PiNWNEpa4ySk9vTC6wDsQJW9rHSa+UhGNJoRYp7bz6Ht1eaRIa6QaJqO5rCFbA==
dependencies:
agent-base "6"
debug "4"
Added support for graceful job shutdown and worker threads refs #12402 - With bumped version of job-manager it offloads job procesing into separate worker thread. Having jobs run out of main Ghost process even loop allows for safe job execution, which does not block Ghost from serving requests or performing other functions without a delay - Added experimental data access to 'testmode' jobs. This should serve as an illustration of how to access data from the job layer
2020-11-23 07:17:49 +03:00
human-interval@^2.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "2.0.1"
resolved "https://registry.yarnpkg.com/human-interval/-/human-interval-2.0.1.tgz#655baf606c7067bb26042dcae14ec777b099af15"
integrity sha512-r4Aotzf+OtKIGQCB3odUowy4GfUDTy3aTWTfLd7ZF2gBCy3XW3v/dJLRefZnOFFnjqs5B1TypvS8WarpBkYUNQ==
Added support for graceful job shutdown and worker threads refs #12402 - With bumped version of job-manager it offloads job procesing into separate worker thread. Having jobs run out of main Ghost process even loop allows for safe job execution, which does not block Ghost from serving requests or performing other functions without a delay - Added experimental data access to 'testmode' jobs. This should serve as an illustration of how to access data from the job layer
2020-11-23 07:17:49 +03:00
dependencies:
numbered "^1.1.0"
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
Lock file maintenance
2021-06-01 18:19:18 +03:00
humanize-ms@^1.2.1:
version "1.2.1"
resolved "https://registry.yarnpkg.com/humanize-ms/-/humanize-ms-1.2.1.tgz#c46e3159a293f6b896da29316d8b6fe8bb79bbed"
integrity sha1-xG4xWaKT9riW2ikxbYtv6Lt5u+0=
dependencies:
ms "^2.0.0"
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
iconv-lite@0.4.24, iconv-lite@^0.4.24, iconv-lite@^0.4.4, iconv-lite@~0.4.13:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "0.4.24"
resolved "https://registry.yarnpkg.com/iconv-lite/-/iconv-lite-0.4.24.tgz#2022b4b25fbddc21d2f524974a474aafe733908b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dependencies:
safer-buffer ">= 2.1.2 < 3"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
iconv-lite@^0.6.2:
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "0.6.3"
resolved "https://registry.yarnpkg.com/iconv-lite/-/iconv-lite-0.6.3.tgz#a52f80bf38da1952eb5c681790719871a1a72501"
integrity sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
dependencies:
safer-buffer ">= 2.1.2 < 3.0.0"
Lock file maintenance
2021-05-05 18:56:03 +03:00
ieee754@^1.1.13:
version "1.2.1"
resolved "https://registry.yarnpkg.com/ieee754/-/ieee754-1.2.1.tgz#8eb7a10a63fff25d15a57b001586d177d1b0d352"
integrity sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
ignore-walk@^3.0.1:
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "3.0.4"
resolved "https://registry.yarnpkg.com/ignore-walk/-/ignore-walk-3.0.4.tgz#c9a09f69b7c7b479a5d74ac1a3c0d4236d2a6335"
integrity sha512-PY6Ii8o1jMRA1z4F2hRkH/xN59ox43DavKvD3oDpfurRlOJyAHpifIwpbdv1n4jt4ov0jSpw3kQ4GhJnpBL6WQ==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
minimatch "^3.0.4"
Removed unused cpy-cli dependency no issue
2020-02-20 16:36:42 +03:00
ignore@^4.0.6:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
version "4.0.6"
resolved "https://registry.yarnpkg.com/ignore/-/ignore-4.0.6.tgz#750e3db5862087b4737ebac8207ffd1ef27b25fc"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-cyFDKrqc/YdcWFniJhzI42+AzS+gNwmUzOSFcRCQYwySuBBBy/KjuxWLZ/FHEH6Moq1NizMOBWyTcv8O4OZIMg==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
ignore@^5.1.1:
version "5.1.8"
resolved "https://registry.yarnpkg.com/ignore/-/ignore-5.1.8.tgz#f150a8b50a34289b33e22f5889abd4d8016f0e57"
integrity sha512-BMpfD7PpiETpBl/A6S498BaIJ6Y/ABT93ETbby2fP00v4EbvPBXWEoaR1UBPKs3iR53pJY7EtZk5KACI57i1Uw==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
image-extensions@~1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/image-extensions/-/image-extensions-1.1.0.tgz#b8e6bf6039df0056e333502a00b6637a3105d894"
integrity sha1-uOa/YDnfAFbjM1AqALZjejEF2JQ=
Update dependency glob to v7.1.7
2021-05-07 01:37:19 +03:00
image-size@1.0.0, image-size@^1.0.0:
Update dependency image-size to v1
2021-05-05 18:55:14 +03:00
version "1.0.0"
resolved "https://registry.yarnpkg.com/image-size/-/image-size-1.0.0.tgz#58b31fe4743b1cec0a0ac26f5c914d3c5b2f0750"
integrity sha512-JLJ6OwBfO1KcA+TvJT+v8gbE6iWbj24LyDNFgFEN0lzegn6cC6a/p3NIDaepMsJjQjlUWqIC7wJv8lBFxPNjcw==
dependencies:
queue "6.0.2"
image-size@^0.8.1:
Update dependency image-size to v0.8.3 (#11149)
2019-10-01 00:17:18 +03:00
version "0.8.3"
resolved "https://registry.yarnpkg.com/image-size/-/image-size-0.8.3.tgz#f0b568857e034f29baffd37013587f2c0cad8b46"
integrity sha512-SMtq1AJ+aqHB45c3FsB4ERK0UCiA2d3H1uq8s+8T0Pf8A3W4teyBQyaFaktH6xvZqh+npwlKU7i4fJo0r7TYTg==
dependencies:
queue "6.0.1"
Update dependency image-size to v0.7.5
2019-09-16 03:28:16 +03:00
Update dependency eslint to v7.8.0
2020-09-01 02:03:55 +03:00
import-fresh@^3.0.0, import-fresh@^3.2.1:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "3.3.0"
resolved "https://registry.yarnpkg.com/import-fresh/-/import-fresh-3.3.0.tgz#37162c25fcb9ebaa2e6e53d5b4d88ce17d9e0c2b"
integrity sha512-veYYhQa+D1QBKznvhUHxb8faxlrwUnxseDAbAp457E0wLNio2bOSKnjYDhMj+YiAq61xrMGhQk9iXVk5FzgQMw==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
parent-module "^1.0.0"
resolve-from "^4.0.0"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
import-modules@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/import-modules/-/import-modules-2.1.0.tgz#abe7df297cb6c1f19b57246eb8b8bd9664b6d8c2"
integrity sha512-8HEWcnkbGpovH9yInoisxaSoIg9Brbul+Ju3Kqe2UsYDUBJD/iQjSgEj0zPcTDPKfPp2fs5xlv1i+JSye/m1/A==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
imurmurhash@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/imurmurhash/-/imurmurhash-0.1.4.tgz#9218b9b2b928a238b13dc4fb6b6d576f231453ea"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-khi5srkoojixPcT7a21XbyMUU+o=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Lock file maintenance
2021-06-01 18:19:18 +03:00
indent-string@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/indent-string/-/indent-string-4.0.0.tgz#624f8f4497d619b2d9768531d58f4122854d7251"
integrity sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==
infer-owner@^1.0.4:
version "1.0.4"
resolved "https://registry.yarnpkg.com/infer-owner/-/infer-owner-1.0.4.tgz#c4cefcaa8e51051c2a40ba2ce8a3d27295af9467"
integrity sha512-IClj+Xz94+d7irH5qRyfJonOdfTzuDaifE6ZPWfx0N0+/ATZCbuTPq2prFl526urkQd90WyUKIh1DfBQ2hMz9A==
Lock file maintenance
2021-09-20 03:12:18 +03:00
inflection@^1.12.0:
version "1.13.1"
resolved "https://registry.yarnpkg.com/inflection/-/inflection-1.13.1.tgz#c5cadd80888a90cf84c2e96e340d7edc85d5f0cb"
integrity sha512-dldYtl2WlN0QDkIDtg8+xFwOS2Tbmp12t1cHa5/YClU6ZQjTFm7B66UcVbh9NQB+HvT5BAd2t5+yKsBkw5pcqA==
inflection@~1.12.0:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "1.12.0"
resolved "https://registry.yarnpkg.com/inflection/-/inflection-1.12.0.tgz#a200935656d6f5f6bc4dc7502e1aecb703228416"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ogCTVlbW9fa8TcdQLhrstwMihBY=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
inflection@~1.3.0:
version "1.3.8"
resolved "https://registry.yarnpkg.com/inflection/-/inflection-1.3.8.tgz#cbd160da9f75b14c3cc63578d4f396784bf3014e"
integrity sha1-y9Fg2p91sUw8xjV41POWeEvzAU4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
inflight@^1.0.4:
version "1.0.6"
resolved "https://registry.yarnpkg.com/inflight/-/inflight-1.0.6.tgz#49bd6331d7d02d0c09bc910a1075ba8165b56df9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Sb1jMdfQLQwJvJEKEHW6gWW1bfk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
once "^1.3.0"
wrappy "1"
Update dependency sqlite3 to v5
2021-04-15 16:46:12 +03:00
inherits@2, inherits@2.0.4, inherits@^2.0.0, inherits@^2.0.1, inherits@^2.0.3, inherits@^2.0.4, inherits@~2.0.0, inherits@~2.0.1, inherits@~2.0.3, inherits@~2.0.4:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "2.0.4"
resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.4.tgz#0fa2c64f932917c3433a0ded55363aae37416b7c"
integrity sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
inherits@2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.1.tgz#b17d08d326b4423e568eff719f91b0b1cbdf69f1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-sX0I0ya0Qj5Wjv9xn5GwscvfafE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
inherits@2.0.3:
version "2.0.3"
resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.3.tgz#633c2c83e3da42a502f52466022480f4208261de"
integrity sha1-Yzwsg+PaQqUC9SRmAiSA9CCCYd4=
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
Updated bookshelf-relations dependency to 2.2.0
2020-08-03 22:37:25 +03:00
ini@^1.3.4, ini@~1.3.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "1.3.8"
resolved "https://registry.yarnpkg.com/ini/-/ini-1.3.8.tgz#a29da425b48806f34767a4efce397269af28432c"
integrity sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency nconf to v0.11.2
2021-02-04 10:28:50 +03:00
ini@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/ini/-/ini-2.0.0.tgz#e5fd556ecdd5726be978fa1001862eacb0a94bc5"
integrity sha512-7PnF4oN3CvZF23ADhA5wRaYEQpJ8qygSkbtTXWBeXWXmEVRXK+1ITciHWwHhsjv1TmW0MgacIv6hEi5pX5NQdA==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
inquirer@^7.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "7.3.3"
resolved "https://registry.yarnpkg.com/inquirer/-/inquirer-7.3.3.tgz#04d176b2af04afc157a83fd7c100e98ee0aad003"
integrity sha512-JG3eIAj5V9CwcGvuOmoo6LB9kbAYT8HXffUl6memuszlwDC/qvFAJw49XJ5NROSFNPxp3iQg1GqkFhaY/CR0IA==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
dependencies:
ansi-escapes "^4.2.1"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
chalk "^4.1.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
cli-cursor "^3.1.0"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
cli-width "^3.0.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
external-editor "^3.0.3"
figures "^3.0.0"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
lodash "^4.17.19"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
mute-stream "0.0.8"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
run-async "^2.4.0"
rxjs "^6.6.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
string-width "^4.1.0"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
strip-ansi "^6.0.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
through "^2.3.6"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
install-artifact-from-github@^1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/install-artifact-from-github/-/install-artifact-from-github-1.2.0.tgz#adcbd123c16a4337ec44ea76d0ebf253cc16b074"
integrity sha512-3OxCPcY55XlVM3kkfIpeCgmoSKnMsz2A3Dbhsq0RXpIknKQmrX1YiznCeW9cD2ItFmDxziA3w6Eg8d80AoL3oA==
Update dependency brute-knex to v4.0.1
2020-11-02 20:07:12 +03:00
interpret@^2.0.0, interpret@^2.2.0:
Update dependency knex to v0.21.2
2020-07-10 01:13:35 +03:00
version "2.2.0"
resolved "https://registry.yarnpkg.com/interpret/-/interpret-2.2.0.tgz#1a78a0b5965c40a5416d007ad6f50ad27c417df9"
integrity sha512-Ju0Bz/cEia55xDwUWEa8+olFpCiQoypjnQySseKtmjNrnps3P+xfpUmGr90T7yjlVJmOtybRvPXhKMbHr+fWnw==
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
interpret@~1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/interpret/-/interpret-1.1.0.tgz#7ed1b1410c6a0e0f78cf95d3b8440c63f78b8614"
integrity sha1-ftGxQQxqDg94z5XTuEQMY/eLhhQ=
Update dependency intl-messageformat to v5.4.3
2019-07-29 09:34:47 +03:00
intl-format-cache@^4.1.3:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "4.3.1"
resolved "https://registry.yarnpkg.com/intl-format-cache/-/intl-format-cache-4.3.1.tgz#484d31a9872161e6c02139349b259a6229ade377"
integrity sha512-OEUYNA7D06agqPOYhbTkl0T8HA3QKSuwWh1HiClEnpd9vw7N+3XsQt5iZ0GUEchp5CW1fQk/tary+NsbF3yQ1Q==
Update dependency intl-messageformat to v5.1.2
2019-07-29 03:28:39 +03:00
Update dependency intl-messageformat to v5.4.3
2019-07-29 09:34:47 +03:00
intl-messageformat-parser@^2.1.3:
Update dependency intl-messageformat to v5.1.2
2019-07-29 03:28:39 +03:00
version "2.1.3"
resolved "https://registry.yarnpkg.com/intl-messageformat-parser/-/intl-messageformat-parser-2.1.3.tgz#c918e36a08bd7ff01349d8ea3736262c986aaeb1"
integrity sha512-YOP2GuQ8Y+f3j2Vti1/abcozYlkv/WsIffsRP8cgtN4Oha5hjhNnucxzyfmeAoDgDHw4s/lNyLylB01369a5lg==
Update dependency intl-messageformat to v5.4.3
2019-07-29 09:34:47 +03:00
intl-messageformat@5.4.3:
version "5.4.3"
resolved "https://registry.yarnpkg.com/intl-messageformat/-/intl-messageformat-5.4.3.tgz#3864f6201d779e61b09c1afb6b8ed386163a18dc"
integrity sha512-wiGIeeokY6D/TFC6JYoBIUmZJ2AzkTHJuWp5QulDH4h77aghFTBm+8MvjTLIUiQ/z7xiY3SUQN2UBG7EtwYTAg==
Update dependency intl-messageformat to v5.1.2
2019-07-29 03:28:39 +03:00
dependencies:
Update dependency intl-messageformat to v5.4.3
2019-07-29 09:34:47 +03:00
intl-format-cache "^4.1.3"
intl-messageformat-parser "^2.1.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
intl@1.2.5:
version "1.2.5"
resolved "https://registry.yarnpkg.com/intl/-/intl-1.2.5.tgz#82244a2190c4e419f8371f5aa34daa3420e2abde"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-giRKIZDE5Bn4Nx9ao02qNCDiq94=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
ip-regex@^4.3.0:
version "4.3.0"
resolved "https://registry.yarnpkg.com/ip-regex/-/ip-regex-4.3.0.tgz#687275ab0f57fa76978ff8f4dddc8a23d5990db5"
integrity sha512-B9ZWJxHHOHUhUjCPrMpLD4xEq35bUTClHM1S6CBU5ixQnkZmwipwgc96vAd7AAGM9TGHvJR+Uss+/Ak6UphK+Q==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
ip@1.1.5, ip@^1.1.5:
version "1.1.5"
resolved "https://registry.yarnpkg.com/ip/-/ip-1.1.5.tgz#bdded70114290828c0a039e72ef25f5aaec4354a"
integrity sha1-vd7XARQpCCjAoDnnLvJfWq7ENUo=
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
ipaddr.js@1.9.1:
version "1.9.1"
resolved "https://registry.yarnpkg.com/ipaddr.js/-/ipaddr.js-1.9.1.tgz#bff38543eeb8984825079ff3a2a8e6cbd46781b3"
integrity sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
is-absolute-url@^3.0.0, is-absolute-url@^3.0.3:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "3.0.3"
resolved "https://registry.yarnpkg.com/is-absolute-url/-/is-absolute-url-3.0.3.tgz#96c6a22b6a23929b11ea0afb1836c36ad4a5d698"
integrity sha512-opmNIX7uFnS96NtPmhWQgQx6/NYFgsUXYMllcfzwWKUMwfo8kku1TvE6hkNcH+Q1ts5cMVrsY7j0bxXQDciu9Q==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
is-absolute@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-absolute/-/is-absolute-1.0.0.tgz#395e1ae84b11f26ad1795e73c17378e48a301576"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-dOWoqflvcydARa360Gvv18DZ/gRuHKi2NU/wU5X1ZFzdYfH29nkiNZsF3mp4OJ3H4yo9Mx8A/uAGNzpzPN3yBA==
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
is-relative "^1.0.0"
is-windows "^1.0.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-accessor-descriptor@^0.1.6:
version "0.1.6"
resolved "https://registry.yarnpkg.com/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz#a9e12cb3ae8d876727eeef3843f8a0897b5c98d6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-qeEss66Nh2cn7u84Q/igiXtcmNY=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
kind-of "^3.0.2"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
is-accessor-descriptor@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-accessor-descriptor/-/is-accessor-descriptor-1.0.0.tgz#169c2f6d3df1f992618072365c9b0ea1f6878656"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-m5hnHTkcVsPfqx3AKlyttIPb7J+XykHvJP2B9bZDjlhLIoEq4XoK64Vg7boZlVWYK6LUY94dYPEE7Lh0ZkZKcQ==
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
dependencies:
kind-of "^6.0.0"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
is-alphabetical@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/is-alphabetical/-/is-alphabetical-1.0.4.tgz#9e7d6b94916be22153745d184c298cbf986a686d"
integrity sha512-DwzsA04LQ10FHTZuL0/grVDk4rFoVH1pjAToYwBrHSxcrBIGQuXrQMtD5U1b0U2XVgKZCTLLP8u2Qxqhy3l2Vg==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
is-alphanumeric@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-alphanumeric/-/is-alphanumeric-1.0.0.tgz#4a9cef71daf4c001c1d81d63d140cf53fd6889f4"
integrity sha1-Spzvcdr0wAHB2B1j0UDPU/1oifQ=
is-alphanumerical@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/is-alphanumerical/-/is-alphanumerical-1.0.4.tgz#7eb9a2431f855f6b1ef1a78e326df515696c4dbf"
integrity sha512-UzoZUr+XfVz3t3v4KyGEniVL9BDRoQtY7tOyrRybkVNjDFWyo1yhXNGrrBTQxp3ib9BLAWs7k2YKBQsFRkZG9A==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
dependencies:
is-alphabetical "^1.0.0"
is-decimal "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
is-arrayish@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/is-arrayish/-/is-arrayish-0.2.1.tgz#77c99840527aa8ecb1a8ba697b80645a7a926a9d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-d8mYQFJ6qOyxqLppe4BkWnqSap0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
is-arrayish@^0.3.1:
version "0.3.2"
resolved "https://registry.yarnpkg.com/is-arrayish/-/is-arrayish-0.3.2.tgz#4574a2ae56f7ab206896fb431eaeed066fdf8f03"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-eVRqCvVlZbuw3GrM63ovNSNAeA1K16kaR/LRY/92w0zxQ5/1YzwblUX652i4Xs9RwAGjW9d9y6X88t8OaAJfWQ==
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
is-binary-path@~2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/is-binary-path/-/is-binary-path-2.1.0.tgz#ea1f7f3b80f064236e83470f86c09c254fb45b09"
integrity sha512-ZMERYes6pDydyuGidse7OsHxtbI7WVeUEozgR/g7rd0xUimYNlvZRE/K2MgZTjWy725IfelLeVcEM97mmtRGXw==
dependencies:
binary-extensions "^2.0.0"
Lock file maintenance
2021-05-05 18:56:03 +03:00
is-buffer@^1.1.5, is-buffer@~1.1.6:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.1.6"
resolved "https://registry.yarnpkg.com/is-buffer/-/is-buffer-1.1.6.tgz#efaa2ea9daa0d7ab2ea13a97b2b8ad51fefbe8be"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-NcdALwpXkTm5Zvvbk7owOUSvVvBKDgKP5/ewfXEznmQFfs4ZRmanOeKBTjRVjka3QFoN6XJ+9F3USqfHqTaU5w==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency grunt-mocha-cli to v7
2020-12-03 01:43:54 +03:00
is-buffer@^2.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "2.0.5"
resolved "https://registry.yarnpkg.com/is-buffer/-/is-buffer-2.0.5.tgz#ebc252e400d22ff8d77fa09888821a24a658c191"
integrity sha512-i2R6zNFDwgEHJyQUtJEk0XFi1i0dPFn/oqjK3/vPCcDeJvW5NQ83V8QbicfF1SupOaB0h8ntgBC2YiE7dfyctQ==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
is-builtin-module@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/is-builtin-module/-/is-builtin-module-3.1.0.tgz#6fdb24313b1c03b75f8b9711c0feb8c30b903b00"
integrity sha512-OV7JjAgOTfAFJmHZLvpSTb4qi0nIILDV1gWPYDnDJUTNFM5aGlRAhk4QcT8i7TuAleeEV5Fdkqn3t4mS+Q11fg==
dependencies:
builtin-modules "^3.0.0"
Updated knex-migrator to v3.5.1 no issue - Renovate was being slow again
2021-02-23 18:56:22 +03:00
is-core-module@^2.2.0:
Lock file maintenance
2021-08-23 05:05:27 +03:00
version "2.6.0"
resolved "https://registry.yarnpkg.com/is-core-module/-/is-core-module-2.6.0.tgz#d7553b2526fe59b92ba3e40c8df757ec8a709e19"
integrity sha512-wShG8vs60jKfPWpF2KZRaAtvt3a20OAn7+IJ6hLPECpSABLcKtFKTTI4ZtH5QcBruBHlq+WsdHWyz0BCZW7svQ==
Update dependency knex-migrator to v3.5.0
2020-10-21 15:40:55 +03:00
dependencies:
has "^1.0.3"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-data-descriptor@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz#0b5ee648388e2c860282e793f1856fec3f301b56"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-C17mSDiOLIYCgueT8YVv7D8wG1Y=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
kind-of "^3.0.2"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
is-data-descriptor@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-data-descriptor/-/is-data-descriptor-1.0.0.tgz#d84876321d0e7add03990406abbbbd36ba9268c7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-jbRXy1FmtAoCjQkVmIVYwuuqDFUbaOeDjmed1tOGPrsMhtJA4rD9tkgA0F1qJ3gRFRXcHYVkdeaP50Q5rE/jLQ==
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
dependencies:
kind-of "^6.0.0"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
is-decimal@^1.0.0, is-decimal@^1.0.2:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/is-decimal/-/is-decimal-1.0.4.tgz#65a3a5958a1c5b63a706e1b333d7cd9f630d3fa5"
integrity sha512-RGdriMmQQvZ2aqaQq3awNA6dCGtKpiDFcOzrTWrDAT2MiWrKQVPmxLGHl7Y2nNu6led0kEyoX0enY0qXYsv9zw==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-descriptor@^0.1.0:
version "0.1.6"
resolved "https://registry.yarnpkg.com/is-descriptor/-/is-descriptor-0.1.6.tgz#366d8240dde487ca51823b1ab9f07a10a78251ca"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-avDYr0SB3DwO9zsMov0gKCESFYqCnE4hq/4z3TdUlukEy5t9C0YRq7HLrsN52NAcqXKaepeCD0n+B0arnVG3Hg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
is-accessor-descriptor "^0.1.6"
is-data-descriptor "^0.1.4"
kind-of "^5.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
is-descriptor@^1.0.0, is-descriptor@^1.0.2:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/is-descriptor/-/is-descriptor-1.0.2.tgz#3b159746a66604b04f8c81524ba365c5f14d86ec"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-2eis5WqQGV7peooDyLmNEPUrps9+SXX5c9pL3xEB+4e9HnGuDa7mB7kHxHw4CbqS9k1T2hOH3miL8n8WtiYVtg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
is-accessor-descriptor "^1.0.0"
is-data-descriptor "^1.0.0"
kind-of "^6.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-extendable@^0.1.0, is-extendable@^0.1.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.1.1"
resolved "https://registry.yarnpkg.com/is-extendable/-/is-extendable-0.1.1.tgz#62b110e289a471418e3ec36a617d472e301dfc89"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-YrEQ4omkcUGOPsNqYX1HLjAd/Ik=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-extendable@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/is-extendable/-/is-extendable-1.0.1.tgz#a7470f9e426733d81bd81e1155264e3a3507cab4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-arnXMxT1hhoKo9k1LZdmlNyJdDDfy2v0fXjFlmok4+i8ul/6WlbVge9bhM74OpNPQPMGUToDtz+KXa1PneJxOA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
is-plain-object "^2.0.4"
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
is-extglob@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-extglob/-/is-extglob-1.0.0.tgz#ac468177c4943405a092fc8f29760c6ffc6206c0"
integrity sha1-rEaBd8SUNAWgkvyPKXYMb/xiBsA=
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
is-extglob@^2.1.1:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/is-extglob/-/is-extglob-2.1.1.tgz#a88c02535791f02ed37c76a1b9ea9773c833f8c2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-qIwCU1eR8C7TfHahueqXc8gz+MI=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
is-fullwidth-code-point@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz#ef9e31386f031a7f0d643af82fde50c457ef00cb"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-754xOG8DGn8NZDr4L95QxFfvAMs=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
number-is-nan "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
is-fullwidth-code-point@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz#a3b30a5c4f199183167aaab93beefae3ddfb654f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-o7MKXE8ZkYMWeqq5O+764937ZU8=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Update Test & linting packages
2020-02-03 16:44:38 +03:00
is-fullwidth-code-point@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz#f116f8064fe90b3f7844a38997c0b75051269f1d"
integrity sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
is-glob@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/is-glob/-/is-glob-2.0.1.tgz#d096f926a3ded5600f3fdfd91198cb0888c2d863"
integrity sha1-0Jb5JqPe1WAPP9/ZEZjLCIjC2GM=
dependencies:
is-extglob "^1.0.0"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
is-glob@^4.0.0, is-glob@^4.0.1, is-glob@~4.0.1:
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
version "4.0.1"
resolved "https://registry.yarnpkg.com/is-glob/-/is-glob-4.0.1.tgz#7567dbe9f2f5e2467bc77ab83c4a29482407a5dc"
integrity sha512-5G0tKtBTFImOqDnLB2hG6Bp2qcKEFduo4tZu9MT/H6NQv/ghhy30o55ufafxJ/LdH79LLs2Kfrn85TLKyA7BUg==
dependencies:
is-extglob "^2.1.1"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
is-hexadecimal@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/is-hexadecimal/-/is-hexadecimal-1.0.4.tgz#cc35c97588da4bd49a8eedd6bc4082d44dcb23a7"
integrity sha512-gyPJuv83bHMpocVYoqof5VDiZveEoGoFL8m3BXNb2VW8Xs+rz9kqO8LOQ5DH6EsuvilT1ApazU0pyl+ytbPtlw==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
is-invalid-path@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/is-invalid-path/-/is-invalid-path-0.1.0.tgz#307a855b3cf1a938b44ea70d2c61106053714f34"
integrity sha1-MHqFWzzxqTi0TqcNLGEQYFNxTzQ=
dependencies:
is-glob "^2.0.0"
Lock file maintenance
2021-06-01 18:19:18 +03:00
is-lambda@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/is-lambda/-/is-lambda-1.0.1.tgz#3d9877899e6a53efc0160504cde15f82e6f061d5"
integrity sha1-PZh3iZ5qU+/AFgUEzeFfgubwYdU=
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
is-number@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/is-number/-/is-number-3.0.0.tgz#24fd6201a4782cf50561c810276afc7d12d71195"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-JP1iAaR4LPUFYcgQJ2r8fRLXEZU=
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
dependencies:
kind-of "^3.0.2"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
is-number@^7.0.0:
version "7.0.0"
resolved "https://registry.yarnpkg.com/is-number/-/is-number-7.0.0.tgz#7535345b896734d5f80c4d06c50955527a14f12b"
integrity sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==
Update dependency mocha to v8.2.0
2020-10-17 00:23:19 +03:00
is-plain-obj@^2.0.0, is-plain-obj@^2.1.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "2.1.0"
resolved "https://registry.yarnpkg.com/is-plain-obj/-/is-plain-obj-2.1.0.tgz#45e42e37fccf1f40da8e5f76ee21515840c09287"
integrity sha512-YWnfyRwxL/+SsrWYfOpUtz5b3YD+nyfkHvjbcanzk8zgyO4ASD67uVMRt8k5bM4lLMDnXfriRhOpemw+NfT1eA==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
is-plain-object@^2.0.3, is-plain-object@^2.0.4:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
version "2.0.4"
resolved "https://registry.yarnpkg.com/is-plain-object/-/is-plain-object-2.0.4.tgz#2c163b3fafb1b606d9d17928f05c2a1c38e07677"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-h5PpgXkWitc38BBMYawTYMWJHFZJVnBquFE57xFpjB8pJFiF6gZ+bU+WyI/yqXiFR5mdLsgYNaPe8uao6Uv9Og==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
isobject "^3.0.1"
Update dependency sanitize-html to v2
2020-10-21 13:34:09 +03:00
is-plain-object@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/is-plain-object/-/is-plain-object-5.0.0.tgz#4427f50ab3429e9025ea7d52e9043a9ef4159344"
integrity sha512-VRSzKkbMm5jMDoKLbltAkFQ5Qr7VDiTFGXxYFXXowVj387GeGNOCsOH6Msy00SGZ3Fp84b1Naa1psqgcCIEP5Q==
Lock file maintenance
2021-06-01 18:19:18 +03:00
is-potential-custom-element-name@^1.0.1:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/is-potential-custom-element-name/-/is-potential-custom-element-name-1.0.1.tgz#171ed6f19e3ac554394edf78caa05784a45bebb5"
integrity sha512-bCYeRA2rVibKZd+s2625gGnGF/t7DSqDs4dP7CrLA1m7jKWz6pps0LpYLJN8Q64HtmPKJ1hrN3nzPNKFEKOUiQ==
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
is-relative-url@~3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/is-relative-url/-/is-relative-url-3.0.0.tgz#f623c8e26baa5bd3742b3b7ec074f50f3b45b3f3"
integrity sha512-U1iSYRlY2GIMGuZx7gezlB5dp1Kheaym7zKzO1PV06mOihiWTXejLwm4poEJysPyXF+HtK/BEd0DVlcCh30pEA==
dependencies:
is-absolute-url "^3.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
is-relative@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-relative/-/is-relative-1.0.0.tgz#a1bb6935ce8c5dba1e8b9754b9b2dcc020e2260d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Kw/ReK0iqwKeu0MITLFuj0jbPAmEiOsIwyIXvvbfa6QfmN9pkD1M+8pdk7Rl/dTKbH34/XBFMbgD4iMJhLQbGA==
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
is-unc-path "^1.0.0"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
is-resolvable@^1.1.0:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/is-resolvable/-/is-resolvable-1.1.0.tgz#fb18f87ce1feb925169c9a407c19318a3206ed88"
integrity sha512-qgDYXFSR5WvEfuS5dMj6oTMEbrrSaM0CrFk2Yiq/gXnBvD9pMa2jGXxyhGLfvhZpuMZe18CJpFxAt3CRs42NMg==
🐛 Fixed server crash when AMP posts contain images with unescaped chars (#10775) no issue - bump `amperize` to v0.4.0 which contains an updated version of `got` which does not crash on invalid image urls
2019-06-05 19:31:23 +03:00
is-retry-allowed@^1.1.0:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/is-retry-allowed/-/is-retry-allowed-1.2.0.tgz#d778488bd0a4666a3be8a1482b9f2baafedea8b4"
integrity sha512-RUbUeKwvm3XG2VYamhJL1xFktgjvPzL0Hq8C+6yrWIswDy3BIXGqCxhxkc30N9jqK311gVU137K8Ei55/zVJRg==
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
🐛 Fixed server crash when AMP posts contain images with unescaped chars (#10775) no issue - bump `amperize` to v0.4.0 which contains an updated version of `got` which does not crash on invalid image urls
2019-06-05 19:31:23 +03:00
is-stream@^1.1.0:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/is-stream/-/is-stream-1.1.0.tgz#12d4a3dd4e68e0b79ceb8dbc84173ae80d91ca44"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-EtSj3U5o4Lec6428hBc66A2RykQ=
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
is-string-and-not-blank@^0.0.2:
version "0.0.2"
resolved "https://registry.yarnpkg.com/is-string-and-not-blank/-/is-string-and-not-blank-0.0.2.tgz#cd19eded2ca4a514f79ca528915f1fb28e5dd38a"
integrity sha512-FyPGAbNVyZpTeDCTXnzuwbu9/WpNXbCfbHXLpCRpN4GANhS00eEIP5Ef+k5HYSNIzIhdN9zRDoBj6unscECvtQ==
dependencies:
is-string-blank "^1.0.1"
is-string-blank@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/is-string-blank/-/is-string-blank-1.0.1.tgz#866dca066d41d2894ebdfd2d8fe93e586e583a03"
integrity sha512-9H+ZBCVs3L9OYqv8nuUAzpcT9OTgMD1yAWrG7ihlnibdkbtB850heAmYWxHuXc4CHy4lKeK69tN+ny1K7gBIrw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
is-typedarray@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-typedarray/-/is-typedarray-1.0.0.tgz#e479c80858df0c1b11ddda6940f96011fcda4a9a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-5HnICFjfDBsR3dppQPlgEfzaSpo=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
is-unc-path@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-unc-path/-/is-unc-path-1.0.0.tgz#d731e8898ed090a12c352ad2eaed5095ad322c9d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-mrGpVd0fs7WWLfVsStvgF6iEJnbjDFZh9/emhRDcGWTduTfNHd9CHeUwH3gYIjdbwo4On6hunkztwOaAw0yllQ==
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
unc-path-regex "^0.1.2"
Update dependency mocha to v9
2021-06-07 20:05:28 +03:00
is-unicode-supported@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/is-unicode-supported/-/is-unicode-supported-0.1.0.tgz#3f26c76a809593b52bfa2ecb5710ed2779b522a7"
integrity sha512-knxG2q4UC3u8stRGyAVJCOdxFmv5DZiRcdlIaAQXAbSfJya+OhopNotLQrstBhququ4ZpuKbDc/8S6mgXgPFPw==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
is-uri@~1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/is-uri/-/is-uri-1.2.0.tgz#b92ff234af68c0ed97d2eed46492d01793b7d420"
integrity sha1-uS/yNK9owO2X0u7UZJLQF5O31CA=
dependencies:
parse-uri "~1.0.0"
punycode2 "~1.0.0"
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
is-valid-path@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/is-valid-path/-/is-valid-path-0.1.1.tgz#110f9ff74c37f663e1ec7915eb451f2db93ac9df"
integrity sha1-EQ+f90w39mPh7HkV60UfLbk6yd8=
dependencies:
is-invalid-path "^0.1.0"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
is-whitespace-character@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/is-whitespace-character/-/is-whitespace-character-1.0.4.tgz#0858edd94a95594c7c9dd0b5c174ec6e45ee4aa7"
integrity sha512-SDweEzfIZM0SJV0EUga669UTKlmL0Pq8Lno0QDQsPnvECB3IM2aP0gdx5TrU0A01MAPfViaZiI2V1QMZLaKK5w==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
is-windows@^1.0.1, is-windows@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/is-windows/-/is-windows-1.0.2.tgz#d1850eb9791ecd18e6182ce12a30f396634bb19d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-eXK1UInq2bPmjyX6e3VHIzMLobc4J94i4AWn+Hpq3OU5KkrRC96OAcR3PRJ/pGu6m8TRnBHP9dkXQVsT/COVIA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
is-word-character@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/is-word-character/-/is-word-character-1.0.4.tgz#ce0e73216f98599060592f62ff31354ddbeb0230"
integrity sha512-5SMO8RVennx3nZrqtKwCGyyetPE9VDba5ugvKLaD4KopPG5kR4mQ7tNt/r7feL5yt5h3lpuBbIUmCOG2eSzXHA==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
isarray@0.0.1:
version "0.0.1"
resolved "https://registry.yarnpkg.com/isarray/-/isarray-0.0.1.tgz#8a18acfca9a8f4177e09abfc6038939b05d1eedf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ihis/Kmo9Bd+Cav8YDiTmwXR7t8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
isarray@1.0.0, isarray@~1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.0"
resolved "https://registry.yarnpkg.com/isarray/-/isarray-1.0.0.tgz#bb935d48582cba168c06834957a54a3e07124f11"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-u5NdSFgsuhaMBoNJV6VKPgcSTxE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
isexe@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/isexe/-/isexe-2.0.0.tgz#e8fbf374dc556ff8947a10dcb0572d633f2cfa10"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-6PvzdNxVb/iUehDcsFctYz8s+hA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
iso-639-3@~2.2.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/iso-639-3/-/iso-639-3-2.2.0.tgz#eb01d7734d61396efec934979e8b0806550837f1"
integrity sha512-v9w/U4XDSfXCrXxf4E6ertGC/lTRX8MLLv7XC1j6N5oL3ympe38jp77zgeyMsn3MbufuAAoGeVzDJbOXnPTMhQ==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
🔥 Removed netjet support refs: https://github.com/cloudflare/netjet/issues/46 - HTTP2/Push never made it, this module is therefore defunct
2021-06-28 16:02:33 +03:00
isobject@^2.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.1.0"
resolved "https://registry.yarnpkg.com/isobject/-/isobject-2.1.0.tgz#f065561096a3f1da2ef46272f815c840d87e0c89"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8GVWEJaj8dou9GJy+BXIQNh+DIk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
isarray "1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
isobject@^3.0.0, isobject@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/isobject/-/isobject-3.0.1.tgz#4e431e92b11a9731636aa1f9c8d1ccbcfdab78df"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-TkMekrEalzFjaqH5yNHMvP2reN8=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
isostring@0.0.1:
version "0.0.1"
resolved "https://registry.yarnpkg.com/isostring/-/isostring-0.0.1.tgz#ddb608efbfc89cda86db9cb16be090a788134c7f"
integrity sha1-3bYI77/InNqG25yxa+CQp4gTTH8=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
isstream@~0.1.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/isstream/-/isstream-0.1.2.tgz#47e63f7af55afa6f92e1500e690eb8b8529c099a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-R+Y/evVa+m+S4VAOaQ64uFKcCZo=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
istanbul-lib-coverage@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/istanbul-lib-coverage/-/istanbul-lib-coverage-3.0.0.tgz#f5944a37c70b550b02a78a5c3b2055b280cec8ec"
integrity sha512-UiUIqxMgRDET6eR+o5HbfRYP1l0hqkWOs7vNxC/mggutCMUIhWMm8gAHb8tHlyfD3/l6rlgNA5cKdDzEAf6hEg==
istanbul-lib-report@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/istanbul-lib-report/-/istanbul-lib-report-3.0.0.tgz#7518fe52ea44de372f460a76b5ecda9ffb73d8a6"
integrity sha512-wcdi+uAKzfiGT2abPpKZ0hSU1rGQjUQnLvtY5MpQ7QCTahD3VODhcu4wcfY1YtkGaDD5yuydOLINXsfbus9ROw==
dependencies:
istanbul-lib-coverage "^3.0.0"
make-dir "^3.0.0"
supports-color "^7.1.0"
istanbul-reports@^3.0.2:
version "3.0.2"
resolved "https://registry.yarnpkg.com/istanbul-reports/-/istanbul-reports-3.0.2.tgz#d593210e5000683750cb09fc0644e4b6e27fd53b"
integrity sha512-9tZvz7AiR3PEDNGiV9vIouQ/EAcqMXFmkcA1CDFTwOB98OZVDL0PH9glHotf5Ugp6GCOTypfzGWI/OqjWNCRUw==
dependencies:
html-escaper "^2.0.0"
istanbul-lib-report "^3.0.0"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
join-component@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/join-component/-/join-component-1.1.0.tgz#b8417b750661a392bee2c2537c68b2a9d4977cd5"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-uEF7dQZho5K+4sJTfGiyqdSXfNU=
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
Update dependency jwks-rsa to v2.0.3
2021-04-23 13:02:20 +03:00
jose@^2.0.5:
Update dependency jwks-rsa to v2
2021-04-15 19:03:37 +03:00
version "2.0.5"
resolved "https://registry.yarnpkg.com/jose/-/jose-2.0.5.tgz#29746a18d9fff7dcf9d5d2a6f62cb0c7cd27abd3"
integrity sha512-BAiDNeDKTMgk4tvD0BbxJ8xHEHBZgpeRZ1zGPPsitSyMgjoMWiLGYAE7H7NpP5h0lPppQajQs871E8NHUrzVPA==
dependencies:
"@panva/asn1.js" "^1.0.0"
Update dependency express-hbs to v2.3.5
2021-04-16 12:01:28 +03:00
js-beautify@^1.13.11:
Lock file maintenance
2021-07-05 04:25:22 +03:00
version "1.14.0"
resolved "https://registry.yarnpkg.com/js-beautify/-/js-beautify-1.14.0.tgz#2ce790c555d53ce1e3d7363227acf5dc69024c2d"
integrity sha512-yuck9KirNSCAwyNJbqW+BxJqJ0NLJ4PwBUzQQACl5O3qHMBXVkXb/rD0ilh/Lat/tn88zSZ+CAHOlk0DsY7GuQ==
Update dependency express-hbs to v2.3.5
2021-04-16 12:01:28 +03:00
dependencies:
config-chain "^1.1.12"
editorconfig "^0.15.3"
glob "^7.1.3"
nopt "^5.0.0"
Updated members service to use magic-link signin no-issue
2019-09-03 07:39:00 +03:00
js-tokens@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-4.0.0.tgz#19203fb59991df98e3a287050d4647cdeaf32499"
integrity sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==
Update dependency js-yaml to v4.1.0
2021-04-15 00:51:55 +03:00
js-yaml@4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.1.0.tgz#c1fb65f8f5017901cdd2c951864ba18458a10602"
integrity sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==
dependencies:
Lock file maintenance
2021-05-05 18:56:03 +03:00
argparse "^2.0.1"
js-yaml@^3.13.1, js-yaml@~3.14.0:
version "3.14.1"
resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.14.1.tgz#dae812fdb3825fa306609a8717383c50c36a0537"
integrity sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==
dependencies:
argparse "^1.0.7"
esprima "^4.0.0"
Update dependency js-yaml to v4.1.0
2021-04-15 00:51:55 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
jsbn@~0.1.0:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "0.1.1"
resolved "https://registry.yarnpkg.com/jsbn/-/jsbn-0.1.1.tgz#a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-peZUwuWi3rXyAdls77yoDA7y9RM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update metascraper to v5.24.2
2021-08-16 14:12:26 +03:00
jsdom@^16.5.3:
Update metascraper to v5.23.3
2021-08-02 03:21:03 +03:00
version "16.7.0"
resolved "https://registry.yarnpkg.com/jsdom/-/jsdom-16.7.0.tgz#918ae71965424b197c819f8183a754e18977b710"
integrity sha512-u9Smc2G1USStM+s/x1ru5Sxrl6mPYCbByG1U/hUmqaVsm4tbNyS7CicOSRyuGQYZhTu0h84qkZZQ/I+dzizSVw==
dependencies:
abab "^2.0.5"
acorn "^8.2.4"
acorn-globals "^6.0.0"
cssom "^0.4.4"
cssstyle "^2.3.0"
data-urls "^2.0.0"
decimal.js "^10.2.1"
domexception "^2.0.1"
escodegen "^2.0.0"
form-data "^3.0.0"
html-encoding-sniffer "^2.0.1"
http-proxy-agent "^4.0.1"
https-proxy-agent "^5.0.0"
is-potential-custom-element-name "^1.0.1"
nwsapi "^2.2.0"
parse5 "6.0.1"
saxes "^5.0.1"
symbol-tree "^3.2.4"
tough-cookie "^4.0.0"
w3c-hr-time "^1.0.2"
w3c-xmlserializer "^2.0.0"
webidl-conversions "^6.1.0"
whatwg-encoding "^1.0.5"
whatwg-mimetype "^2.3.0"
whatwg-url "^8.5.0"
ws "^7.4.6"
xml-name-validator "^3.0.0"
Update metascraper to v5.24.2
2021-08-16 14:12:26 +03:00
jsdom@~17.0.0:
version "17.0.0"
resolved "https://registry.yarnpkg.com/jsdom/-/jsdom-17.0.0.tgz#3ec82d1d30030649c8defedc45fff6aa3e5d06ae"
integrity sha512-MUq4XdqwtNurZDVeKScENMPHnkgmdIvMzZ1r1NSwHkDuaqI6BouPjr+17COo4/19oLNnmdpFDPOHVpgIZmZ+VA==
dependencies:
abab "^2.0.5"
acorn "^8.4.1"
acorn-globals "^6.0.0"
cssom "^0.5.0"
cssstyle "^2.3.0"
data-urls "^3.0.0"
decimal.js "^10.3.1"
domexception "^2.0.1"
escodegen "^2.0.0"
form-data "^4.0.0"
html-encoding-sniffer "^2.0.1"
http-proxy-agent "^4.0.1"
https-proxy-agent "^5.0.0"
is-potential-custom-element-name "^1.0.1"
nwsapi "^2.2.0"
parse5 "6.0.1"
saxes "^5.0.1"
symbol-tree "^3.2.4"
tough-cookie "^4.0.0"
w3c-hr-time "^1.0.2"
w3c-xmlserializer "^2.0.0"
webidl-conversions "^6.1.0"
whatwg-encoding "^1.0.5"
whatwg-mimetype "^2.3.0"
whatwg-url "^9.0.0"
ws "^8.0.0"
xml-name-validator "^3.0.0"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
jsesc@^2.5.1:
version "2.5.2"
resolved "https://registry.yarnpkg.com/jsesc/-/jsesc-2.5.2.tgz#80564d2e483dacf6e8ef209650a67df3f0c283a4"
integrity sha512-OYu7XEzjkCQ3C5Ps3QIZsQfNpqoJyZZA99wd9aWd05NCtC5pWOkShK2mkL6HXQR6/Cy2lbNdPlZBpuQHXE63gA==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
json-buffer@3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/json-buffer/-/json-buffer-3.0.0.tgz#5b1f397afc75d677bde8bcfc0e47e1f9a3d9a898"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Wx85evx11ne96Lz8Dkfh+aPZqJg=
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
json-buffer@3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/json-buffer/-/json-buffer-3.0.1.tgz#9338802a30d3b6605fbe0613e094008ca8c05a13"
integrity sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ==
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
json-parse-even-better-errors@^2.3.0:
version "2.3.1"
resolved "https://registry.yarnpkg.com/json-parse-even-better-errors/-/json-parse-even-better-errors-2.3.1.tgz#7c47805a94319928e05777405dc12e1f7a4ee02d"
integrity sha512-xyFwyhro/JEof6Ghe2iz2NcXoj2sloNsWr/XsERDK/oiPCfaNhl5ONfp+jQdAZRQQ0IJWNzH9zIZF7li91kh2w==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
json-schema-traverse@^0.4.1:
version "0.4.1"
resolved "https://registry.yarnpkg.com/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz#69f6a87d9513ab8bb8fe63bdb0979c448e684660"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
json-schema-traverse@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz#ae7bcb3656ab77a73ba5c49bf654f38e6b6860e2"
integrity sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
json-schema@0.2.3:
version "0.2.3"
resolved "https://registry.yarnpkg.com/json-schema/-/json-schema-0.2.3.tgz#b480c892e59a2f05954ce727bd3f2a4e882f9e13"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-tIDIkuWaLwWVTOcnvT8qTogvnhM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
json-stable-stringify-without-jsonify@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz#9db7b59496ad3f3cfef30a75142d2d930ad72651"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-nbe1lJatPzz+8wp1FC0tkwrXJlE=
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Update dependency @tryghost/adapter-manager to v0.1.4
2020-05-08 18:58:44 +03:00
json-stringify-safe@5.0.1, json-stringify-safe@5.0.x, json-stringify-safe@^5.0.1, json-stringify-safe@~5.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "5.0.1"
resolved "https://registry.yarnpkg.com/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz#1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Epai1Y/UXxmg9s4B1lcB4sc1tus=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
json5@^2.1.2:
version "2.2.0"
resolved "https://registry.yarnpkg.com/json5/-/json5-2.2.0.tgz#2dfefe720c6ba525d9ebd909950f0515316c89a3"
integrity sha512-f+8cldu7X/y7RAJurMEJmdoKXGB/X550w2Nr3tTbezL6RwEE/iMcm+tZnXeoZtKuOq6ft8+CqzEkrIgx1fPoQA==
dependencies:
minimist "^1.2.5"
Update dependency fs-extra to v9
2020-03-19 18:40:31 +03:00
jsonfile@^6.0.1:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "6.1.0"
resolved "https://registry.yarnpkg.com/jsonfile/-/jsonfile-6.1.0.tgz#bc55b2634793c679ec6403094eb13698a6ec0aae"
integrity sha512-5dgndWOriYSm5cnYaJNhalLNDKOqFwyDB/rr1E9ZsGciGvKPs8R2xYGCacuf3z6K1YKDz182fd+fY3cn3pMqXQ==
Update dependency fs-extra to v9
2020-03-19 18:40:31 +03:00
dependencies:
Lock file maintenance
2021-05-05 18:56:03 +03:00
universalify "^2.0.0"
Update dependency fs-extra to v9
2020-03-19 18:40:31 +03:00
optionalDependencies:
graceful-fs "^4.1.6"
Update dependency jsonpath to v1.1.1
2021-04-01 23:00:01 +03:00
jsonpath@1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/jsonpath/-/jsonpath-1.1.1.tgz#0ca1ed8fb65bb3309248cc9d5466d12d5b0b9901"
integrity sha512-l6Cg7jRpixfbgoWgkrl77dgEj8RPvND0wMH6TwQmi9Qs4TFfS9u5cUFnbeKTwj5ga5Y3BTGGNI28k117LJ009w==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
esprima "1.2.2"
Update dependency jsonpath to v1.0.2
2019-07-02 13:28:29 +03:00
static-eval "2.0.2"
Update dependency jsonpath to v1.1.1
2021-04-01 23:00:01 +03:00
underscore "1.12.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
jsonwebtoken@8.5.1, jsonwebtoken@^8.1.0, jsonwebtoken@^8.5.1:
Update dependency jsonwebtoken to v8.5.1
2019-07-02 03:41:06 +03:00
version "8.5.1"
resolved "https://registry.yarnpkg.com/jsonwebtoken/-/jsonwebtoken-8.5.1.tgz#00e71e0b8df54c2121a1f26137df2280673bcc0d"
integrity sha512-XjwVfRS6jTMsqYs0EsuJ4LGxXV14zQybNd4L2r0UvbVnSF9Af8x7p5MzbJ90Ioz/9TI41/hTCvznF/loiSzn8w==
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
dependencies:
Update dependency jsonwebtoken to v8.5.1
2019-07-02 03:41:06 +03:00
jws "^3.2.2"
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
lodash.includes "^4.3.0"
lodash.isboolean "^3.0.3"
lodash.isinteger "^4.0.4"
lodash.isnumber "^3.0.3"
lodash.isplainobject "^4.0.6"
lodash.isstring "^4.0.1"
lodash.once "^4.0.0"
ms "^2.1.1"
Update dependency jsonwebtoken to v8.5.1
2019-07-02 03:41:06 +03:00
semver "^5.6.0"
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
jsprim@^1.2.2:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.4.1"
resolved "https://registry.yarnpkg.com/jsprim/-/jsprim-1.4.1.tgz#313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-MT5mvB5cwG5Di8G3SZwuXFastqI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
assert-plus "1.0.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
extsprintf "1.3.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
json-schema "0.2.3"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
verror "1.10.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped Koenig-related packages refs https://github.com/TryGhost/Team/issues/910 - fixed missing `alt` attributes on images in bookmark cards - added `email-cta` card - dropped node 10 support
2021-07-20 14:20:36 +03:00
juice@8.0.0, juice@^8.0.0:
Update dependency juice to v8
2021-05-26 11:23:00 +03:00
version "8.0.0"
resolved "https://registry.yarnpkg.com/juice/-/juice-8.0.0.tgz#ac77d3372373409b06a875aee425b9d381f645fe"
integrity sha512-LRCfXBOqI1wt+zYR/5xwDnf+ZyiJiDt44DGZaBSAVwZWyWv3BliaiGTLS6KCvadv3uw6XGiPPFcTfY7CdF7Z/Q==
dependencies:
cheerio "^1.0.0-rc.3"
commander "^6.1.0"
mensch "^0.3.4"
slick "^1.12.2"
web-resource-inliner "^5.0.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
just-extend@^4.0.2:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "4.2.1"
resolved "https://registry.yarnpkg.com/just-extend/-/just-extend-4.2.1.tgz#ef5e589afb61e5d66b24eca749409a8939a8c744"
integrity sha512-g3UB796vUFIY90VIv/WX3L2c8CS2MdWUww3CNrYmqza1Fg0DURc2K/O4YrnklBdQarSJ/y8JnJYDGc+1iumQjg==
Added API Key auth middleware to v2 Admin API (#10006) refs #9865 - Added `auth.authenticate.authenticateAdminApiKey` middleware - accepts signed JWT in an `Authorization: Ghost [token]` header - sets `req.api_key` if the token is valid - Updated `authenticatePrivate` middleware stack for v2 admin routes
2019-01-18 15:45:06 +03:00
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
jwa@^1.4.1:
version "1.4.1"
resolved "https://registry.yarnpkg.com/jwa/-/jwa-1.4.1.tgz#743c32985cb9e98655530d53641b66c8645b039a"
integrity sha512-qiLX/xhEEFKUAJ6FiBMbes3w9ATzyk5W7Hvzpa/SLYdxNtng+gcurvrI7TbACjIXlsJyr05/S1oUhZrc63evQA==
dependencies:
buffer-equal-constant-time "1.0.1"
ecdsa-sig-formatter "1.0.11"
safe-buffer "^5.0.1"
Update dependency jwks-rsa to v2.0.4
2021-07-19 04:46:41 +03:00
jwks-rsa@2.0.4:
version "2.0.4"
resolved "https://registry.yarnpkg.com/jwks-rsa/-/jwks-rsa-2.0.4.tgz#59d95e39f300783a8582ef8aa37d5ebbc6a8aa6f"
integrity sha512-iJqVCECYZZ+3oPmY1qXv3Fq+3ywDtuNEVBvG41pPlaR0zyGxa12nC0beAOBBUhETJmc05puS50mRQN4NkCGhmg==
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
dependencies:
"@types/express-jwt" "0.0.42"
Update dependency jwks-rsa to v2.0.4
2021-07-19 04:46:41 +03:00
debug "^4.3.2"
Update dependency jwks-rsa to v2.0.3
2021-04-23 13:02:20 +03:00
jose "^2.0.5"
Update dependency jwks-rsa to v1.8.1
2020-06-19 15:23:03 +03:00
limiter "^1.1.5"
Update dependency jwks-rsa to v2.0.4
2021-07-19 04:46:41 +03:00
lru-memoizer "^2.1.4"
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
jws@^3.2.2:
version "3.2.2"
resolved "https://registry.yarnpkg.com/jws/-/jws-3.2.2.tgz#001099f3639468c9414000e99995fa52fb478304"
integrity sha512-YHlZCB6lMTllWDtSPHz/ZXTsi8S00usEV6v1tjq8tOUZzw7DpSDWVXjXDre6ed1w/pd495ODpHZYSdkRTsa0HA==
dependencies:
jwa "^1.4.1"
safe-buffer "^5.0.1"
Installed @tryghost/members-api@0.8.3 no-issue This improves logging for webhook signature validation
2019-10-30 13:24:04 +03:00
keygrip@~1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/keygrip/-/keygrip-1.1.0.tgz#871b1681d5e159c62a445b0c74b615e0917e7226"
integrity sha512-iYSchDJ+liQ8iwbSI2QqsQOvqv58eJCEanyJPJi+Khyu8smkcKSFUCbPwzFcL7YVtZ6eONjqRX/38caJ7QjRAQ==
dependencies:
tsscmp "1.0.6"
Update dependency keypair to v1.0.3
2021-04-12 11:50:08 +03:00
keypair@1.0.3:
version "1.0.3"
resolved "https://registry.yarnpkg.com/keypair/-/keypair-1.0.3.tgz#4314109d94052a0acfd6b885695026ad29529c80"
integrity sha512-0wjZ2z/SfZZq01+3/8jYLd8aEShSa+aat1zyPGQY3IuKoEAp6DJGvu2zt6snELrQU9jbCkIlCyNOD7RdQbHhkQ==
Revert "Replaced keypair with rsa-keypair module (#10758)" This reverts commit 64735693beda5800bc81fdcd610d71a84ca36896. - `rsa-keypair` is a binary dependency that was failing to install for a lot of users, reverting for now so we can look at alternative options for speeding up boot time
2019-06-26 15:58:50 +03:00
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
keyv@^3.0.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/keyv/-/keyv-3.1.0.tgz#ecc228486f69991e49e9476485a5be1e8fc5c4d9"
integrity sha512-9ykJ/46SN/9KPM/sichzQ7OvXyGDYKGTaDlKMGCAlg2UK8KRy4jb0d8sFc+0Tt0YYnThq8X2RZgCg74RPxgcVA==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
json-buffer "3.0.0"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
keyv@^4.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "4.0.3"
resolved "https://registry.yarnpkg.com/keyv/-/keyv-4.0.3.tgz#4f3aa98de254803cafcd2896734108daa35e4254"
integrity sha512-zdGa2TOpSZPq5mU6iowDARnMBZgtCqJ11dJROFi6tg6kTn4nuUdU09lFyLFSaHrWqpIJ+EBq4E8/Dc0Vx5vLdA==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
dependencies:
json-buffer "3.0.1"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
kind-of@^3.0.2, kind-of@^3.0.3, kind-of@^3.2.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "3.2.2"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-3.2.2.tgz#31ea21a734bab9bbb0f32466d893aea51e4a3c64"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-MeohpzS6ubuw8yRm2JOupR5KPGQ=
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
dependencies:
is-buffer "^1.1.5"
kind-of@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-4.0.0.tgz#20813df3d712928b207378691a45066fae72dd57"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IIE989cSkosgc3hpGkUGb65y3Vc=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
is-buffer "^1.1.5"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
kind-of@^5.0.0:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
version "5.1.0"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-5.1.0.tgz#729c91e2d857b7a419a1f9aa65685c4c33f5845d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-NGEErnH6F2vUuXDh+OlbcKW7/wOcfdRHaZ7VWtqCztfHri/++YKmP51OdWeGPuqCOba6kk2OTe5d02VmTB80Pw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
kind-of@^6.0.0, kind-of@^6.0.2:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "6.0.3"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-6.0.3.tgz#07c05034a6c349fa06e24fa35aa76db4580ce4dd"
integrity sha512-dcS1ul+9tmeD95T+x28/ehLgd9mENa3LsvDTtzm3vyBEO7RPptvAD+t44WVXaUjTBRcrpFeFlC8WCruUR456hw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Update dependency sanitize-html to v2
2020-10-21 13:34:09 +03:00
klona@^2.0.3:
version "2.0.4"
resolved "https://registry.yarnpkg.com/klona/-/klona-2.0.4.tgz#7bb1e3affb0cb8624547ef7e8f6708ea2e39dfc0"
integrity sha512-ZRbnvdg/NxqzC7L9Uyqzf4psi1OM4Cuc+sJAkQPjO6XkQIJTNbfK2Rsmbw8fx1p2mkZdp2FZYo2+LwXYY/uwIA==
Update dependency knex-migrator to v4.0.4
2021-04-21 14:47:41 +03:00
knex-migrator@4.0.4:
version "4.0.4"
resolved "https://registry.yarnpkg.com/knex-migrator/-/knex-migrator-4.0.4.tgz#0522e6922585839639bd26d7a9e671331000acd5"
integrity sha512-8MmK2HyiVA/IR9KG/1iOwUHXylNXmHQgLbc4L64hqD2c7EH0CggjqzHhFe+PirGCpyUbXE9bBoZky64u7XpTUQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency knex-migrator to v3.4.4
2020-04-14 18:21:50 +03:00
bluebird "3.7.2"
Update dependency knex-migrator to v3.4.7
2020-08-10 15:19:33 +03:00
commander "5.1.0"
Update dependency knex-migrator to v3.4.4
2020-04-14 18:21:50 +03:00
compare-ver "2.0.2"
Updated knex-migrator to v3.5.1 no issue - Renovate was being slow again
2021-02-23 18:56:22 +03:00
debug "4.3.1"
Update dependency knex-migrator to v4.0.4
2021-04-21 14:47:41 +03:00
ghost-ignition "4.6.2"
Updated knex-migrator dependency to 4.0.1
2021-03-03 11:47:21 +03:00
knex "0.21.19"
Updated knex-migrator to v3.5.1 no issue - Renovate was being slow again
2021-02-23 18:56:22 +03:00
lodash "4.17.21"
Update dependency knex-migrator to v3.4.4
2020-04-14 18:21:50 +03:00
moment "2.24.0"
Updated knex-migrator dependency to 4.0.1
2021-03-03 11:47:21 +03:00
nconf "0.11.2"
Updated knex-migrator to v3.5.1 no issue - Renovate was being slow again
2021-02-23 18:56:22 +03:00
resolve "1.20.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
optionalDependencies:
Update dependency knex-migrator to v3.4.4
2020-04-14 18:21:50 +03:00
mysql "2.18.1"
Update dependency knex-migrator to v4.0.3
2021-04-15 18:06:28 +03:00
sqlite3 "5.0.2"
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
Update dependency knex to v0.21.19
2021-03-03 10:38:45 +03:00
knex@0.21.19:
version "0.21.19"
resolved "https://registry.yarnpkg.com/knex/-/knex-0.21.19.tgz#df504a184eb29e286245839db0867e3ca161af00"
integrity sha512-6etvrq9XI1Ck6mEc/XiXFGVpD1Lmj6v9XWojqZgEbOvyMbW7XRvgZ99yIhN/kaBH+43FEy3xv/AcbRaH+1pJtw==
dependencies:
colorette "1.2.1"
commander "^6.2.0"
debug "4.3.1"
esm "^3.2.25"
getopts "2.2.5"
interpret "^2.2.0"
liftoff "3.1.0"
lodash "^4.17.20"
pg-connection-string "2.4.0"
tarn "^3.0.1"
tildify "2.0.0"
v8flags "^3.2.0"
Update dependency knex to v0.21.21
2021-08-10 13:20:24 +03:00
knex@0.21.21:
version "0.21.21"
resolved "https://registry.yarnpkg.com/knex/-/knex-0.21.21.tgz#b1335c75afd15ff83371b096e9cc4c4eafab8c05"
integrity sha512-cjw5qO1EzVKjbywcVa61IQJMLt7PfYBRI/2NwCA/B9beXgbw652wDNLz+JM+UKKNsfwprq0ugYqBYc9q4JN36A==
dependencies:
colorette "1.2.1"
commander "^6.2.0"
debug "4.3.1"
esm "^3.2.25"
getopts "2.2.5"
interpret "^2.2.0"
liftoff "3.1.0"
lodash "^4.17.20"
pg-connection-string "2.4.0"
tarn "^3.0.1"
tildify "2.0.0"
v8flags "^3.2.0"
Update dependency brute-knex to v4.0.1
2020-11-02 20:07:12 +03:00
knex@^0.20:
version "0.20.15"
resolved "https://registry.yarnpkg.com/knex/-/knex-0.20.15.tgz#b7e9e1efd9cf35d214440d9439ed21153574679d"
integrity sha512-WHmvgfQfxA5v8pyb9zbskxCS1L1WmYgUbwBhHojlkmdouUOazvroUWlCr6KIKMQ8anXZh1NXOOtIUMnxENZG5Q==
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
dependencies:
Update dependency brute-knex to v4.0.1
2020-11-02 20:07:12 +03:00
colorette "1.1.0"
commander "^4.1.1"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
debug "4.1.1"
Update dependency brute-knex to v4.0.1
2020-11-02 20:07:12 +03:00
esm "^3.2.25"
getopts "2.2.5"
inherits "~2.0.4"
interpret "^2.0.0"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
liftoff "3.1.0"
Update dependency brute-knex to v4.0.1
2020-11-02 20:07:12 +03:00
lodash "^4.17.15"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
mkdirp "^0.5.1"
Update dependency brute-knex to v4.0.1
2020-11-02 20:07:12 +03:00
pg-connection-string "2.1.0"
tarn "^2.0.0"
tildify "2.0.0"
uuid "^7.0.1"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
v8flags "^3.1.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lazystream@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/lazystream/-/lazystream-1.0.0.tgz#f6995fe0f820392f61396be89462407bb77168e4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-9plf4PggOS9hOWvolGJAe7dxaOQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
readable-stream "^2.0.5"
Added member analytics events handling refs https://github.com/TryGhost/Team/issues/1064 refs https://github.com/TryGhost/Team/issues/1056 refs https://github.com/TryGhost/Team/issues/1054 refs https://github.com/TryGhost/Team/issues/1055 - adds handling for new member analytic events including new ingress endpoint - introduces member-analytics packages and code
2021-09-22 15:50:56 +03:00
leaky-bucket@^2.2.0:
Update dependency @tryghost/members-api to v0.27.0
2020-08-17 23:04:08 +03:00
version "2.2.0"
resolved "https://registry.yarnpkg.com/leaky-bucket/-/leaky-bucket-2.2.0.tgz#d37da29a45f64528c86b6882d2b5e1594588e2de"
integrity sha512-87qsyt18gLVb+uB+zVz1zSi3yl6UJD5AoKINNOg3PBfqMis1FGgfOTi6hLkw7lJYZ3Gawf/BLj76WhDqsT0eZA==
dependencies:
ee-argv "0.1.x"
ee-class "1.x"
ee-log "^3.0.5"
ee-types "^2.1.4"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
levn@^0.3.0, levn@~0.3.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.3.0"
resolved "https://registry.yarnpkg.com/levn/-/levn-0.3.0.tgz#3b09924edf9f083c0490fdd4c0bc4421e04764ee"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-OwmSTt+fCDwEkP3UwLxEIeBHZO4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
prelude-ls "~1.1.2"
type-check "~0.3.2"
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
levn@^0.4.1:
version "0.4.1"
resolved "https://registry.yarnpkg.com/levn/-/levn-0.4.1.tgz#ae4562c007473b932a6200d403268dd2fffc6ade"
integrity sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==
dependencies:
prelude-ls "^1.2.1"
type-check "~0.4.0"
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
liftoff@3.1.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/liftoff/-/liftoff-3.1.0.tgz#c9ba6081f908670607ee79062d700df062c52ed3"
integrity sha512-DlIPlJUkCV0Ips2zf2pJP0unEoT1kwYhiiPUGF3s/jtxTCjziNLoiVVh+jqWOWeFi6mmwQ5fNxvAUyPad4Dfog==
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
dependencies:
extend "^3.0.0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
findup-sync "^3.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
fined "^1.0.1"
flagged-respawn "^1.0.0"
is-plain-object "^2.0.4"
object.map "^1.0.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
rechoir "^0.6.2"
resolve "^1.1.7"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
liftup@~3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/liftup/-/liftup-3.0.1.tgz#1cb81aff0f368464ed3a5f1a7286372d6b1a60ce"
integrity sha512-yRHaiQDizWSzoXk3APcA71eOI/UuhEkNN9DiW2Tt44mhYzX4joFoCZlxsSOF7RyeLlfqzFLQI1ngFq3ggMPhOw==
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
dependencies:
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
extend "^3.0.2"
findup-sync "^4.0.0"
fined "^1.2.0"
flagged-respawn "^1.0.1"
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
is-plain-object "^2.0.4"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
object.map "^1.0.1"
rechoir "^0.7.0"
resolve "^1.19.0"
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
Update CSS preprocessors
2021-07-21 19:35:14 +03:00
lilconfig@^2.0.3:
version "2.0.3"
resolved "https://registry.yarnpkg.com/lilconfig/-/lilconfig-2.0.3.tgz#68f3005e921dafbd2a2afb48379986aa6d2579fd"
integrity sha512-EHKqr/+ZvdKCifpNrJCKxBTgk5XupZA3y/aCPY9mxfgBzmgh93Mt/WqjjQ38oMxXuvDokaKiM3lAgvSH2sjtHg==
Update dependency jwks-rsa to v1.8.1
2020-06-19 15:23:03 +03:00
limiter@^1.1.5:
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
version "1.1.5"
resolved "https://registry.yarnpkg.com/limiter/-/limiter-1.1.5.tgz#8f92a25b3b16c6131293a0cc834b4a838a2aa7c2"
integrity sha512-FWWMIEOxz3GwUI4Ts/IvgVy6LPvoMPgjMdQ185nN6psJyBJ4yOpzqm695/h5umdLJg2vW3GR5iG11MAkR2AzJA==
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
lines-and-columns@^1.1.6:
version "1.1.6"
resolved "https://registry.yarnpkg.com/lines-and-columns/-/lines-and-columns-1.1.6.tgz#1c00c743b433cd0a4e80758f7b64a57440d9ff00"
integrity sha1-HADHQ7QzzQpOgHWPe2SldEDZ/wA=
Allowed bookmark cards to be created without a description no issue - title+description was too limiting for some sites so we're relaxing the requirements to only require a title
2020-06-05 19:27:01 +03:00
linkify-it@^3.0.1:
version "3.0.2"
resolved "https://registry.yarnpkg.com/linkify-it/-/linkify-it-3.0.2.tgz#f55eeb8bc1d3ae754049e124ab3bb56d97797fb8"
integrity sha512-gDBO4aHNZS6coiZCKVhSNh43F9ioIL4JwRjLZPkoLIY4yZFwg264Y5lu2x6rb1Js42Gh6Yqm2f6L2AJcnkzinQ==
dependencies:
uc.micro "^1.0.1"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
livereload-js@^2.3.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "2.4.0"
resolved "https://registry.yarnpkg.com/livereload-js/-/livereload-js-2.4.0.tgz#447c31cf1ea9ab52fc20db615c5ddf678f78009c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-XPQH8Z2GDP/Hwz2PCDrh2mth4yFejwA1OZ/81Ti3LgKyhDcEjsSsqFWZojHG0va/duGd+WyosY7eXLDoOyqcPw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
locate-path@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/locate-path/-/locate-path-5.0.0.tgz#1afba396afd676a6d42504d0a67a3a7eb9f62aa0"
integrity sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==
dependencies:
p-locate "^4.1.0"
Update dependency mocha to v8.1.2
2020-08-25 22:51:28 +03:00
locate-path@^6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/locate-path/-/locate-path-6.0.0.tgz#55321eb309febbc59c4801d931a72452a681d286"
integrity sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==
Update Test & linting packages
2020-07-21 20:38:46 +03:00
dependencies:
Update dependency mocha to v8.1.2
2020-08-25 22:51:28 +03:00
p-locate "^5.0.0"
Update Test & linting packages
2020-07-21 20:38:46 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
lodash-es@^4.17.11, lodash-es@^4.17.15:
Update dependency @tryghost/job-manager to v0.8.3
2021-04-14 13:12:39 +03:00
version "4.17.21"
resolved "https://registry.yarnpkg.com/lodash-es/-/lodash-es-4.17.21.tgz#43e626c46e6591b7750beb2b50117390c609e3ee"
integrity sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
lodash._baseiteratee@~4.7.0:
version "4.7.0"
resolved "https://registry.yarnpkg.com/lodash._baseiteratee/-/lodash._baseiteratee-4.7.0.tgz#34a9b5543572727c3db2e78edae3c0e9e66bd102"
integrity sha1-NKm1VDVycnw9sueO2uPA6eZr0QI=
dependencies:
lodash._stringtopath "~4.8.0"
lodash._basetostring@~4.12.0:
version "4.12.0"
resolved "https://registry.yarnpkg.com/lodash._basetostring/-/lodash._basetostring-4.12.0.tgz#9327c9dc5158866b7fa4b9d42f4638e5766dd9df"
integrity sha1-kyfJ3FFYhmt/pLnUL0Y45XZt2d8=
lodash._baseuniq@~4.6.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash._baseuniq/-/lodash._baseuniq-4.6.0.tgz#0ebb44e456814af7905c6212fa2c9b2d51b841e8"
integrity sha1-DrtE5FaBSveQXGIS+iybLVG4Qeg=
dependencies:
lodash._createset "~4.0.0"
lodash._root "~3.0.0"
lodash._createset@~4.0.0:
version "4.0.3"
resolved "https://registry.yarnpkg.com/lodash._createset/-/lodash._createset-4.0.3.tgz#0f4659fbb09d75194fa9e2b88a6644d363c9fe26"
integrity sha1-D0ZZ+7CddRlPqeK4imZE02PJ/iY=
Updated ghost-server to use new minimal tpl helper - We are going to get rid of the internal i18n tool because it doesn't solve a real use case - Instead, we have a new tpl utility that does basic string interpolation - This pattern will make it easier for us to decouple the codebase, and the new tool helps to keep the refactor surface area really small - This is the first example of using the new tpl helper, so it also adds @tryghost/tpl
2021-06-08 18:47:31 +03:00
lodash._reinterpolate@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/lodash._reinterpolate/-/lodash._reinterpolate-3.0.0.tgz#0ccf2d89166af03b3663c796538b75ac6e114d9d"
integrity sha1-DM8tiRZq8Ds2Y8eWU4t1rG4RTZ0=
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
lodash._root@~3.0.0:
version "3.0.1"
resolved "https://registry.yarnpkg.com/lodash._root/-/lodash._root-3.0.1.tgz#fba1c4524c19ee9a5f8136b4609f017cf4ded692"
integrity sha1-+6HEUkwZ7ppfgTa0YJ8BfPTe1pI=
lodash._stringtopath@~4.8.0:
version "4.8.0"
resolved "https://registry.yarnpkg.com/lodash._stringtopath/-/lodash._stringtopath-4.8.0.tgz#941bcf0e64266e5fc1d66fed0a6959544c576824"
integrity sha1-lBvPDmQmbl/B1m/tCmlZVExXaCQ=
dependencies:
lodash._basetostring "~4.12.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.assignin@^4.0.9:
version "4.2.0"
resolved "https://registry.yarnpkg.com/lodash.assignin/-/lodash.assignin-4.2.0.tgz#ba8df5fb841eb0a3e8044232b0e263a8dc6a28a2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-uo31+4QesKPoBEIysOJjqNxqKKI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.bind@^4.1.4:
version "4.2.1"
resolved "https://registry.yarnpkg.com/lodash.bind/-/lodash.bind-4.2.1.tgz#7ae3017e939622ac31b7d7d7dcb1b34db1690d35"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-euMBfpOWIqwxt9fX3LGzTbFpDTU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
lodash.clonedeep@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.clonedeep/-/lodash.clonedeep-4.5.0.tgz#e23f3f9c4f8fbdde872529c1071857a086e5ccef"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-4j8/nE+Pvd6HJSnBBxhXoIblzO8=
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
🔥 Removed netjet support refs: https://github.com/cloudflare/netjet/issues/46 - HTTP2/Push never made it, this module is therefore defunct
2021-06-28 16:02:33 +03:00
lodash.defaults@^4.0.1, lodash.defaults@^4.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "4.2.0"
resolved "https://registry.yarnpkg.com/lodash.defaults/-/lodash.defaults-4.2.0.tgz#d09178716ffea4dde9e5fb7b37f6f0802274580c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-0JF4cW/+pN3p5ft7N/bwgCJ0WAw=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
lodash.difference@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.difference/-/lodash.difference-4.5.0.tgz#9ccb4e505d486b91651345772885a2df27fd017c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-nMtOUF1Ia5FlE0V3KIWi3yf9AXw=
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.filter@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.filter/-/lodash.filter-4.6.0.tgz#668b1d4981603ae1cc5a6fa760143e480b4c4ace"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ZosdSYFgOuHMWm+nYBQ+SAtMSs4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
lodash.flatten@^4.2.0, lodash.flatten@^4.4.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "4.4.0"
resolved "https://registry.yarnpkg.com/lodash.flatten/-/lodash.flatten-4.4.0.tgz#f31c22225a9632d2bbf8e4addbef240aa765a61f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8xwiIlqWMtK7+OSt2+8kCqdlph8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.foreach@^4.3.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.foreach/-/lodash.foreach-4.5.0.tgz#1a6a35eace401280c7f06dddec35165ab27e3e53"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Gmo16s5AEoDH8G3d7DUWWrJ+PlM=
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
lodash.get@^4.4.2:
version "4.4.2"
resolved "https://registry.yarnpkg.com/lodash.get/-/lodash.get-4.4.2.tgz#2d177f652fa31e939b4438d5341499dfa3825e99"
integrity sha1-LRd/ZS+jHpObRDjVNBSZ36OCXpk=
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
lodash.includes@^4.3.0:
version "4.3.0"
resolved "https://registry.yarnpkg.com/lodash.includes/-/lodash.includes-4.3.0.tgz#60bb98a87cb923c68ca1e51325483314849f553f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-YLuYqHy5I8aMoeUTJUgzFISfVT8=
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
lodash.isboolean@^3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/lodash.isboolean/-/lodash.isboolean-3.0.3.tgz#6c2e171db2a257cd96802fd43b01b20d5f5870f6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-bC4XHbKiV82WgC/UOwGyDV9YcPY=
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
lodash.isinteger@^4.0.4:
version "4.0.4"
resolved "https://registry.yarnpkg.com/lodash.isinteger/-/lodash.isinteger-4.0.4.tgz#619c0af3d03f8b04c31f5882840b77b11cd68343"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-YZwK89A/iwTDH1iChAt3sRzWg0M=
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
lodash.isnumber@^3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/lodash.isnumber/-/lodash.isnumber-3.0.3.tgz#3ce76810c5928d03352301ac287317f11c0b1ffc"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-POdoEMWSjQM1IwGsKHMX8RwLH/w=
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
lodash.isplainobject@^4.0.6:
version "4.0.6"
resolved "https://registry.yarnpkg.com/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz#7c526a52d89b45c45cc690b88163be0497f550cb"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-fFJqUtibRcRcxpC4gWO+BJf1UMs=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
lodash.isstring@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/lodash.isstring/-/lodash.isstring-4.0.1.tgz#d527dfb5456eca7cc9bb95d5daeaf88ba54a5451"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-1SfftUVuynzJu5XV2ur4i6VKVFE=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Update dependency eslint-plugin-ghost to v2
2020-10-23 12:01:27 +03:00
lodash.kebabcase@^4.1.1:
version "4.1.1"
resolved "https://registry.yarnpkg.com/lodash.kebabcase/-/lodash.kebabcase-4.1.1.tgz#8489b1cb0d29ff88195cceca448ff6d6cc295c36"
integrity sha1-hImxyw0p/4gZXM7KRI/21swpXDY=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.map@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.map/-/lodash.map-4.6.0.tgz#771ec7839e3473d9c4cde28b19394c3562f4f6d3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-dx7Hg540c9nEzeKLGTlMNWL09tM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
lodash.memoize@^4.1.2:
version "4.1.2"
resolved "https://registry.yarnpkg.com/lodash.memoize/-/lodash.memoize-4.1.2.tgz#bcc6c49a42a2840ed997f323eada5ecd182e0bfe"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-vMbEmkKihA7Zl/Mj6tpezRguC/4=
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency eslint to v7.27.0
2021-05-24 03:31:56 +03:00
lodash.merge@^4.4.0, lodash.merge@^4.6.2:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "4.6.2"
resolved "https://registry.yarnpkg.com/lodash.merge/-/lodash.merge-4.6.2.tgz#558aa53b43b661e1925a0afdfa36a9a1085fe57a"
integrity sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
lodash.once@^4.0.0:
version "4.1.1"
resolved "https://registry.yarnpkg.com/lodash.once/-/lodash.once-4.1.1.tgz#0dd3971213c7c56df880977d504c88fb471a97ac"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-DdOXEhPHxW34gJd9UEyI+0cal6w=
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
Update dependency node-jose to v1.1.3
2019-07-02 03:37:57 +03:00
lodash.pick@^4.2.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "4.4.0"
resolved "https://registry.yarnpkg.com/lodash.pick/-/lodash.pick-4.4.0.tgz#52f05610fff9ded422611441ed1fc123a03001b3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-UvBWEP/53tQiYRRB7R/BI6AwAbM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.reduce@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.reduce/-/lodash.reduce-4.6.0.tgz#f1ab6b839299ad48f784abbf476596f03b914d3b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8atrg5KZrUj3hKu/R2WW8DuRTTs=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.reject@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.reject/-/lodash.reject-4.6.0.tgz#80d6492dc1470864bbf583533b651f42a9f52415"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-gNZJLcFHCGS79YNTO2UfQqn1JBU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages
2020-07-21 20:38:46 +03:00
lodash.set@^4.0.0, lodash.set@^4.3.2:
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
version "4.3.2"
resolved "https://registry.yarnpkg.com/lodash.set/-/lodash.set-4.3.2.tgz#d8757b1da807dde24816b0d6a84bea1a76230b23"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-2HV7HagH3eJIFrDWqEvqGnYjCyM=
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.some@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.some/-/lodash.some-4.6.0.tgz#1bb9f314ef6b8baded13b549169b2a945eb68e4d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-G7nzFO9ri63tE7VJFpsqlF62jk0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated ghost-server to use new minimal tpl helper - We are going to get rid of the internal i18n tool because it doesn't solve a real use case - Instead, we have a new tpl utility that does basic string interpolation - This pattern will make it easier for us to decouple the codebase, and the new tool helps to keep the refactor surface area really small - This is the first example of using the new tpl helper, so it also adds @tryghost/tpl
2021-06-08 18:47:31 +03:00
lodash.template@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.template/-/lodash.template-4.5.0.tgz#f976195cf3f347d0d5f52483569fe8031ccce8ab"
integrity sha512-84vYFxIkmidUiFxidA/KjjH9pAycqW+h980j7Fuz5qxRtO9pgB7MDFTdys1N7A5mcucRiDyEq4fusljItR1T/A==
dependencies:
lodash._reinterpolate "^3.0.0"
lodash.templatesettings "^4.0.0"
lodash.templatesettings@^4.0.0:
version "4.2.0"
resolved "https://registry.yarnpkg.com/lodash.templatesettings/-/lodash.templatesettings-4.2.0.tgz#e481310f049d3cf6d47e912ad09313b154f0fb33"
integrity sha512-stgLz+i3Aa9mZgnjr/O+v9ruKZsPsndy7qPZOchbqk2cnTU1ZaldKK+v7m54WoKIyxiuMZTKT2H81F8BeAc3ZQ==
dependencies:
lodash._reinterpolate "^3.0.0"
Lock file maintenance
2021-05-05 18:56:03 +03:00
lodash.truncate@^4.4.2:
version "4.4.2"
resolved "https://registry.yarnpkg.com/lodash.truncate/-/lodash.truncate-4.4.2.tgz#5a350da0b1113b837ecfffd5812cbe58d6eae193"
integrity sha1-WjUNoLERO4N+z//VgSy+WNbq4ZM=
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
lodash.union@^4.6.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.union/-/lodash.union-4.6.0.tgz#48bb5088409f16f1821666641c44dd1aaae3cd88"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-SLtQiECfFvGCFmZkHETdGqrjzYg=
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
lodash.uniq@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.uniq/-/lodash.uniq-4.5.0.tgz#d0225373aeb652adc1bc82e4945339a842754773"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-0CJTc662Uq3BvILklFM5qEJ1R3M=
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
lodash.uniqby@4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.uniqby/-/lodash.uniqby-4.5.0.tgz#a3a17bbf62eeb6240f491846e97c1c4e2a5e1e21"
integrity sha1-o6F7v2LutiQPSRhG6XwcTipeHiE=
dependencies:
lodash._baseiteratee "~4.7.0"
lodash._baseuniq "~4.6.0"
Lock file maintenance
2021-09-20 03:12:18 +03:00
lodash@4.17.21, lodash@^4.14.2, lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.19, lodash@^4.17.20, lodash@^4.17.21, lodash@^4.7.0, lodash@~4.17.10, lodash@~4.17.19, lodash@~4.17.21:
Update dependency lodash to v4.17.21
2021-02-23 00:53:57 +03:00
version "4.17.21"
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
Update dependency mocha to v9
2021-06-07 20:05:28 +03:00
log-symbols@4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/log-symbols/-/log-symbols-4.1.0.tgz#3fbdbb95b4683ac9fc785111e792e558d4abd503"
integrity sha512-8XPvpAA8uyhfteu8pIvQxpJZ7SYYdpUivZpGy6sFsBuKRY/7rQGavedeB8aK+Zkyq6upMFVL/9AW6vOYzfRyLg==
dependencies:
chalk "^4.1.0"
is-unicode-supported "^0.1.0"
Update dependency @tryghost/members-api to v0.27.0
2020-08-17 23:04:08 +03:00
logd-console-output@^1.2.1:
version "1.3.0"
resolved "https://registry.yarnpkg.com/logd-console-output/-/logd-console-output-1.3.0.tgz#a49eb7a2ca25ce3b3e726b6e49d6639304241bae"
integrity sha512-Aau5xxpDXWBRIwl6zgConqmyNRBFq8VoQbzpQJjp9QVfrEtMgWUMbP2CUF9lCmMg0d2TQ79tEJA83+uQY36WAA==
dependencies:
app-root-path "^2.1.0"
chalk "^2.4.1"
ee-types "^2.2.0"
glob "^7.1.2"
Updated Ghost-Ignition to latest version
2021-03-03 20:47:56 +03:00
long-timeout@^0.1.1, long-timeout@~0.1.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.1.1"
resolved "https://registry.yarnpkg.com/long-timeout/-/long-timeout-0.1.1.tgz#9721d788b47e0bcb5a24c2e2bee1a0da55dab514"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-lyHXiLR+C8taJMLivuGg2lXatRQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
long@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/long/-/long-4.0.0.tgz#9a7b71cfb7d361a194ea555241c92f7468d5bf28"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-XsP+KhQif4bjX1kbuSiySJFNAehNxgLb6hPRGJ9QsUr8ajHkuXGdrHmFUTUUXhDwVX2R5bY4JNZEwbUiMhV+MA==
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
longest-streak@^2.0.1:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "2.0.4"
resolved "https://registry.yarnpkg.com/longest-streak/-/longest-streak-2.0.4.tgz#b8599957da5b5dab64dee3fe316fa774597d90e4"
integrity sha512-vM6rUVCVUJJt33bnmHiZEvr7wPT78ztX7rojL+LW51bHtLh6HTjx84LA5W4+oa6aKEJA7jJu5LR6vQRBpA5DVg==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
lower-case@^2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/lower-case/-/lower-case-2.0.2.tgz#6fa237c63dbdc4a82ca0fd882e4722dc5e634e28"
integrity sha512-7fm3l3NAF9WfN6W3JOmf5drwpVqX78JtoGJ3A6W0a6ZnldM41w2fV5D490psKFTpMds8TJse/eHLFFsNHHjHgg==
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
dependencies:
Lock file maintenance
2021-05-05 18:56:03 +03:00
tslib "^2.0.3"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
lowercase-keys@^1.0.0, lowercase-keys@^1.0.1:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/lowercase-keys/-/lowercase-keys-1.0.1.tgz#6f9e30b47084d971a7c820ff15a6c5167b74c26f"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
integrity sha512-G2Lj61tXDnVFFOi8VZds+SoQjtQC3dgokKdDG2mTm1tx4m50NUHBOZSBwQQHyy0V12A0JTG4icfZQH+xPyh8VA==
lowercase-keys@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/lowercase-keys/-/lowercase-keys-2.0.0.tgz#2603e78b7b4b0006cbca2fbcc8a3202558ac9479"
integrity sha512-tqNXrS78oMOE73NMxK4EMLQsQowWf8jKooH9g7xPavRT706R6bkQJ6DY2Te7QukaZsulxa30wQ7bk0pm4XiHmA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🔥 Removed netjet support refs: https://github.com/cloudflare/netjet/issues/46 - HTTP2/Push never made it, this module is therefore defunct
2021-06-28 16:02:33 +03:00
lru-cache@^4.1.5:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "4.1.5"
resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-4.1.5.tgz#8bbe50ea85bed59bc9e33dcab8235ee9bcf443cd"
Updated express-hbs to 2.1.2 no-issue ronseal.
2019-05-20 13:35:04 +03:00
integrity sha512-sWZlbEP2OsHNkXrMl5GYk/jKk70MBng6UU4YI/qGDYbgf6YbP4EvmqISbXCoJiRKs+1bSpFHVgQxvJ17F2li5g==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
pseudomap "^1.0.2"
yallist "^2.1.2"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
lru-cache@^5.1.1:
version "5.1.1"
resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-5.1.1.tgz#1da27e6710271947695daf6848e847f01d84b920"
integrity sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==
dependencies:
yallist "^3.0.2"
Update dependency semver to v7.3.4
2020-12-01 23:17:51 +03:00
lru-cache@^6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-6.0.0.tgz#6d6fe6570ebd96aaf90fcad1dafa3b2566db3a94"
integrity sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==
dependencies:
yallist "^4.0.0"
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
lru-cache@~4.0.0:
version "4.0.2"
resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-4.0.2.tgz#1d17679c069cda5d040991a09dbc2c0db377e55e"
integrity sha1-HRdnnAac2l0ECZGgnbwsDbN35V4=
dependencies:
pseudomap "^1.0.1"
yallist "^2.0.0"
Update dependency jwks-rsa to v2.0.4
2021-07-19 04:46:41 +03:00
lru-memoizer@^2.1.4:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "2.1.4"
resolved "https://registry.yarnpkg.com/lru-memoizer/-/lru-memoizer-2.1.4.tgz#b864d92b557f00b1eeb322156a0409cb06dafac6"
integrity sha512-IXAq50s4qwrOBrXJklY+KhgZF+5y98PDaNo0gi/v2KQBFLyWr+JyFvijZXkGKjQj/h9c0OwoE+JZbwUXce76hQ==
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
dependencies:
lodash.clonedeep "^4.5.0"
lru-cache "~4.0.0"
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
lru_map@^0.3.3:
version "0.3.3"
resolved "https://registry.yarnpkg.com/lru_map/-/lru_map-0.3.3.tgz#b5c8351b9464cbd750335a79650a0ec0e56118dd"
integrity sha1-tcg1G5Rky9dQM1p5ZQoOwOVhGN0=
Added support for max periodic limit check refs https://github.com/TryGhost/Team/issues/588 - This is a new type of limit allowing to measure resource use (e.g. sent emails) per period (e.g. subscription, billing, cycle, etc) - To enable periodical limit add following values under `hostSettings.limits`: ``` "emails": { "maxPeriodic": 10, "error": "Your plan supports up to {{max}} emails. Please upgrade to reenable sending emails." } ``` and following under `hostSettings.subscription`: ``` "subscription": { "start": "2020-04-02T15:53:55.000Z", "interval": "month" } ``` - Above config would allow checking if 10 emails per month starting on the 2nd of every month has been reached untill now
2021-05-07 17:41:49 +03:00
luxon@^1.26.0:
Lock file maintenance
2021-07-12 05:24:06 +03:00
version "1.28.0"
resolved "https://registry.yarnpkg.com/luxon/-/luxon-1.28.0.tgz#e7f96daad3938c06a62de0fb027115d251251fbf"
integrity sha512-TfTiyvZhwBYM/7QdAVDh+7dBTBA29v4ik0Ce9zda3Mnf8on1S5KJI8P2jKFZ8+5C0jhmr0KwJEO/Wdpm0VeWJQ==
Added support for max periodic limit check refs https://github.com/TryGhost/Team/issues/588 - This is a new type of limit allowing to measure resource use (e.g. sent emails) per period (e.g. subscription, billing, cycle, etc) - To enable periodical limit add following values under `hostSettings.limits`: ``` "emails": { "maxPeriodic": 10, "error": "Your plan supports up to {{max}} emails. Please upgrade to reenable sending emails." } ``` and following under `hostSettings.subscription`: ``` "subscription": { "start": "2020-04-02T15:53:55.000Z", "interval": "month" } ``` - Above config would allow checking if 10 emails per month starting on the 2nd of every month has been reached untill now
2021-05-07 17:41:49 +03:00
Extracted email analytics library code to external packages (#12541) closes https://github.com/TryGhost/Team/issues/493 - all functionality except that directly related to Ghost's database and business logic now lives in external packages - @tryghost/email-analytics-service - @tryghost/email-analytics-provider-mailgun
2021-03-02 10:26:33 +03:00
mailgun-js@0.22.0, mailgun-js@^0.22.0:
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
version "0.22.0"
resolved "https://registry.yarnpkg.com/mailgun-js/-/mailgun-js-0.22.0.tgz#128942b5e47a364a470791608852bf68c96b3a05"
integrity sha512-a2alg5nuTZA9Psa1pSEIEsbxr1Zrmqx4VkgGCQ30xVh0kIH7Bu57AYILo+0v8QLSdXtCyLaS+KVmdCrQo0uWFA==
dependencies:
async "^2.6.1"
debug "^4.1.0"
form-data "^2.3.3"
inflection "~1.12.0"
is-stream "^1.1.0"
path-proxy "~1.0.0"
promisify-call "^2.0.2"
proxy-agent "^3.0.3"
tsscmp "^1.0.6"
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
make-dir@^3.0.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/make-dir/-/make-dir-3.1.0.tgz#415e967046b3a7f1d185277d84aa58203726a13f"
integrity sha512-g3FeP20LNwhALb/6Cz6Dd4F2ngze0jz7tbzrD2wAV+o9FeNHe4rL+yK2md0J/fiSf1sa1ADhXqi5+oVwOM/eGw==
dependencies:
semver "^6.0.0"
Lock file maintenance
2021-06-01 18:19:18 +03:00
make-fetch-happen@^8.0.14:
version "8.0.14"
resolved "https://registry.yarnpkg.com/make-fetch-happen/-/make-fetch-happen-8.0.14.tgz#aaba73ae0ab5586ad8eaa68bd83332669393e222"
integrity sha512-EsS89h6l4vbfJEtBZnENTOFk8mCRpY5ru36Xe5bcX1KYIli2mkSHqoFsp5O1wMDvTJJzxe/4THpCTtygjeeGWQ==
dependencies:
agentkeepalive "^4.1.3"
cacache "^15.0.5"
http-cache-semantics "^4.1.0"
http-proxy-agent "^4.0.1"
https-proxy-agent "^5.0.0"
is-lambda "^1.0.1"
lru-cache "^6.0.0"
minipass "^3.1.3"
minipass-collect "^1.0.2"
minipass-fetch "^1.3.2"
minipass-flush "^1.0.5"
minipass-pipeline "^1.2.4"
promise-retry "^2.0.1"
socks-proxy-agent "^5.0.0"
ssri "^8.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
make-iterator@^1.0.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/make-iterator/-/make-iterator-1.0.1.tgz#29b33f312aa8f547c4a5e490f56afcec99133ad6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-pxiuXh0iVEq7VM7KMIhs5gxsfxCux2URptUQaXo4iZZJxBAzTPOLE2BumO5dbfVYq/hBJFBR/a1mFDmOx5AGmw==
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
kind-of "^6.0.2"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
map-cache@^0.2.0, map-cache@^0.2.2:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
version "0.2.2"
resolved "https://registry.yarnpkg.com/map-cache/-/map-cache-0.2.2.tgz#c32abd0bd6525d9b051645bb4f26ac5dc98a0dbf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-wyq9C9ZSXZsFFkW7TyasXcmKDb8=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
map-visit@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/map-visit/-/map-visit-1.0.0.tgz#ecdca8f13144e660f1b5bd41f12f3479d98dfb8f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-7Nyo8TFE5mDxtb1B8S80edmN+48=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
object-visit "^1.0.0"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
markdown-escapes@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/markdown-escapes/-/markdown-escapes-1.0.4.tgz#c95415ef451499d7602b91095f3c8e8975f78535"
integrity sha512-8z4efJYk43E0upd0NbVXwgSTQs6cT3T06etieCMEg7dRbzCbxUCK/GHlX8mhHRDcp+OLlHkPKsvqQTCvsRl2cg==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
Bumped Koenig packages no issue - includes sub-dependency bumps for `markdown-it` packages for markdown renderer bug fixes and to keep Ghost and Admin markdown rendering in sync
2021-06-01 11:40:09 +03:00
markdown-it-footnote@^3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/markdown-it-footnote/-/markdown-it-footnote-3.0.3.tgz#e0e4c0d67390a4c5f0c75f73be605c7c190ca4d8"
integrity sha512-YZMSuCGVZAjzKMn+xqIco9d1cLGxbELHZ9do/TSYVzraooV8ypsppKNmUJ0fVH5ljkCInQAtFpm8Rb3eXSrt5w==
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
Bumped Koenig packages no issue - includes sub-dependency bumps for `markdown-it` packages for markdown renderer bug fixes and to keep Ghost and Admin markdown rendering in sync
2021-06-01 11:40:09 +03:00
markdown-it-image-lazy-loading@^1.1.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/markdown-it-image-lazy-loading/-/markdown-it-image-lazy-loading-1.1.0.tgz#8df2b76bd5ee7c40b029cd73a5f2a02d00e97390"
integrity sha512-3Mk/UjzNdYvhWyslIti9YUFSzQkmnaGsI3HC4jkw19VcIbnmp5Sofi18p1sIAHIvrQUGTAx8oW8tSDKSZEL49Q==
dependencies:
image-size "^1.0.0"
✨ Added native lazy loading behaviour to content images refs https://github.com/TryGhost/Ghost/issues/1325 - updated `kg-default-cards` to version that includes lazy loading attributes on image and gallery card output - updated `kg-markdown-html-renderer` to version that includes lazy loading attributes on markdown images
2021-02-18 21:53:35 +03:00
Extracted markdown-html-renderer to @tryghost/kg-markdown-html-renderer no issue - prep for further extraction of mobiledoc cards and renderer
2020-03-25 16:34:26 +03:00
markdown-it-lazy-headers@^0.1.3:
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
version "0.1.3"
resolved "https://registry.yarnpkg.com/markdown-it-lazy-headers/-/markdown-it-lazy-headers-0.1.3.tgz#e70dd4da79c87a9ce82ca4701b8b7c0e2d72297b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-5w3U2nnIepzoLKRwG4t8Di1yKXs=
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
Extracted markdown-html-renderer to @tryghost/kg-markdown-html-renderer no issue - prep for further extraction of mobiledoc cards and renderer
2020-03-25 16:34:26 +03:00
markdown-it-mark@^3.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "3.0.1"
resolved "https://registry.yarnpkg.com/markdown-it-mark/-/markdown-it-mark-3.0.1.tgz#51257db58787d78aaf46dc13418d99a9f3f0ebd3"
integrity sha512-HyxjAu6BRsdt6Xcv6TKVQnkz/E70TdGXEFHRYBGLncRE9lBFwDNLVtFojKxjJWgJ+5XxUwLaHXy+2sGBbDn+4A==
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
Bumped @tryghost/kg-* dependencies no issue - includes bump to minimum version of `markdown-it` for consistency between Ghost and Admin markdown rendering
2021-09-13 11:34:18 +03:00
markdown-it@^12.2.0:
Lock file maintenance
2021-08-09 03:03:02 +03:00
version "12.2.0"
resolved "https://registry.yarnpkg.com/markdown-it/-/markdown-it-12.2.0.tgz#091f720fd5db206f80de7a8d1f1a7035fd0d38db"
integrity sha512-Wjws+uCrVQRqOoJvze4HCqkKl1AsSh95iFAeQDwnyfxM09divCBSXlDR1uTvyUP3Grzpn4Ru8GeCxYPM8vkCQg==
Update dependency @tryghost/kg-markdown-html-renderer to v3 (#12521) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-12 14:21:37 +03:00
dependencies:
argparse "^2.0.1"
entities "~2.1.0"
linkify-it "^3.0.1"
mdurl "^1.0.1"
uc.micro "^1.0.5"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
markdown-table@^1.1.0:
version "1.1.3"
resolved "https://registry.yarnpkg.com/markdown-table/-/markdown-table-1.1.3.tgz#9fcb69bcfdb8717bfd0398c6ec2d93036ef8de60"
integrity sha512-1RUZVgQlpJSPWYbFSpmudq5nHY1doEIv89gBtF0s4gW1GF2XorxcA/70M5vq7rLv0a6mhOUccRsqkwhwLCIQ2Q==
Update dependency @lodder/grunt-postcss to v3
2020-10-20 11:41:14 +03:00
maxmin@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/maxmin/-/maxmin-3.0.0.tgz#3ee9acc8a2b9f2b5416e94f5705319df8a9c71e6"
integrity sha512-wcahMInmGtg/7c6a75fr21Ch/Ks1Tb+Jtoan5Ft4bAI0ZvJqyOw8kkM7e7p8hDSzY805vmxwHT50KcjGwKyJ0g==
dependencies:
chalk "^4.1.0"
figures "^3.2.0"
gzip-size "^5.1.1"
pretty-bytes "^5.3.0"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
md5@^2.2.1:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "2.3.0"
resolved "https://registry.yarnpkg.com/md5/-/md5-2.3.0.tgz#c3da9a6aae3a30b46b7b0c349b87b110dc3bda4f"
integrity sha512-T1GITYmFaKuO91vxyoQMFETst+O71VUPEU3ze5GNzDm0OWdP8v1ziTaAEPUr/3kLsY3Sftgz242A1SetQiDL7g==
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
dependencies:
Lock file maintenance
2021-05-05 18:56:03 +03:00
charenc "0.0.2"
crypt "0.0.2"
is-buffer "~1.1.6"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
mdast-util-compact@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/mdast-util-compact/-/mdast-util-compact-1.0.4.tgz#d531bb7667b5123abf20859be086c4d06c894593"
integrity sha512-3YDMQHI5vRiS2uygEFYaqckibpJtKq5Sj2c8JioeOQBU6INpKbdWzfyLqFFnDwEcEnRFIdMsguzs5pC1Jp4Isg==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
dependencies:
unist-util-visit "^1.1.0"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
mdn-data@2.0.14:
version "2.0.14"
resolved "https://registry.yarnpkg.com/mdn-data/-/mdn-data-2.0.14.tgz#7113fc4281917d63ce29b43446f701e68c25ba50"
integrity sha512-dn6wd0uw5GsdswPFfsgMp5NSB0/aDe6fK94YJV/AJDYXL6HVLWBsxeq7js7Ad+mU2K9LAlwpk6kN2D5mwCPVow==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
mdurl@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/mdurl/-/mdurl-1.0.1.tgz#fe85b2ec75a59037f2adfec100fd6c601761152e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-/oWy7HWlkDfyrf7BAP1sYBdhFS4=
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
media-typer@0.3.0:
version "0.3.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/media-typer/-/media-typer-0.3.0.tgz#8710d7af0aa626f8fffa1ce00168545263255748"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-hxDXrwqmJvj/+hzgAWhUUmMlV0g=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
memoize-one@~5.2.1:
version "5.2.1"
resolved "https://registry.yarnpkg.com/memoize-one/-/memoize-one-5.2.1.tgz#8337aa3c4335581839ec01c3d594090cebe8f00e"
integrity sha512-zYiwtZUcYyXKo/np96AGZAckk+FWWsUdJ3cHGGmld7+AhvcWmQyGCYUh1hc4Q/pkOhb65dQR/pqCyK0cOaHz4Q==
Update dependency metascraper to v5.7.14
2019-10-28 03:35:29 +03:00
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
mensch@^0.3.4:
version "0.3.4"
resolved "https://registry.yarnpkg.com/mensch/-/mensch-0.3.4.tgz#770f91b46cb16ea5b204ee735768c3f0c491fecd"
integrity sha512-IAeFvcOnV9V0Yk+bFhYR07O3yNina9ANIN5MoXBKYJ/RLYPurd2d0yw14MDhpr9/momp0WofT1bPUh3hkzdi/g==
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
Moved vhost arg logic out of the parent app - Makes the logic for determining the admin and frontend vhost args independent and easier to test - Moved the tests to specifically test the vhost utils & removed proxyquire as a dependency - We want to breakdown the current parent app into the existing core/app.js and boot code, allowing us to decouple the backend and frontend further - This is all part of the refactoring to separate server and frontend completely
2021-06-28 16:27:22 +03:00
merge-descriptors@1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/merge-descriptors/-/merge-descriptors-1.0.1.tgz#b00aaa556dd8b44568150ec9d1b953f3f90cbb61"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-sAqqVW3YtEVoFQ7J0blT8/kMu2E=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
metascraper-author@5.24.7:
version "5.24.7"
resolved "https://registry.yarnpkg.com/metascraper-author/-/metascraper-author-5.24.7.tgz#e1be219a6232ea55ab962b28d8403cbc9bcb26c5"
integrity sha512-07quzpPa+oc2cawacPbAuaOqoyvt1zVpyz9BHmStE176Xtv1jk5nrhJej6bTY93miOLBOw/+ONxhRkzHh3zqcQ==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
"@metascraper/helpers" "^5.24.7"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
metascraper-description@5.24.7:
version "5.24.7"
resolved "https://registry.yarnpkg.com/metascraper-description/-/metascraper-description-5.24.7.tgz#2380d550a75e07ef1b80edb8767e27f7b340c695"
integrity sha512-oejH7Ei9S/z8VSZzHSZKxsEh77h8pCUW4B6YaCC4l1i3q0c84gp+Z5nTJaqqrfTEaINmxNtK6w5i5KO1/NiL2g==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
"@metascraper/helpers" "^5.24.7"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
metascraper-image@5.24.7:
version "5.24.7"
resolved "https://registry.yarnpkg.com/metascraper-image/-/metascraper-image-5.24.7.tgz#db0f14db35b819191d9dd815f656ea4e7afb769c"
integrity sha512-sT7rNkKA4zoSDb+Nz4xunjM6kwbUrGsP2akh00w6ztC/4xLbLE8mz7/GpZEyscGlopDOZCv18sIsBkOdlUkU9A==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
"@metascraper/helpers" "^5.24.7"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
metascraper-logo-favicon@5.24.7:
version "5.24.7"
resolved "https://registry.yarnpkg.com/metascraper-logo-favicon/-/metascraper-logo-favicon-5.24.7.tgz#f89f594972d08eb62ded4d5f23f5148ccd5054a3"
integrity sha512-/1B9An+paxhVJ/adtkQB+zIyTeRlYyHmfGJJDzmtJfFoG2yA2jBWIkjxmm5JQj1CaoWLYem5gdMPalnzLyoz6Q==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
"@metascraper/helpers" "^5.24.7"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
got "~11.8.2"
lodash "~4.17.21"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
metascraper-logo@5.24.7:
version "5.24.7"
resolved "https://registry.yarnpkg.com/metascraper-logo/-/metascraper-logo-5.24.7.tgz#232518115b65a60716ad5d0364908e4be31c251f"
integrity sha512-+QxyXw25NfpeRo2ExarH1sF/nXqoaI7TdQw/RS2xHnWs+I3EgxI+mB+3LyOJyhv0CLdx4/Q8zpV13t1bVwF4tg==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
"@metascraper/helpers" "^5.24.7"
Update metascraper
2021-07-12 03:37:41 +03:00
lodash "~4.17.21"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
metascraper-publisher@5.24.7:
version "5.24.7"
resolved "https://registry.yarnpkg.com/metascraper-publisher/-/metascraper-publisher-5.24.7.tgz#fd8f4f9be863aaa98a7aff0f8f3faeb1996c9f83"
integrity sha512-vMTjCjhUDjXf0CIEZSdW6gIb2Xv40ytbEcjTEKzwa/JKkvr4uVq/B8zj+4S1CBmCnfh/O5tx87cPJT9w9KrWCA==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
"@metascraper/helpers" "^5.24.7"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
metascraper-title@5.24.7:
version "5.24.7"
resolved "https://registry.yarnpkg.com/metascraper-title/-/metascraper-title-5.24.7.tgz#ef05b7c0e8f080a116bd6c2ae26b2bde1bf1f6c3"
integrity sha512-NC0iz1mW0RnRUjZwuXYaQnNVCHeDxNtlrtCNw5WYEdqJNJTcv/JJ5bYhd/NKsVlUQQNyxYqvXfboDSAaNBEo6g==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
"@metascraper/helpers" "^5.24.7"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
metascraper-url@5.24.7:
version "5.24.7"
resolved "https://registry.yarnpkg.com/metascraper-url/-/metascraper-url-5.24.7.tgz#37b53d506d568467bdce77cb9ac15dd7d8ad9537"
integrity sha512-bfhH+zIrxsRqQbpHLVCsqmLKGNndtutIj0Xlxlh3lmgAz2FqrbvfIqJXelE83hDIEyRHAdg8UYzWqs2w1GZ/xA==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
"@metascraper/helpers" "^5.24.7"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
metascraper@5.24.7:
version "5.24.7"
resolved "https://registry.yarnpkg.com/metascraper/-/metascraper-5.24.7.tgz#f4f07f9ea20e72fc4b096295631d479d1c759a6d"
integrity sha512-FhsBCswWQjTizQgl+mJYuGb1s8Mk+RYgi5W/DSUJ7Soh6KniAiOy9rQ31/r8HxqB2IjXq3z4lkNFSBPetZdBFQ==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.24.7
2021-09-28 00:15:26 +03:00
"@metascraper/helpers" "^5.24.7"
Update metascraper to v5.22.1
2021-06-09 18:53:54 +03:00
cheerio "~1.0.0-rc.10"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
lodash "~4.17.21"
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
whoops "~4.1.0"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update dependency supertest to v6.1.0
2021-01-15 20:09:41 +03:00
methods@^1.1.2, methods@~1.1.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/methods/-/methods-1.1.2.tgz#5529a4d67654134edcc5266656835b0f851afcee"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-VSmk1nZUE07cxSZmVoNbD4Ua/O4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
micromatch@^3.0.4:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
version "3.1.10"
resolved "https://registry.yarnpkg.com/micromatch/-/micromatch-3.1.10.tgz#70859bc95c9840952f359a068a3fc49f9ecfac23"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-MWikgl9n9M3w+bpsY3He8L+w9eF9338xRl8IAO5viDizwSzziFEyUzo2xrrloB64ADbTf8uA8vRqqttDTOmccg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
arr-diff "^4.0.0"
array-unique "^0.3.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
braces "^2.3.1"
define-property "^2.0.2"
extend-shallow "^3.0.2"
extglob "^2.0.4"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
fragment-cache "^0.2.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
kind-of "^6.0.2"
nanomatch "^1.2.9"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
object.pick "^1.3.0"
regex-not "^1.0.0"
snapdragon "^0.8.1"
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
to-regex "^3.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
micromatch@^4.0.2:
version "4.0.4"
resolved "https://registry.yarnpkg.com/micromatch/-/micromatch-4.0.4.tgz#896d519dfe9db25fce94ceb7a500919bf881ebf9"
integrity sha512-pRmzw/XUcwXGpD9aI9q/0XOwLNygjETJ8y0ao0wdqprrzDa4YnxLcz7fQRZr8voh8V10kGhABbNcHVk5wHgWwg==
dependencies:
braces "^3.0.1"
picomatch "^2.2.3"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
microsoft-capitalize@~1.0.5:
version "1.0.5"
resolved "https://registry.yarnpkg.com/microsoft-capitalize/-/microsoft-capitalize-1.0.5.tgz#bcaf915039f14224c8cfd74c31cea42fecacbb31"
integrity sha512-iqDMU9J643BHg8Zp7EMZNLTp6Pgs2f1S2SMnCW2VlUqMs17xCZ5vwVjalBJEGVcUfG+/1ePqeEGcMW3VfzHK5A==
Lock file maintenance
2021-09-20 03:12:18 +03:00
mime-db@1.49.0:
Lock file maintenance
2021-08-02 05:46:09 +03:00
version "1.49.0"
resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.49.0.tgz#f3dfde60c99e9cf3bc9701d687778f537001cbed"
integrity sha512-CIc8j9URtOVApSFCQIF+VBkX1RwXp/oMMOrqdyXSBXq5RWNEsRfyj1kiRnQgmNXmHxPoFIxOroKA3zcU9P+nAA==
Lock file maintenance
2021-06-01 18:19:18 +03:00
Lock file maintenance
2021-09-20 03:12:18 +03:00
"mime-db@>= 1.43.0 < 2":
version "1.50.0"
resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.50.0.tgz#abd4ac94e98d3c0e185016c67ab45d5fde40c11f"
integrity sha512-9tMZCDlYHqeERXEHO9f/hKfNXhre5dK2eE/krIvUjZbS2KPcqGDfNShIWS1uW9XOTKQKqK6qbeOci18rbfW77A==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
mime-db@~1.25.0:
version "1.25.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.25.0.tgz#c18dbd7c73a5dbf6f44a024dc0d165a1e7b1c392"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-wY29fHOl2/b0SgJNwNFloeexw5I=
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
Update moment-timezone to version 0.5.13 🚀 (#8272) * chore(package): update moment-timezone to version 0.5.13 https://greenkeeper.io/ * chore: yarn.lock
2017-04-05 10:56:39 +03:00
mime-types@2.1.13:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.1.13"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/mime-types/-/mime-types-2.1.13.tgz#e07aaa9c6c6b9a7ca3012c69003ad25a39e92a88"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-4HqqnGxrmnyjASxpADrSWjnpKog=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
mime-db "~1.25.0"
Update metascraper to v5.24.6
2021-09-13 11:35:39 +03:00
mime-types@^2.1.12, mime-types@~2.1.19, mime-types@~2.1.24, mime-types@~2.1.32:
Lock file maintenance
2021-08-02 05:46:09 +03:00
version "2.1.32"
resolved "https://registry.yarnpkg.com/mime-types/-/mime-types-2.1.32.tgz#1d00e89e7de7fe02008db61001d9e02852670fd5"
integrity sha512-hJGaVS4G4c9TSMYh2n6SQAGrC4RnfU+daP8G7cSCmaqNjiOoUY0VHCMS42pxnQmVF1GWwFhbHWn3RIxCqTmZ9A==
Update metascraper to v5.22.1
2021-06-09 18:53:54 +03:00
dependencies:
Lock file maintenance
2021-08-02 05:46:09 +03:00
mime-db "1.49.0"
Update metascraper to v5.22.1
2021-06-09 18:53:54 +03:00
Update dependency supertest to v5
2020-09-25 16:36:48 +03:00
mime@1.6.0:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.6.0"
resolved "https://registry.yarnpkg.com/mime/-/mime-1.6.0.tgz#32cd9e5c64553bd58d19a568af452acff04981b1"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
integrity sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
Update dependency juice to v7
2020-07-21 21:11:38 +03:00
mime@^2.4.6:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "2.5.2"
resolved "https://registry.yarnpkg.com/mime/-/mime-2.5.2.tgz#6e3dc6cc2b9510643830e5f19d5cb753da5eeabe"
integrity sha512-tqkh47FzKeCPD2PUiPB6pkbMzsCasjxAfC62/Wap5qrUWcb+sFasXUC5I3gYM5iBM8v/Qpn4UK0x+j0iHyFPDg==
Update dependency juice to v7
2020-07-21 21:11:38 +03:00
Update Test & linting packages
2020-02-03 16:44:38 +03:00
mimic-fn@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/mimic-fn/-/mimic-fn-2.1.0.tgz#7ed2c2ccccaf84d3ffcb7a69b57711fc2083401b"
integrity sha512-OqbOk5oEQeAZ8WXWydlu9HJjz9WVdEIvamMCcXmuqUYjTknH/sqsWvhQ3vgwKFRR1HpjvNBKQ37nbJgYzGqGcg==
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
mimic-fn@~3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/mimic-fn/-/mimic-fn-3.0.0.tgz#76044cfa8818bbf6999c5c9acadf2d3649b14b4b"
integrity sha512-PiVO95TKvhiwgSwg1IdLYlCTdul38yZxZMIcnDSFIBUm4BNZha2qpQ4GpJ++15bHoKDtrW2D69lMfFwdFYtNZQ==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
mimic-response@^1.0.0, mimic-response@^1.0.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/mimic-response/-/mimic-response-1.0.1.tgz#4923538878eef42063cb8a3e3b0798781487ab1b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-j5EctnkH7amfV/q5Hgmoal1g2QHFJRraOtmx0JpIqkxhBhI/lJSl1nMpQ45hVarwNETOoWEimndZ4QK0RHxuxQ==
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
mimic-response@^2.0.0:
Reverted metascraper packages to 5.11.9 no issue - metascraper packages >= 5.11.10 have a dependency on got >= 11.0 - this has the minimum node version requirement set to `">=10.19.0"` - our current minimum required node version is `10.13.0`, breaking installs for versions in between - this reverts back metascraper packages to `5.11.9` to fix the minimum node version requirement
2020-05-08 12:34:12 +03:00
version "2.1.0"
resolved "https://registry.yarnpkg.com/mimic-response/-/mimic-response-2.1.0.tgz#d13763d35f613d09ec37ebb30bac0469c0ee8f43"
integrity sha512-wXqjST+SLt7R009ySCglWBCFpjUygmCIfD790/kVbiGmUgfYGuB14PiTd5DwVxSV4NcYHjzMkoj5LjQZwTQLEA==
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
mimic-response@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/mimic-response/-/mimic-response-3.1.0.tgz#2d1d59af9c1b129815accc2c46a022a5ce1fa3c9"
integrity sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==
Update dependency @nexes/nql to v0.5.2
2021-04-19 17:14:58 +03:00
mingo@^2.2.2:
version "2.5.3"
resolved "https://registry.yarnpkg.com/mingo/-/mingo-2.5.3.tgz#bed3db76ca9b2cc29ae1f1ff83e3a8797dc47758"
integrity sha512-Wb98QEQ/DaT+xPQFAX08mzM/Zz2eW1UIpKH132gXglakl2SKYBCQFzeiFygS/Hgzc9j9MDDjgouB9W7BMaLyaQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
"minimatch@2 || 3", minimatch@3.0.4, minimatch@^3.0.4, minimatch@~3.0.2, minimatch@~3.0.4:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
version "3.0.4"
resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-3.0.4.tgz#5166e286457f03306064be5497e8dbb0c3d32083"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-yJHVQEhyqPLUTgt9B83PXu6W3rx4MvvHvSUvToogpwoGDOUQ+yDrR0HRot+yOCdCO7u4hX3pWft6kWBBcqh0UA==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
brace-expansion "^1.1.7"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
minimist@^1.2.0, minimist@^1.2.3, minimist@^1.2.5:
Update Test & linting packages
2020-03-21 02:17:28 +03:00
version "1.2.5"
resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.5.tgz#67d66014b66a6a8aaa0c083c5fd58df4e4e97602"
integrity sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw==
Lock file maintenance
2021-06-01 18:19:18 +03:00
minipass-collect@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/minipass-collect/-/minipass-collect-1.0.2.tgz#22b813bf745dc6edba2576b940022ad6edc8c617"
integrity sha512-6T6lH0H8OG9kITm/Jm6tdooIbogG9e0tLgpY6mphXSm/A9u8Nq1ryBG+Qspiub9LjWlBPsPS3tWQ/Botq4FdxA==
dependencies:
minipass "^3.0.0"
minipass-fetch@^1.3.2:
Lock file maintenance
2021-09-06 03:36:57 +03:00
version "1.4.1"
resolved "https://registry.yarnpkg.com/minipass-fetch/-/minipass-fetch-1.4.1.tgz#d75e0091daac1b0ffd7e9d41629faff7d0c1f1b6"
integrity sha512-CGH1eblLq26Y15+Azk7ey4xh0J/XfJfrCox5LDJiKqI2Q2iwOLOKrlmIaODiSQS8d18jalF6y2K2ePUm0CmShw==
Lock file maintenance
2021-06-01 18:19:18 +03:00
dependencies:
minipass "^3.1.0"
minipass-sized "^1.0.3"
minizlib "^2.0.0"
optionalDependencies:
encoding "^0.1.12"
minipass-flush@^1.0.5:
version "1.0.5"
resolved "https://registry.yarnpkg.com/minipass-flush/-/minipass-flush-1.0.5.tgz#82e7135d7e89a50ffe64610a787953c4c4cbb373"
integrity sha512-JmQSYYpPUqX5Jyn1mXaRwOda1uQ8HP5KAT/oDSLCzt1BYRhQU0/hDtsB1ufZfEEzMZ9aAVmsBw8+FWsIXlClWw==
dependencies:
minipass "^3.0.0"
minipass-pipeline@^1.2.2, minipass-pipeline@^1.2.4:
version "1.2.4"
resolved "https://registry.yarnpkg.com/minipass-pipeline/-/minipass-pipeline-1.2.4.tgz#68472f79711c084657c067c5c6ad93cddea8214c"
integrity sha512-xuIq7cIOt09RPRJ19gdi4b+RiNvDFYe5JH+ggNvBqGqpQXcru3PcRmOZuHBKWK1Txf9+cQ+HMVN4d6z46LZP7A==
dependencies:
minipass "^3.0.0"
minipass-sized@^1.0.3:
version "1.0.3"
resolved "https://registry.yarnpkg.com/minipass-sized/-/minipass-sized-1.0.3.tgz#70ee5a7c5052070afacfbc22977ea79def353b70"
integrity sha512-MbkQQ2CTiBMlA2Dm/5cY+9SWFEN8pzzOXi6rlM5Xxq0Yqbda5ZQy9sU75a673FE9ZK0Zsbr6Y5iP6u9nktfg2g==
dependencies:
minipass "^3.0.0"
Lock file maintenance
2021-08-16 04:04:05 +03:00
minipass@^2.6.0, minipass@^2.9.0:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "2.9.0"
resolved "https://registry.yarnpkg.com/minipass/-/minipass-2.9.0.tgz#e713762e7d3e32fed803115cf93e04bca9fcc9a6"
integrity sha512-wxfUjg9WebH+CUDX/CdbRlh5SmfZiy/hpkxaRI16Y9W56Pa75sWgd/rvFilSgrauD9NyFymP/+JFV3KwzIsJeg==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
safe-buffer "^5.1.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
yallist "^3.0.0"
Lock file maintenance
2021-06-01 18:19:18 +03:00
minipass@^3.0.0, minipass@^3.1.0, minipass@^3.1.1, minipass@^3.1.3:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "3.1.5"
resolved "https://registry.yarnpkg.com/minipass/-/minipass-3.1.5.tgz#71f6251b0a33a49c01b3cf97ff77eda030dff732"
integrity sha512-+8NzxD82XQoNKNrl1d/FSi+X8wAEWR+sbYAfIvub4Nz0d22plFG72CEVVaufV8PNf4qSslFTD8VMOxNVhHCjTw==
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
dependencies:
yallist "^4.0.0"
Lock file maintenance
2021-08-16 04:04:05 +03:00
minizlib@^1.3.3:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "1.3.3"
resolved "https://registry.yarnpkg.com/minizlib/-/minizlib-1.3.3.tgz#2290de96818a34c29551c8a8d301216bd65a861d"
integrity sha512-6ZYMOEnmVsdCeTJVE0W9ZD+pVnE8h9Hma/iOwwRDsdQoePpoX56/8B6z3P9VNwppJuBKNRuFDRNRqRWexT9G9Q==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
minipass "^2.9.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Lock file maintenance
2021-06-01 18:19:18 +03:00
minizlib@^2.0.0, minizlib@^2.1.1:
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/minizlib/-/minizlib-2.1.2.tgz#e90d3466ba209b932451508a11ce3d3632145931"
integrity sha512-bAxsR8BVfj60DWXHE3u30oHzfl4G7khkSuPW+qvpd7jFRHm7dLxOjUk1EHACJ/hxLY8phGJ0YhYHZo7jil7Qdg==
dependencies:
minipass "^3.0.0"
yallist "^4.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
mixin-deep@^1.2.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.3.2"
resolved "https://registry.yarnpkg.com/mixin-deep/-/mixin-deep-1.3.2.tgz#1120b43dc359a785dce65b55b82e257ccf479566"
integrity sha512-WRoDn//mXBiJ1H40rqa3vH0toePwSsGb45iInWlTySa+Uu4k3tYUSxa2v1KqAiLtvlrSzaExqS1gtk96A9zvEA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
for-in "^1.0.2"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
is-extendable "^1.0.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Update dependency @tryghost/image-transform to v1.0.11
2021-04-21 11:12:19 +03:00
mkdirp-classic@^0.5.2, mkdirp-classic@^0.5.3:
Update Test & linting packages
2020-03-21 02:17:28 +03:00
version "0.5.3"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
resolved "https://registry.yarnpkg.com/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz#fa10c9115cc6d8865be221ba47ee9bed78601113"
integrity sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==
Update dependency mock-knex to v0.4.8
2020-04-21 00:47:34 +03:00
Lock file maintenance
2021-08-16 04:04:05 +03:00
"mkdirp@>=0.5 0", mkdirp@^0.5.0, mkdirp@^0.5.1, mkdirp@^0.5.4, mkdirp@^0.5.5, mkdirp@~0.5.1:
Update Test & linting packages
2020-07-21 20:38:46 +03:00
version "0.5.5"
resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.5.tgz#d91cefd62d1436ca0f41620e251288d420099def"
integrity sha512-NKmAlESf6jMGym1++R0Ra7wvhV+wFW63FaSOFPwRahvea0gMUcGUhVeAg/0BC0wiv9ih5NYPB1Wn1UEI1/L+xQ==
dependencies:
minimist "^1.2.5"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
mkdirp@^1.0.3, mkdirp@^1.0.4, mkdirp@~1.0.4:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-1.0.4.tgz#3eb5ed62622756d79a5f0e2a221dfebad75c2f7e"
integrity sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==
Switched to extracted `@tryghost/mobiledoc-dom-renderer` package no issue - moved `mobiledoc.renderers.mobiledocHtmlRenderer` to `mobiledoc.mobiledocHtmlRenderer` so that it's easier for the getter to access the parent objects getters - removed all tests and dependencies that now live in @tryghost/mobiledoc-dom-renderer - kept the `mobiledocHtmlRenderer` test because that's testing that we've correctly wired up our cards and atoms and the output is what we expect
2020-04-08 20:21:15 +03:00
mobiledoc-dom-renderer@0.7.0, mobiledoc-dom-renderer@^0.7.0:
Update dependency mobiledoc-dom-renderer to v0.7.0 (#10937)
2019-09-10 11:36:43 +03:00
version "0.7.0"
resolved "https://registry.yarnpkg.com/mobiledoc-dom-renderer/-/mobiledoc-dom-renderer-0.7.0.tgz#53ab5f14dd612b16f03513390e5cbcc2b89f6979"
integrity sha512-A+gT6D4Ru3DKY7ZYOBRORmwhRJ7rDj2vy75D2dWuZS5NgX0mCmGs0yN7qs48YlxvfCif8RFpYsaaPg6Kc3MdJg==
Update dependency mobiledoc-dom-renderer to v0.6.6
2019-07-02 03:37:17 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
mobiledoc-text-renderer@0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/mobiledoc-text-renderer/-/mobiledoc-text-renderer-0.4.0.tgz#473fbe50aa6cde2c3b449752f3b984834dc824d2"
integrity sha512-+Tzfo0hhUFxS0n5FWZ0nf6WUrvnVmsxaIdq0CyeLYD1lk8oW2ml+6WLdeLlzKM5OYYi3PWV6NR9HCUG01cdvWQ==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Pin dependency mocha-slow-test-reporter to 0.1.2
2021-07-05 12:53:57 +03:00
mocha-slow-test-reporter@0.1.2:
Added `yarn test:slow` tool to show slow tests - We have a lot of tests, so it can be hard to see if any are problematic - We have a problem with some tests being too slow, this highlights these in particular - Very slow tests that take seconds are not really unit tests, we should look for different ways to run these - Also we should tailor our mocha settings more, so that we have more lenient settings for acceptance/regression tests but not for unit tests - Note: You have to wait for all tests to run to see the output
2021-07-05 12:42:27 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/mocha-slow-test-reporter/-/mocha-slow-test-reporter-0.1.2.tgz#e1d8138f8c2b8a2d72a727e6a14d808e406221c4"
integrity sha1-4dgTj4wrii1ypyfmoU2AjkBiIcQ=
dependencies:
chalk "^1.1.1"
string-length "^1.0.1"
text-table "^0.2.0"
wordwrap "^1.0.0"
Update dependency mocha to v9.1.2
2021-09-27 06:11:58 +03:00
mocha@9.1.2:
version "9.1.2"
resolved "https://registry.yarnpkg.com/mocha/-/mocha-9.1.2.tgz#93f53175b0f0dc4014bd2d612218fccfcf3534d3"
integrity sha512-ta3LtJ+63RIBP03VBjMGtSqbe6cWXRejF9SyM9Zyli1CKZJZ+vfCTj3oW24V7wAphMJdpOFLoMI3hjJ1LWbs0w==
Update dependency mocha to v9
2021-06-07 20:05:28 +03:00
dependencies:
"@ungap/promise-all-settled" "1.1.2"
ansi-colors "4.1.1"
browser-stdout "1.3.1"
Update Test & linting packages
2021-07-05 03:37:17 +03:00
chokidar "3.5.2"
Update dependency mocha to v9.1.2
2021-09-27 06:11:58 +03:00
debug "4.3.2"
Update dependency mocha to v9
2021-06-07 20:05:28 +03:00
diff "5.0.0"
escape-string-regexp "4.0.0"
find-up "5.0.0"
glob "7.1.7"
growl "1.10.5"
he "1.2.0"
js-yaml "4.1.0"
log-symbols "4.1.0"
minimatch "3.0.4"
ms "2.1.3"
Update dependency mocha to v9.1.2
2021-09-27 06:11:58 +03:00
nanoid "3.1.25"
Update Test & linting packages
2021-07-05 03:37:17 +03:00
serialize-javascript "6.0.0"
Update dependency mocha to v9
2021-06-07 20:05:28 +03:00
strip-json-comments "3.1.1"
supports-color "8.1.1"
which "2.0.2"
Update Test & linting packages
2021-07-05 03:37:17 +03:00
workerpool "6.1.5"
Update dependency mocha to v9
2021-06-07 20:05:28 +03:00
yargs "16.2.0"
yargs-parser "20.2.4"
yargs-unparser "2.0.0"
Update dependency mock-knex to v0.4.10
2021-05-18 12:44:45 +03:00
mock-knex@0.4.10:
version "0.4.10"
resolved "https://registry.yarnpkg.com/mock-knex/-/mock-knex-0.4.10.tgz#e3324286a16da913527c6a3f305b7681390b92a1"
integrity sha512-LvgctE44DyQSkk2sRHGPHuE/8Oq8ShawT/FG7YAXGMDCCpPaeMjHs6ZBMbJMq+K6MoM9Socs/viTw26yS5y5GA==
Removed api integration tests (#9940) refs #9866 - moved the tests either to unit tests or routing tests - or removed test case (a lot) - this commit is very big 🤪, it was not rly possible to create clean commits for this - it only changes the test env, no real code is touched Next steps: - optimise folder structure + make v2 testing possible - reduce some more tests from routing and model integeration tests
2018-10-06 23:13:52 +03:00
dependencies:
bluebird "^3.4.1"
lodash "^4.14.2"
semver "^5.3.0"
Extracted Bookshelf plugins from Ghost to Framework repo refs: - https://github.com/TryGhost/framework/commit/cf15f60085ea4ec8dab8be386ada0646f1c71954 - https://github.com/TryGhost/framework/commit/dd20cc649bf77263c059a910fa250723b813474b - https://github.com/TryGhost/framework/commit/ccf27f7009c00e24571566f0a44fe417605982c8 - https://github.com/TryGhost/framework/commit/abf146d61f6963c2269a7522665400232340bcf7 - https://github.com/TryGhost/framework/commit/2b54c92a145dfbc8aa1202a92a7660e847807e69 - https://github.com/TryGhost/framework/commit/bb029a53f6825112042edc31e2708ebde72bb9e1 - https://github.com/TryGhost/framework/commit/95bd7ee675e4e5d2cbfe83c8c9f32f633c225ad5 - https://github.com/TryGhost/framework/commit/9018b4df221ad8fef8c736195576bda2c8e64429 - https://github.com/TryGhost/framework/commit/df01a6e5f41319e4e0b24e688da5be7ad0b5a3f8 - https://github.com/TryGhost/framework/commit/d313726b3463ee1cb8504a5f59dd559c50b03cad - these plugins were in a state where they were independent enough to be pulled out into their own packages, which is what we did in the referenced commits above - each package is named like `@tryghost/bookshelf-<plugin>` - to avoid requiring multiple packages into Ghost, we've also created a wrapper package called `@tryghost/bookshelf-plugins` which re-exports all these plugins, so the changes in Ghost are very simple - https://github.com/TryGhost/framework/commit/dbebdd43b5309df27e422e898b96ffd6cc8d7bf6 - this commit deletes the plugins + tests, and replaces with our new package with some minor code changes
2021-06-15 13:57:47 +03:00
moment-timezone@0.5.23, moment-timezone@^0.5.31, moment-timezone@^0.5.33:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "0.5.23"
resolved "https://registry.yarnpkg.com/moment-timezone/-/moment-timezone-0.5.23.tgz#7cbb00db2c14c71b19303cb47b0fb0a6d8651463"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-WHFH85DkCfiNMDX5D3X7hpNH3/PUhjTGcD0U1SgfBGZxJ3qUmJh5FdvaFjcClxOvB3rzdfj4oRffbI38jEnC1w==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update moment-timezone to version 0.5.12 🚀 (#8247) * chore(package): update moment-timezone to version 0.5.12 https://greenkeeper.io/ * chore: yarn.lock
2017-04-04 10:37:25 +03:00
moment ">= 2.9.0"
Update dependency @tryghost/url-utils to v0.1.3
2019-07-29 03:28:16 +03:00
Update dependency @tryghost/update-check-service to v0.2.2
2021-09-22 18:13:04 +03:00
moment@2.24.0, moment@2.27.0, "moment@>= 2.9.0", moment@^2.18.1, moment@^2.19.3, moment@^2.24.0, moment@^2.27.0, moment@^2.29.1:
Respected peer dependency for bookshelf no issue - need to use knex 0.14.x for now - Bookshelf already bumped the peer dependency in master, but was not released yet
2019-01-22 10:58:28 +03:00
version "2.24.0"
resolved "https://registry.yarnpkg.com/moment/-/moment-2.24.0.tgz#0d055d53f5052aa653c9f6eb68bb5d12bf5c2b5b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-bV7f+6l2QigeBBZSM/6yTNq4P2fNpSWj/0e7jQcy87A8e7o2nAfP/34/2ky5Vw4B9S446EtIhodAzkFCcR4dQg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
⬆️ bump dependencies no issue - gscan@1.1.2 - body-parser@1.17.2 - debug@2.6.8 - express@4.15.3 - html-to-text@3.3.0 - image-size@0.5.5 - uuid@3.1.0
2017-06-22 20:40:56 +03:00
ms@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/ms/-/ms-2.0.0.tgz#5608aeadfc00be6c2901df5f9861788de0d597c8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-VgiurfwAvmwpAd9fmGF4jeDVl8g=
Update debug to version 2.6.4 🚀 (#8367) * chore(package): update debug to version 2.6.4 https://greenkeeper.io/ * chore: yarn.lock
2017-04-24 17:37:02 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
ms@2.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.1.tgz#30a5864eb3ebb0a66f2ebe6d727af06a09d86e0a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-tgp+dl5cGk28utYktBsrFqA7HKgrhgPsg6Z/EfhWI4gl1Hwq8B/GmY/0oXZ6nF8hDVesS/FpnYaD/kOWhYQvyg==
Bump dependencies no issue - ghost-ignition@2.9.4 - fixed log rotation (https://github.com/TryGhost/Ignition/commit/c8f256430a5d03c6bce7872910eecc5576fd4b55) - multer@1.3.1 - uuid@3.3.2 - nock@9.4.0
2018-07-02 13:28:30 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
ms@2.1.2:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.2.tgz#d09d1f357b443f493382a8eb3ccd183872ae6009"
integrity sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==
Lock file maintenance
2021-05-05 18:56:03 +03:00
ms@2.1.3, ms@^2.0.0, ms@^2.1.1, ms@^2.1.2, ms@^2.1.3:
Update dependency mocha to v8.3.0
2021-02-11 22:44:24 +03:00
version "2.1.3"
resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.3.tgz#574c8138ce1d2b5861f0b44579dbadd60c6615b2"
integrity sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==
Update dependency multer to v1.4.3
2021-08-09 13:32:38 +03:00
multer@1.4.3:
version "1.4.3"
resolved "https://registry.yarnpkg.com/multer/-/multer-1.4.3.tgz#4db352d6992e028ac0eacf7be45c6efd0264297b"
integrity sha512-np0YLKncuZoTzufbkM6wEKp68EhWJXcU6fq6QqrSwkckd2LlMgd1UqhUJLj6NS/5sZ8dE8LYDWslsltJznnXlg==
dependencies:
append-field "^1.0.0"
busboy "^0.2.11"
concat-stream "^1.5.2"
mkdirp "^0.5.4"
object-assign "^4.1.1"
on-finished "^2.3.0"
type-is "^1.6.4"
xtend "^4.0.0"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
multimap@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/multimap/-/multimap-1.1.0.tgz#5263febc085a1791c33b59bb3afc6a76a2a10ca8"
integrity sha512-0ZIR9PasPxGXmRsEF8jsDzndzHDj7tIav+JUmvIFB/WHswliFnquxECT/De7GR4yg99ky/NlRKJT82G1y271bw==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
mute-stream@0.0.8:
version "0.0.8"
resolved "https://registry.yarnpkg.com/mute-stream/-/mute-stream-0.0.8.tgz#1630c42b2251ff81e2a283de96a5497ea92e5e0d"
integrity sha512-nnbWWOkoWyUsTjKrhgD0dcz22mdkSnpYqbEjIm2nhwhuxlSkpywJmBo8h0ZqJdkp73mb90SssHkN4rsRaBAfAA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
mv@~2:
version "2.1.1"
resolved "https://registry.yarnpkg.com/mv/-/mv-2.1.1.tgz#ae6ce0d6f6d5e0a4f7d893798d03c1ea9559b6a2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-rmzg1vbV4KT32JN5jQPB6pVZtqI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
mkdirp "~0.5.1"
ncp "~2.0.0"
rimraf "~2.4.0"
Update dependency mysql to v2.18.1
2020-02-19 14:11:32 +03:00
mysql@2.18.1:
version "2.18.1"
resolved "https://registry.yarnpkg.com/mysql/-/mysql-2.18.1.tgz#2254143855c5a8c73825e4522baf2ea021766717"
integrity sha512-Bca+gk2YWmqp2Uf6k5NFEurwY/0td0cpebAucFpY/3jhrwrVGuxU2uQFCHjU19SJfje0yQvi+rVWdq78hR5lig==
dependencies:
bignumber.js "9.0.0"
readable-stream "2.3.7"
safe-buffer "5.1.2"
sqlstring "2.3.1"
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
nan@^2.14.0, nan@^2.14.2:
Lock file maintenance
2021-08-09 03:03:02 +03:00
version "2.15.0"
resolved "https://registry.yarnpkg.com/nan/-/nan-2.15.0.tgz#3f34a473ff18e15c1b5626b62903b5ad6e665fee"
integrity sha512-8ZtvEnA2c5aYCZYd1cvgdnU6cqwixRoYg70xPLWUws5ORTa/lnw+u4amixRS/Ac5U5mQVgp9pnlSUnbNWFaWZQ==
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
Bumped job-manager version to 0.7.0 closes https://github.com/TryGhost/Ghost-Utils/issues/122
2021-01-06 07:47:57 +03:00
nanoclone@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/nanoclone/-/nanoclone-0.2.1.tgz#dd4090f8f1a110d26bb32c49ed2f5b9235209ed4"
integrity sha512-wynEP02LmIbLpcYw8uBKpcfF6dmg2vcpKqxeH5UcoKEYdExslsdUA4ugFauuaeYdTB76ez6gJW8XAZ6CgkXYxA==
Update dependency postcss to v8.3.8
2021-09-27 13:32:42 +03:00
nanocolors@^0.2.2:
version "0.2.10"
resolved "https://registry.yarnpkg.com/nanocolors/-/nanocolors-0.2.10.tgz#a712df4d3c1bf12d9b4fb8b5aa61b5ba31337503"
integrity sha512-i+EDWGsJClQwR/bhLIG/CObZZwaYaS5qt+yjxZbfV+77QiNHNzE9nj4d9Ut1TGZ0R0eSwPcQWzReASzXuw/7oA==
Update dependency postcss to v8.3.7
2021-09-22 11:06:22 +03:00
Update dependency mocha to v9.1.2
2021-09-27 06:11:58 +03:00
nanoid@3.1.25, nanoid@^3.1.23, nanoid@^3.1.25:
Lock file maintenance
2021-08-16 04:04:05 +03:00
version "3.1.25"
resolved "https://registry.yarnpkg.com/nanoid/-/nanoid-3.1.25.tgz#09ca32747c0e543f0e1814b7d3793477f9c8e152"
integrity sha512-rdwtIXaXCLFAQbnfqDRnI6jaRHp9fTcYBjtFKE8eezcZ7LuLjhUaQGNeMXf1HmRoCH32CLz6XwX0TtxEOS/A3Q==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
nanomatch@^1.2.9:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.2.13"
resolved "https://registry.yarnpkg.com/nanomatch/-/nanomatch-1.2.13.tgz#b87a8aa4fc0de8fe6be88895b38983ff265bd119"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-fpoe2T0RbHwBTBUOftAfBPaDEi06ufaUai0mE6Yn1kacc3SnTErfb/h+X94VXzI64rKFHYImXSvdwGGCmwOqCA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
arr-diff "^4.0.0"
array-unique "^0.3.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
define-property "^2.0.2"
extend-shallow "^3.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
fragment-cache "^0.2.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
is-windows "^1.0.2"
kind-of "^6.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
object.pick "^1.3.0"
regex-not "^1.0.0"
snapdragon "^0.8.1"
to-regex "^3.0.1"
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
napi-build-utils@^1.0.1:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/napi-build-utils/-/napi-build-utils-1.0.2.tgz#b1fddc0b2c46e380a0b7a76f984dd47c41a13806"
integrity sha512-ONmRUqK7zj7DWX0D9ADe03wbwOBZxNAfF20PlGfCWQcD3+/MakShIHrMqx9YwPTfxDdF1zLeL+RGZiR9kGMLdg==
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
natural-compare@^1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/natural-compare/-/natural-compare-1.4.0.tgz#4abebfeed7541f2c27acfb29bdbbd15c8d5ba4f7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Sr6/7tdUHywnrPspvbvRXI1bpPc=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency nconf to v0.11.2
2021-02-04 10:28:50 +03:00
nconf@0.11.2:
version "0.11.2"
resolved "https://registry.yarnpkg.com/nconf/-/nconf-0.11.2.tgz#707fa9db383e85ad7e8f1a17be1b053d1bd751c4"
integrity sha512-gDmn0Fgt0U0esRE8OCF72tO8AA9dtlG9eZhW4/Ex5hozNC2/LgdhWO4vKLGHNfTxcvsv6Aoxk/ROVYJD2SAdyg==
Update dependency nconf to v0.11.0
2020-11-25 12:06:19 +03:00
dependencies:
async "^1.4.0"
Update dependency nconf to v0.11.2
2021-02-04 10:28:50 +03:00
ini "^2.0.0"
Update dependency nconf to v0.11.0
2020-11-25 12:06:19 +03:00
secure-keys "^1.0.0"
yargs "^16.1.1"
Update dependency nconf to v0.11.3
2021-06-21 14:17:14 +03:00
nconf@0.11.3:
version "0.11.3"
resolved "https://registry.yarnpkg.com/nconf/-/nconf-0.11.3.tgz#4ee545019c53f1037ca57d696836feede3c49163"
integrity sha512-iYsAuDS9pzjVMGIzJrGE0Vk3Eh8r/suJanRAnWGBd29rVS2XtSgzcAo5l6asV3e4hH2idVONHirg1efoBOslBg==
dependencies:
async "^1.4.0"
ini "^2.0.0"
secure-keys "^1.0.0"
yargs "^16.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ncp@~2.0.0:
version "2.0.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/ncp/-/ncp-2.0.0.tgz#195a21d6c46e361d2fb1281ba38b91e9df7bdbb3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-GVoh1sRuNh0vsSgbo4uR6d9727M=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
needle@^2.2.1:
Lock file maintenance
2021-09-06 03:36:57 +03:00
version "2.9.1"
resolved "https://registry.yarnpkg.com/needle/-/needle-2.9.1.tgz#22d1dffbe3490c2b83e301f7709b6736cd8f2684"
integrity sha512-6R9fqJ5Zcmf+uYaFgdIHmLwNldn5HbK8L5ybn7Uz+ylX/rnOsSp1AHcvQSrCaFN+qNM1wpymHqD7mVasEOlHGQ==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
Lock file maintenance
2019-08-01 08:14:51 +03:00
debug "^3.2.6"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
iconv-lite "^0.4.4"
sax "^1.2.4"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
negotiator@0.6.2:
version "0.6.2"
resolved "https://registry.yarnpkg.com/negotiator/-/negotiator-0.6.2.tgz#feacf7ccf525a77ae9634436a64883ffeca346fb"
integrity sha512-hZXc7K2e+PgeI1eDBe/10Ard4ekbfrrqG8Ep+8Jmf4JID2bNg7NvCPOZN+kfF574pFQI7mum2AUqDidoKqcTOw==
Updated express-hbs to 1.1.1 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:03:23 +03:00
neo-async@^2.6.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "2.6.2"
resolved "https://registry.yarnpkg.com/neo-async/-/neo-async-2.6.2.tgz#b4aafb93e3aeb2d8174ca53cf163ab7d7308305f"
integrity sha512-Yd3UES5mWCSqR+qNT93S3UoYUkqAZ9lLg8a7g9rimsWmYGK8cVToA4/sF3RrshdyV3sAGMXVUmpMYOw+dLpOuw==
Updated express-hbs to 1.1.1 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:03:23 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
netmask@^1.0.6:
version "1.0.6"
resolved "https://registry.yarnpkg.com/netmask/-/netmask-1.0.6.tgz#20297e89d86f6f6400f250d9f4f6b4c1945fcd35"
integrity sha1-ICl+idhvb2QA8lDZ9Pa0wZRfzTU=
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
next-tick@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/next-tick/-/next-tick-1.1.0.tgz#1836ee30ad56d67ef281b22bd199f709449b35eb"
integrity sha512-CXdUiJembsNjuToQvxayPZF9Vqht7hewsvy2sOWafLvi2awflj9mOC6bHIg50orX8IJvWKY9wYQ/zB2kogPslQ==
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
nice-try@^1.0.4:
version "1.0.5"
resolved "https://registry.yarnpkg.com/nice-try/-/nice-try-1.0.5.tgz#a3378a7696ce7d223e88fc9b764bd7ef1089e366"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-1nh45deeb5olNY7eX82BkPO7SSxR5SSYJiPTrTdFUVYwAl8CKMA5N9PjTYkHiRjisVcxcQ1HXdLhx2qxxJzLNQ==
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
Update dependency sinon to v11.1.0
2021-05-25 17:14:19 +03:00
nise@^5.1.0:
version "5.1.0"
resolved "https://registry.yarnpkg.com/nise/-/nise-5.1.0.tgz#713ef3ed138252daef20ec035ab62b7a28be645c"
integrity sha512-W5WlHu+wvo3PaKLsJJkgPup2LrsXCcm7AWwyNZkUnn5rwPkuPBi3Iwk5SQtN0mv+K65k7nKKjwNQ30wg3wLAQQ==
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
dependencies:
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
"@sinonjs/commons" "^1.7.0"
Update dependency sinon to v11
2021-05-25 00:44:33 +03:00
"@sinonjs/fake-timers" "^7.0.4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
"@sinonjs/text-encoding" "^0.7.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
just-extend "^4.0.2"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
path-to-regexp "^1.7.0"
Lock file maintenance
2021-05-05 18:56:03 +03:00
no-case@^3.0.4:
version "3.0.4"
resolved "https://registry.yarnpkg.com/no-case/-/no-case-3.0.4.tgz#d361fd5c9800f558551a8369fc0dcd4662b6124d"
integrity sha512-fgAN3jGAh+RoxUGZHTSOLJIqUc2wmoBwGR4tbpNAKmmovFoWq0OdRkb0VkldReO2a2iBT/OEulG9XSUc10r3zg==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
dependencies:
Lock file maintenance
2021-05-05 18:56:03 +03:00
lower-case "^2.0.2"
tslib "^2.0.3"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Update dependency nock to v13.1.3
2021-08-25 12:09:30 +03:00
nock@13.1.3:
version "13.1.3"
resolved "https://registry.yarnpkg.com/nock/-/nock-13.1.3.tgz#110b005965654a8ffb798e87bad18b467bff15f9"
integrity sha512-YKj0rKQWMGiiIO+Y65Ut8OEgYM3PplLU2+GAhnPmqZdBd6z5IskgdBqWmjzA6lH3RF0S2a3wiAlrMOF5Iv2Jeg==
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 15:57:10 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
debug "^4.1.0"
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 15:57:10 +03:00
json-stringify-safe "^5.0.1"
Update Test & linting packages
2020-07-21 20:38:46 +03:00
lodash.set "^4.3.2"
Update dependency nock to v11 (#11093)
2019-09-10 11:13:26 +03:00
propagate "^2.0.0"
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 15:57:10 +03:00
Update dependency @tryghost/image-transform to v1.0.11
2021-04-21 11:12:19 +03:00
node-abi@^2.21.0:
Lock file maintenance
2021-09-06 03:36:57 +03:00
version "2.30.1"
resolved "https://registry.yarnpkg.com/node-abi/-/node-abi-2.30.1.tgz#c437d4b1fe0e285aaf290d45b45d4d7afedac4cf"
integrity sha512-/2D0wOQPgaUWzVSVgRMx+trKJRC2UG4SUc4oCJoXx9Uxjtp0Vy3/kt7zcbxHF8+Z/pK3UloLWzBISg72brfy1w==
Update dependency @tryghost/image-transform to v1.0.11
2021-04-21 11:12:19 +03:00
dependencies:
semver "^5.4.1"
Update dependency @tryghost/image-transform to v1.0.14
2021-09-22 18:34:15 +03:00
node-addon-api@^3.0.0:
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "3.2.1"
resolved "https://registry.yarnpkg.com/node-addon-api/-/node-addon-api-3.2.1.tgz#81325e0a2117789c0128dab65e7e38f07ceba161"
integrity sha512-mmcei9JghVNDYydghQmeDX8KoAm0FAiYyIcUt/N4nhyAipB17pllZQDOJD2fotxABnt4Mdz+dKTO7eftLg4d0A==
Update dependency @tryghost/image-transform to v1.0.11
2021-04-21 11:12:19 +03:00
Update dependency @tryghost/image-transform to v1.0.14
2021-09-22 18:34:15 +03:00
node-addon-api@^4.1.0:
version "4.2.0"
resolved "https://registry.yarnpkg.com/node-addon-api/-/node-addon-api-4.2.0.tgz#117cbb5a959dff0992e1c586ae0393573e4d2a87"
integrity sha512-eazsqzwG2lskuzBqCGPi7Ac2UgOoMz8JVOXVhTvvPDYhthvNpefx8jWD8Np7Gv+2Sz0FlPWZk0nJV0z598Wn8Q==
Lock file maintenance
2021-09-20 03:12:18 +03:00
node-fetch@2.6.1:
Update dependency oembed-parser to v1.4.7
2021-05-05 17:01:09 +03:00
version "2.6.1"
resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.1.tgz#045bd323631f76ed2e2b55573394416b639a0052"
integrity sha512-V4aYg89jEoVRxRb2fJdAg8FHvI7cEyYdVAh94HH0UIK8oJxUfkjlDQN9RbMx+bEjP7+ggMiFRprSti032Oipxw==
Lock file maintenance
2021-09-20 03:12:18 +03:00
node-fetch@^2.6.0:
version "2.6.2"
resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.2.tgz#986996818b73785e47b1965cc34eb093a1d464d0"
integrity sha512-aLoxToI6RfZ+0NOjmWAgn9+LEd30YCkJKFSyWacNZdEKTit/ZMcKjGkTRo8uWEsnIb/hfKecNPEbln02PdWbcA==
Update dependency node-jose to v2
2020-09-21 04:06:26 +03:00
node-forge@^0.10.0:
version "0.10.0"
resolved "https://registry.yarnpkg.com/node-forge/-/node-forge-0.10.0.tgz#32dea2afb3e9926f02ee5ce8794902691a676bf3"
integrity sha512-PPmu8eEeG9saEUvI97fm4OYxXVB6bFvyNTyiUOBichBpFG8A1Ljw3bY62+5oOjDEMHRnd0Y7HQ+x7uzxOzC6JA==
Update dependency sqlite3 to v5
2021-04-15 16:46:12 +03:00
node-gyp@3.x:
version "3.8.0"
resolved "https://registry.yarnpkg.com/node-gyp/-/node-gyp-3.8.0.tgz#540304261c330e80d0d5edce253a68cb3964218c"
integrity sha512-3g8lYefrRRzvGeSowdJKAKyks8oUpLEd/DyPV4eMhVlhJ0aNaZqIrNUIPuEWWTAoPqyFkfGrM67MC69baqn6vA==
dependencies:
fstream "^1.0.0"
glob "^7.0.3"
graceful-fs "^4.1.2"
mkdirp "^0.5.0"
nopt "2 || 3"
npmlog "0 || 1 || 2 || 3 || 4"
osenv "0"
request "^2.87.0"
rimraf "2"
semver "~5.3.0"
tar "^2.0.0"
which "1"
Lock file maintenance
2021-06-01 18:19:18 +03:00
node-gyp@^8.0.0:
Lock file maintenance
2021-08-30 06:24:29 +03:00
version "8.2.0"
resolved "https://registry.yarnpkg.com/node-gyp/-/node-gyp-8.2.0.tgz#ef509ccdf5cef3b4d93df0690b90aa55ff8c7977"
integrity sha512-KG8SdcoAnw2d6augGwl1kOayALUrXW/P2uOAm2J2+nmW/HjZo7y+8TDg7LejxbekOOSv3kzhq+NSUYkIDAX8eA==
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
dependencies:
env-paths "^2.2.0"
glob "^7.1.4"
Lock file maintenance
2021-06-01 18:19:18 +03:00
graceful-fs "^4.2.6"
make-fetch-happen "^8.0.14"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
nopt "^5.0.0"
npmlog "^4.1.2"
rimraf "^3.0.2"
Lock file maintenance
2021-06-01 18:19:18 +03:00
semver "^7.3.5"
Lock file maintenance
2021-08-30 06:24:29 +03:00
tar "^6.1.2"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
which "^2.0.2"
✨ Added support for gating content by member labels and products (#12946) refs https://github.com/TryGhost/Team/issues/581 closes https://github.com/TryGhost/Team/issues/582 Emails can now be sent to members with specific associated labels or products by specifying an NQL string. We want to bring the same members segment feature to content by allowing `visibility` to be an NQL filter string on top of the `public/members/paid` special-case strings. As an example it's possible to set `posts.visibility` to `label:vip` to make a post available only to those members with the `vip` label. - removed enum validations for `visibility` so it now accepts any string or `null` - bumped `@tryghost/admin-api-schema` for API-level validation changes - added nql validation to API input validators by running the visibility query against the members model - added transform of NQL to special-case visibility values when saving post model - ensures there's a single way of representing "members" and "paid" where NQL gives multiple ways of representing the same segment - useful for keeping theme-level checks such as `{{#has visibility="paid"}}` working as expected - updated content-gating to parse nql from post's visibility and use it to query the currently logged in member to see if there's a match - bumped @tryghost/members-api to include label and product data when loading member
2021-05-10 21:32:11 +03:00
node-jose@2.0.0, node-jose@^2.0.0:
Update dependency node-jose to v2
2020-09-21 04:06:26 +03:00
version "2.0.0"
resolved "https://registry.yarnpkg.com/node-jose/-/node-jose-2.0.0.tgz#541c6b52c387a3f18fc06cd502baad759af9c470"
integrity sha512-j8zoFze1gijl8+DK/dSXXqX7+o2lMYv1XS+ptnXgGV/eloQaqq1YjNtieepbKs9jBS4WTnMOqyKSaQuunJzx0A==
dependencies:
base64url "^3.0.1"
buffer "^5.5.0"
es6-promise "^4.2.8"
lodash "^4.17.15"
long "^4.0.0"
node-forge "^0.10.0"
pako "^1.0.11"
process "^0.11.10"
uuid "^3.3.3"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
node-loggly-bulk@^2.2.4:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "2.2.5"
resolved "https://registry.yarnpkg.com/node-loggly-bulk/-/node-loggly-bulk-2.2.5.tgz#6f41136f91b363d1b50612e8be0063859226967e"
integrity sha512-N6RjZfjqwhAYwT9nM8PFKXpWfaGFaDHnzwj2JBgsNq04xsEZNGMlI+rds90p5/TTkYAS8Ya6tbJChXFRqTSmiA==
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
json-stringify-safe "5.0.x"
moment "^2.18.1"
request ">=2.76.0 <3.0.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
node-pre-gyp@^0.11.0:
version "0.11.0"
resolved "https://registry.yarnpkg.com/node-pre-gyp/-/node-pre-gyp-0.11.0.tgz#db1f33215272f692cd38f03238e3e9b47c5dd054"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-TwWAOZb0j7e9eGaf9esRx3ZcLaE5tQ2lvYy1pb5IAaG1a2e2Kv5Lms1Y4hpj+ciXJRofIxxlt5haeQ/2ANeE0Q==
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 19:43:08 +03:00
dependencies:
detect-libc "^1.0.2"
mkdirp "^0.5.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
needle "^2.2.1"
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 19:43:08 +03:00
nopt "^4.0.1"
npm-packlist "^1.1.6"
npmlog "^4.0.2"
rc "^1.2.7"
rimraf "^2.6.1"
semver "^5.3.0"
tar "^4"
Lock file maintenance
2021-08-23 05:05:27 +03:00
node-releases@^1.1.75:
version "1.1.75"
resolved "https://registry.yarnpkg.com/node-releases/-/node-releases-1.1.75.tgz#6dd8c876b9897a1b8e5a02de26afa79bb54ebbfe"
integrity sha512-Qe5OUajvqrqDSy6wrWFmMwfJ0jVgwiw4T3KqmbTcZ62qW0gQkheXYhcFM1+lOVcGUoRxcEcfyvFMAnDgaF1VWw==
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
nodemailer-direct-transport@^3.3.2:
version "3.3.2"
resolved "https://registry.yarnpkg.com/nodemailer-direct-transport/-/nodemailer-direct-transport-3.3.2.tgz#e96fafb90358560947e569017d97e60738a50a86"
integrity sha1-6W+vuQNYVglH5WkBfZfmBzilCoY=
dependencies:
nodemailer-shared "1.1.0"
smtp-connection "2.12.0"
nodemailer-fetch@1.6.0:
version "1.6.0"
resolved "https://registry.yarnpkg.com/nodemailer-fetch/-/nodemailer-fetch-1.6.0.tgz#79c4908a1c0f5f375b73fe888da9828f6dc963a4"
integrity sha1-ecSQihwPXzdbc/6IjamCj23JY6Q=
nodemailer-shared@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/nodemailer-shared/-/nodemailer-shared-1.1.0.tgz#cf5994e2fd268d00f5cf0fa767a08169edb07ec0"
integrity sha1-z1mU4v0mjQD1zw+nZ6CBae2wfsA=
dependencies:
nodemailer-fetch "1.6.0"
nodemailer-stub-transport@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/nodemailer-stub-transport/-/nodemailer-stub-transport-1.1.0.tgz#11421d2d66b4ee6f405354f914c1f4641eb24b0d"
integrity sha1-EUIdLWa07m9AU1T5FMH0ZB6ySw0=
nodemailer@^6.6.3:
version "6.6.3"
resolved "https://registry.yarnpkg.com/nodemailer/-/nodemailer-6.6.3.tgz#31fb53dd4d8ae16fc088a65cb9ffa8d928a69b48"
integrity sha512-faZFufgTMrphYoDjvyVpbpJcYzwyFnbAMmQtj1lVBYAUSm3SOy2fIdd9+Mr4UxPosBa0JRw9bJoIwQn+nswiew==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency sqlite3 to v5
2021-04-15 16:46:12 +03:00
"nopt@2 || 3", nopt@~3.0.6:
version "3.0.6"
resolved "https://registry.yarnpkg.com/nopt/-/nopt-3.0.6.tgz#c6465dbf08abcd4db359317f79ac68a646b28ff9"
integrity sha1-xkZdvwirzU2zWTF/eaxopkayj/k=
dependencies:
abbrev "1"
Update dependency gscan to v4.0.2
2021-04-16 19:49:09 +03:00
nopt@^4.0.1, nopt@~4.0.1:
Update dependency express-hbs to v2.3.3
2020-04-06 18:42:24 +03:00
version "4.0.3"
resolved "https://registry.yarnpkg.com/nopt/-/nopt-4.0.3.tgz#a375cad9d02fd921278d954c2254d5aa57e15e48"
integrity sha512-CvaGwVMztSMJLOeXPrez7fyfObdZqNUK1cPAEzLHrTybIua9pMdmmPR5YwtfNftIOMv3DPUhFaxsZMNTQO20Kg==
dependencies:
abbrev "1"
osenv "^0.1.4"
Update dependency express-hbs to v2.3.5
2021-04-16 12:01:28 +03:00
nopt@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/nopt/-/nopt-5.0.0.tgz#530942bb58a512fccafe53fe210f13a25355dc88"
integrity sha512-Tbj67rffqceeLpcRXrT7vKAN8CwfPeIBgM7E6iBkmKLV7bEMwpGgYLGv0jACUsECaa/vuxP0IjEont6umdMgtQ==
dependencies:
abbrev "1"
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
normalize-package-data@^2.5.0:
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
version "2.5.0"
resolved "https://registry.yarnpkg.com/normalize-package-data/-/normalize-package-data-2.5.0.tgz#e66db1838b200c1dfc233225d12cb36520e234a8"
integrity sha512-/5CMN3T0R4XTj4DcGaexo+roZSdSFW/0AOOTROrjxzCG1wrWXEsGbRKevjlIL+ZDE4sZlJr5ED4YW0yqmkK+eA==
dependencies:
hosted-git-info "^2.1.4"
resolve "^1.10.0"
semver "2 || 3 || 4 || 5"
validate-npm-package-license "^3.0.1"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
normalize-path@^3.0.0, normalize-path@~3.0.0:
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
version "3.0.0"
resolved "https://registry.yarnpkg.com/normalize-path/-/normalize-path-3.0.0.tgz#0dcd69ff23a1c9b11fd0978316644a0388216a65"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
Update CSS preprocessors
2021-06-11 14:34:17 +03:00
normalize-url@^4.1.0:
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "4.5.1"
resolved "https://registry.yarnpkg.com/normalize-url/-/normalize-url-4.5.1.tgz#0dd90cf1288ee1d1313b87081c9a5932ee48518a"
integrity sha512-9UZCFRHQdNrfTpGg8+1INIg93B6zE0aXMVFkw1WFwvO4SlZywU6aLg5Of0Ap/PgcbSw4LNxvMWXMeugwMCX0AA==
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
Lock file maintenance
2021-07-05 04:25:22 +03:00
normalize-url@^6.0.1, normalize-url@~6.1.0:
Update metascraper to v5.22.2
2021-06-23 14:32:05 +03:00
version "6.1.0"
resolved "https://registry.yarnpkg.com/normalize-url/-/normalize-url-6.1.0.tgz#40d0885b535deffe3f3147bec877d05fe4c5668a"
integrity sha512-DlL+XwOy3NxAQ8xuC0okPgK46iuVNAK01YN7RueYBqqFeGsBjV9XmCAzAdgt+667bCl5kPh9EqKKDwnaPG1I7A==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
npm-bundled@^1.0.1:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/npm-bundled/-/npm-bundled-1.1.2.tgz#944c78789bd739035b70baa2ca5cc32b8d860bc1"
integrity sha512-x5DHup0SuyQcmL3s7Rx/YQ8sbw/Hzg0rj48eN0dV7hf5cmQq5PXIeioroH3raV1QC1yh3uTYuMThvEQF3iKgGQ==
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
dependencies:
npm-normalize-package-bin "^1.0.1"
npm-normalize-package-bin@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/npm-normalize-package-bin/-/npm-normalize-package-bin-1.0.1.tgz#6e79a41f23fd235c0623218228da7d9c23b8f6e2"
integrity sha512-EPfafl6JL5/rU+ot6P3gRSCpPDW5VmIzX959Ob1+ySFUuuYHWHekXpwdUZcKP5C+DS4GEtdJluwBjnsNDl+fSA==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
npm-packlist@^1.1.6:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.4.8"
resolved "https://registry.yarnpkg.com/npm-packlist/-/npm-packlist-1.4.8.tgz#56ee6cc135b9f98ad3d51c1c95da22bbb9b2ef3e"
integrity sha512-5+AZgwru5IevF5ZdnFglB5wNlHG1AOOuw28WhUq8/8emhBmLv6jX5by4WJCh7lW0uSYZYS6DXqIsyZVIXRZU9A==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
ignore-walk "^3.0.1"
npm-bundled "^1.0.1"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
npm-normalize-package-bin "^1.0.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 21:45:29 +03:00
npm-run-path@^2.0.0:
version "2.0.2"
resolved "https://registry.yarnpkg.com/npm-run-path/-/npm-run-path-2.0.2.tgz#35a9232dfa35d7067b4cb2ddf2357b1871536c5f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-NakjLfo11wZ7TLLd8jV7GHFTbF8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 21:45:29 +03:00
path-key "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency sqlite3 to v5
2021-04-15 16:46:12 +03:00
"npmlog@0 || 1 || 2 || 3 || 4", npmlog@^4.0.1, npmlog@^4.0.2, npmlog@^4.1.2:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "4.1.2"
resolved "https://registry.yarnpkg.com/npmlog/-/npmlog-4.1.2.tgz#08a7f2a8bf734604779a9efa4ad5cc717abb954b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-2uUqazuKlTaSI/dC8AzicUck7+IrEaOnN/e0jd3Xtt1KcGpwx30v50mL7oPyr/h9bL3E4aZccVwpwP+5W9Vjkg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
are-we-there-yet "~1.1.2"
console-control-strings "~1.1.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
gauge "~2.7.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
set-blocking "~2.0.0"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
nth-check@^2.0.0:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "2.0.1"
resolved "https://registry.yarnpkg.com/nth-check/-/nth-check-2.0.1.tgz#2efe162f5c3da06a28959fbd3db75dbeea9f0fc2"
integrity sha512-it1vE95zF6dTT9lBsYbxvqh0Soy4SPowchj0UBGj/V6cTPnXXtQOPUbhZ6CmGzAD/rW22LQK6E96pcdJXk4A4w==
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
dependencies:
boolbase "^1.0.0"
nth-check@~1.0.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/nth-check/-/nth-check-1.0.2.tgz#b2bd295c37e3dd58a3bf0700376663ba4d9cf05c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-WeBOdju8SnzPN5vTUJYxYUxLeXpCaVP5i5e0LF8fg7WORF2Wd7wFX/pk0tYZk7s8T+J7VLy0Da6J1+wCT0AtHg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
boolbase "~1.0.0"
number-is-nan@^1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/number-is-nan/-/number-is-nan-1.0.1.tgz#097b602b53422a522c1afb8790318336941a011d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-CXtgK1NCKlIsGvuHkDGDNpQaAR0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added support for graceful job shutdown and worker threads refs #12402 - With bumped version of job-manager it offloads job procesing into separate worker thread. Having jobs run out of main Ghost process even loop allows for safe job execution, which does not block Ghost from serving requests or performing other functions without a delay - Added experimental data access to 'testmode' jobs. This should serve as an illustration of how to access data from the job layer
2020-11-23 07:17:49 +03:00
numbered@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/numbered/-/numbered-1.1.0.tgz#9fcd79564c73a84b9574e8370c3d8e58fe3c133c"
integrity sha512-pv/ue2Odr7IfYOO0byC1KgBI10wo5YDauLhxY6/saNzAdAs0r1SotGCPzzCLNPL0xtrAwWRialLu23AAu9xO1g==
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
nwsapi@^2.2.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/nwsapi/-/nwsapi-2.2.0.tgz#204879a9e3d068ff2a55139c2c772780681a38b7"
integrity sha512-h2AatdwYH+JHiZpv7pt/gSX1XoRGb7L/qSIeuqA6GwYoF9w1vP1cw42TO0aI2pNyshRK5893hNSl+1//vHK7hQ==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
oauth-sign@~0.9.0:
version "0.9.0"
resolved "https://registry.yarnpkg.com/oauth-sign/-/oauth-sign-0.9.0.tgz#47a7b016baa68b5fa0ecf3dee08a85c679ac6455"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-fexhUFFPTGV8ybAtSIGbV6gOkSv8UtRbDBnAyLQw4QPKkgNlsH2ByPGtMUqdWkos6YCRmAqViwgZrJc/mRDzZQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added oauth login and invitation acceptance issue https://github.com/TryGhost/Team/issues/614 - Users who have a password can directly sign-in via oauth - User who are logged-in get their password disabled - Users accepting an invitation get their password disabled - The way we disable password is by setting it to a long random password
2021-04-21 20:33:48 +03:00
oauth@0.9.x:
version "0.9.15"
resolved "https://registry.yarnpkg.com/oauth/-/oauth-0.9.15.tgz#bd1fefaf686c96b75475aed5196412ff60cfb9c1"
integrity sha1-vR/vr2hslrdUda7VGWQS/2DPucE=
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
object-assign@^4, object-assign@^4.1.0, object-assign@^4.1.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "4.1.1"
resolved "https://registry.yarnpkg.com/object-assign/-/object-assign-4.1.1.tgz#2109adc7965887cfc05cbbd442cac8bfbb360863"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IQmtx5ZYh8/AXLvUQsrIv7s2CGM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
object-copy@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/object-copy/-/object-copy-0.1.0.tgz#7e7d858b781bd7c991a41ba975ed3812754e998c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-fn2Fi3gb18mRpBupde04EnVOmYw=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
copy-descriptor "^0.1.0"
define-property "^0.2.5"
kind-of "^3.0.3"
Lock file maintenance
2021-05-05 18:56:03 +03:00
object-inspect@^1.9.0:
Lock file maintenance
2021-07-19 12:27:19 +03:00
version "1.11.0"
resolved "https://registry.yarnpkg.com/object-inspect/-/object-inspect-1.11.0.tgz#9dceb146cedd4148a0d9e51ab88d34cf509922b1"
integrity sha512-jp7ikS6Sd3GxQfZJPyH3cjcbJF6GZPClgdV+EFygjFLQ5FmW/dRUnTd9PQ9k0JhoNDabWFbpF1yCdSWCC6gexg==
Lock file maintenance
2021-05-05 18:56:03 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
object-visit@^1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/object-visit/-/object-visit-1.0.1.tgz#f79c4493af0c5377b59fe39d395e41042dd045bb"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-95xEk68MU3e1n+OdOV5BBC3QRbs=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
isobject "^3.0.0"
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
object.defaults@^1.1.0:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/object.defaults/-/object.defaults-1.1.0.tgz#3a7f868334b407dea06da16d88d5cd29e435fecf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-On+GgzS0B96gbaFtiNXNKeQ1/s8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
array-each "^1.0.1"
array-slice "^1.0.0"
for-own "^1.0.0"
isobject "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
object.map@^1.0.0, object.map@^1.0.1:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/object.map/-/object.map-1.0.1.tgz#cf83e59dc8fcc0ad5f4250e1f78b3b81bd801d37"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-z4Plncj8wK1fQlDh94s7gb2AHTc=
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
for-own "^1.0.0"
make-iterator "^1.0.0"
object.pick@^1.2.0, object.pick@^1.3.0:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/object.pick/-/object.pick-1.3.0.tgz#87a10ac4c1694bd2e1cbf53591a66141fb5dd747"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-h6EKxMFpS9Lhy/U1kaZhQftd10c=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
isobject "^3.0.1"
Update dependency oembed-parser to v1.4.8
2021-09-03 06:32:36 +03:00
oembed-parser@1.4.8:
version "1.4.8"
resolved "https://registry.yarnpkg.com/oembed-parser/-/oembed-parser-1.4.8.tgz#a7961756358db0121c9bea1d66df889f9839f08f"
integrity sha512-9CKgXRcxg2geW/SgMJDHLZ/CTAfvdQNcBmbEvBkYX3CxvE/DFR2f/bW/PCmDWBonJ4bIJnN+dKJ46ZO+VFwNeQ==
Added /oembed API endpoint refs https://github.com/TryGhost/Ghost/issues/9623 - add `oembed-parser` module for checking provider availability for a url and fetching data from the provider - require it in the `overrides.js` file before the general Promise override so that the `promise-wrt` sub-dependency doesn't attempt to extend the Bluebird promise implementation - add `/oembed` authenticated endpoint - takes `?url=` query parameter to match against known providers - adds safeguard against oembed-parser's providers list not recognising http+https and www+non-www - responds with `ValidationError` if no provider is found - responds with oembed response from matched provider's oembed endpoint if match is found
2018-06-05 17:49:23 +03:00
dependencies:
Update dependency oembed-parser to v1.4.8
2021-09-03 06:32:36 +03:00
cross-fetch "^3.1.4"
Added /oembed API endpoint refs https://github.com/TryGhost/Ghost/issues/9623 - add `oembed-parser` module for checking provider availability for a url and fetching data from the provider - require it in the `overrides.js` file before the general Promise override so that the `promise-wrt` sub-dependency doesn't attempt to extend the Bluebird promise implementation - add `/oembed` authenticated endpoint - takes `?url=` query parameter to match against known providers - adds safeguard against oembed-parser's providers list not recognising http+https and www+non-www - responds with `ValidationError` if no provider is found - responds with oembed response from matched provider's oembed endpoint if match is found
2018-06-05 17:49:23 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
on-finished@^2.3.0, on-finished@~2.3.0:
version "2.3.0"
resolved "https://registry.yarnpkg.com/on-finished/-/on-finished-2.3.0.tgz#20f1336481b083cd75337992a16971aa2d906947"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IPEzZIGwg811M3mSoWlxqi2QaUc=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
ee-first "1.1.1"
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
on-headers@~1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/on-headers/-/on-headers-1.0.2.tgz#772b0ae6aaa525c399e489adfad90c403eb3c28f"
integrity sha512-pZAE+FJLoyITytdqK0U5s+FIpjN0JP3OzFi/u8Rx+EV5/W+JTWGXG8xFzevE7AjBfDqHv/8vL8qQsIhHnqRkrA==
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
once@^1.3.0, once@^1.3.1, once@^1.4.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.4.0"
resolved "https://registry.yarnpkg.com/once/-/once-1.4.0.tgz#583b1aa775961d4b113ac17d9c50baef9dd76bd1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WDsap3WWHUsROsF9nFC6753Xa9E=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
wrappy "1"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
onetime@^5.1.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "5.1.2"
resolved "https://registry.yarnpkg.com/onetime/-/onetime-5.1.2.tgz#d0e96ebb56b07476df1dd9c4806e5237985ca45e"
integrity sha512-kbpaSSGJTWdAY5KPVeMOKXSrPtr8C8C7wodJbcsd51jRnmD+GZu8Y0VoU6Dm5Z4vWr0Ig/1NKuWRKf7j5aaYSg==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
dependencies:
mimic-fn "^2.1.0"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
optionator@^0.8.1, optionator@^0.8.3:
Update Test & linting packages
2020-02-03 16:44:38 +03:00
version "0.8.3"
resolved "https://registry.yarnpkg.com/optionator/-/optionator-0.8.3.tgz#84fa1d036fe9d3c7e21d99884b601167ec8fb495"
integrity sha512-+IW9pACdk3XWmmTXG8m3upGUJst5XRGzxMRjXzAuJ1XnIFNvfhjjIuYkDvysnPQ7qzqVzLt78BCruntqRhWQbA==
dependencies:
deep-is "~0.1.3"
fast-levenshtein "~2.0.6"
levn "~0.3.0"
prelude-ls "~1.1.2"
type-check "~0.3.2"
word-wrap "~1.2.3"
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
optionator@^0.9.1:
version "0.9.1"
resolved "https://registry.yarnpkg.com/optionator/-/optionator-0.9.1.tgz#4f236a6373dae0566a6d43e1326674f50c291499"
integrity sha512-74RlY5FCnhq4jRxVUPKDaRwrVNXMqsGsiW6AJw4XK8hmtm10wC0ypZBLw5IIp85NZMr91+qd1RvvENwg7jjRFw==
dependencies:
deep-is "^0.1.3"
fast-levenshtein "^2.0.6"
levn "^0.4.1"
prelude-ls "^1.2.1"
type-check "^0.4.0"
word-wrap "^1.2.3"
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
os-homedir@^1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/os-homedir/-/os-homedir-1.0.2.tgz#ffbc4988336e0e833de0c168c7ef152121aa7fb3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-/7xJiDNuDoM94MFox+8VISGqf7M=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
os-tmpdir@^1.0.0, os-tmpdir@~1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/os-tmpdir/-/os-tmpdir-1.0.2.tgz#bbe67406c79aa85c5cfec766fe5734555dfa1274"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-u+Z0BseaqFxc/sdm/lc0VV36EnQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency sqlite3 to v5
2021-04-15 16:46:12 +03:00
osenv@0, osenv@^0.1.4:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "0.1.5"
resolved "https://registry.yarnpkg.com/osenv/-/osenv-0.1.5.tgz#85cdfafaeb28e8677f416e287592b5f3f49ea410"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-0CWcCECdMVc2Rw3U5w9ZjqX6ga6ubk1xDVKxtBQPK7wis/0F2r9T6k4ydGYhecl7YUBxBVxhL5oisPsNxAPe2g==
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
dependencies:
os-homedir "^1.0.0"
os-tmpdir "^1.0.0"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
p-cancelable@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/p-cancelable/-/p-cancelable-1.1.0.tgz#d078d15a3af409220c886f1d9a0ca2e441ab26cc"
integrity sha512-s73XxOZ4zpt1edZYZzvhqFa6uvQc1vwUa0K0BdtIZgQMAJj9IbebH+JkgKZc9h+B05PKHLOTl4ajG1BmNrVZlw==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
p-cancelable@^2.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/p-cancelable/-/p-cancelable-2.1.1.tgz#aab7fbd416582fa32a3db49859c122487c5ed2cf"
integrity sha512-BZOr3nRQHOntUjTrH8+Lh54smKHoHyur8We1V8DSMVrl5A2malOOwuJRnKRDjSnkoeBh4at6BwEnb5I7Jl31wg==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
p-finally@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/p-finally/-/p-finally-1.0.0.tgz#3fbcfb15b899a44123b34b6dcc18b724336a2cae"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-P7z7FbiZpEEjs0ttzBi3JDNqLK4=
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
p-limit@^2.2.0:
version "2.3.0"
resolved "https://registry.yarnpkg.com/p-limit/-/p-limit-2.3.0.tgz#3dd33c647a214fdfffd835933eb086da0dc21db1"
integrity sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==
dependencies:
p-try "^2.0.0"
Update dependency mocha to v8.1.2
2020-08-25 22:51:28 +03:00
p-limit@^3.0.2:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/p-limit/-/p-limit-3.1.0.tgz#e1daccbe78d0d1388ca18c64fea38e3e57e3706b"
integrity sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
dependencies:
Lock file maintenance
2021-05-05 18:56:03 +03:00
yocto-queue "^0.1.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
p-locate@^4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/p-locate/-/p-locate-4.1.0.tgz#a3428bb7088b3a60292f66919278b7c297ad4f07"
integrity sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A==
dependencies:
p-limit "^2.2.0"
Update dependency mocha to v8.1.2
2020-08-25 22:51:28 +03:00
p-locate@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/p-locate/-/p-locate-5.0.0.tgz#83c8315c6785005e3bd021839411c9e110e6d834"
integrity sha512-LaNjtRWUBY++zB5nE/NwcaoMylSPk+S+ZHNB1TzdbMJMny6dynpAGt7X/tl/QYq3TIeE6nxHppbo2LGymrG5Pw==
Update Test & linting packages
2020-07-21 20:38:46 +03:00
dependencies:
Update dependency mocha to v8.1.2
2020-08-25 22:51:28 +03:00
p-limit "^3.0.2"
Update Test & linting packages
2020-07-21 20:38:46 +03:00
Lock file maintenance
2021-06-01 18:19:18 +03:00
p-map@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/p-map/-/p-map-4.0.0.tgz#bb2f95a5eda2ec168ec9274e06a747c3e2904d2b"
integrity sha512-/bjOqmgETBYB5BoEeGVea8dmvHb2m9GLy1E9W43yeyfP6QQCZGFNa+XRceJEuDB6zqr+gKpIAmlLebMpykw/MQ==
dependencies:
aggregate-error "^3.0.0"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
p-timeout@^3.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "3.2.0"
resolved "https://registry.yarnpkg.com/p-timeout/-/p-timeout-3.2.0.tgz#c7e17abc971d2a7962ef83626b35d635acf23dfe"
integrity sha512-rhIwUycgwwKcP9yTOOFK/AKsAopjjCakVqLHePO3CC6Mir1Z99xT+R63jZxAT5lFZLa2inS5h+ZS2GvR99/FBg==
Reverted metascraper packages to 5.11.9 no issue - metascraper packages >= 5.11.10 have a dependency on got >= 11.0 - this has the minimum node version requirement set to `">=10.19.0"` - our current minimum required node version is `10.13.0`, breaking installs for versions in between - this reverts back metascraper packages to `5.11.9` to fix the minimum node version requirement
2020-05-08 12:34:12 +03:00
dependencies:
p-finally "^1.0.0"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
p-try@^2.0.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/p-try/-/p-try-2.2.0.tgz#cb2868540e313d61de58fafbe35ce9004d5540e6"
integrity sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==
Added job-manager & wired up shutdown and testmode - Bottom line - we need to manage shutting down gracefully when doing long-running tasks - To achieve that, we're going to use job queues In this commit: - added new @tryghost/job-manager dependency - added a minimal job service, that handles in passing things like logging and (maybe later) config - job service is wired up to server shutdown, so that the queue finishes before the server exits - also added a new job endpoint to testmode so that it's easy to test job behaviour without needing to do real work
2020-08-11 23:26:34 +03:00
p-wait-for@3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/p-wait-for/-/p-wait-for-3.1.0.tgz#9da568a2adda3ea8175a3c43f46a5317e28c0e47"
integrity sha512-0Uy19uhxbssHelu9ynDMcON6BmMk6pH8551CvxROhiz3Vx+yC4RqxjyIDk2V4ll0g9177RKT++PK4zcV58uJ7A==
dependencies:
p-timeout "^3.0.0"
Bumped selected dependencies to unpin sub-dependencies no issue - we've been unpinning dependencies in our libraries to remove duplicates - this commit bumps packages from the Utils repo and NQL, all of which contain changes to unpin their own dependencies
2021-04-19 12:46:47 +03:00
p-wait-for@^3.2.0:
Bumped job-manager version to 0.7.0 closes https://github.com/TryGhost/Ghost-Utils/issues/122
2021-01-06 07:47:57 +03:00
version "3.2.0"
resolved "https://registry.yarnpkg.com/p-wait-for/-/p-wait-for-3.2.0.tgz#640429bcabf3b0dd9f492c31539c5718cb6a3f1f"
integrity sha512-wpgERjNkLrBiFmkMEjuZJEWKKDrNfHCKA1OhyN1wg1FrLkULbviEy6py1AyJUgZ72YWFbZ38FIpnqvVqAlDUwA==
dependencies:
p-timeout "^3.0.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
pac-proxy-agent@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/pac-proxy-agent/-/pac-proxy-agent-3.0.1.tgz#115b1e58f92576cac2eba718593ca7b0e37de2ad"
integrity sha512-44DUg21G/liUZ48dJpUSjZnFfZro/0K5JTyFYLBcmh9+T6Ooi4/i4efwUiEy0+4oQusCBqWdhv16XohIj1GqnQ==
dependencies:
agent-base "^4.2.0"
debug "^4.1.1"
get-uri "^2.0.0"
http-proxy-agent "^2.1.0"
https-proxy-agent "^3.0.0"
pac-resolver "^3.0.0"
raw-body "^2.2.0"
socks-proxy-agent "^4.0.1"
pac-resolver@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/pac-resolver/-/pac-resolver-3.0.0.tgz#6aea30787db0a891704deb7800a722a7615a6f26"
integrity sha512-tcc38bsjuE3XZ5+4vP96OfhOugrX+JcnpUbhfuc4LuXBLQhoTthOstZeoQJBDnQUDYzYmdImKsbz0xSl1/9qeA==
dependencies:
co "^4.6.0"
degenerator "^1.0.4"
ip "^1.1.5"
netmask "^1.0.6"
thunkify "^2.1.2"
✨ Added support for gating content by member labels and products (#12946) refs https://github.com/TryGhost/Team/issues/581 closes https://github.com/TryGhost/Team/issues/582 Emails can now be sent to members with specific associated labels or products by specifying an NQL string. We want to bring the same members segment feature to content by allowing `visibility` to be an NQL filter string on top of the `public/members/paid` special-case strings. As an example it's possible to set `posts.visibility` to `label:vip` to make a post available only to those members with the `vip` label. - removed enum validations for `visibility` so it now accepts any string or `null` - bumped `@tryghost/admin-api-schema` for API-level validation changes - added nql validation to API input validators by running the visibility query against the members model - added transform of NQL to special-case visibility values when saving post model - ensures there's a single way of representing "members" and "paid" where NQL gives multiple ways of representing the same segment - useful for keeping theme-level checks such as `{{#has visibility="paid"}}` working as expected - updated content-gating to parse nql from post's visibility and use it to query the currently logged in member to see if there's a match - bumped @tryghost/members-api to include label and product data when loading member
2021-05-10 21:32:11 +03:00
pako@^1.0.11:
Update dependency node-jose to v1.1.4
2020-03-26 22:17:47 +03:00
version "1.0.11"
resolved "https://registry.yarnpkg.com/pako/-/pako-1.0.11.tgz#6c9599d340d54dfd3946380252a35705a6b992bf"
integrity sha512-4hLB8Py4zZce5s4yd9XzopqwVv/yGNhV1Bl8NTmCq1763HeK2+EwVTv+leGeL13Dnh2wfbqowVPXCIO0z4taYw==
Update dependency papaparse to v5.3.1
2021-05-28 12:01:58 +03:00
papaparse@5.3.1:
version "5.3.1"
resolved "https://registry.yarnpkg.com/papaparse/-/papaparse-5.3.1.tgz#770b7a9124d821d4b2132132b7bd7dce7194b5b1"
integrity sha512-Dbt2yjLJrCwH2sRqKFFJaN5XgIASO9YOFeFP8rIBRG2Ain8mqk5r1M6DkfvqEVozVcz3r3HaUGw253hA1nLIcA==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
parent-module@^1.0.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/parent-module/-/parent-module-1.0.1.tgz#691d2709e78c79fae3a156622452d00762caaaa2"
integrity sha512-GQ2EWRpQV8/o+Aw8YqtfZZPfNRWZYkbidE9k5rpl/hC3vtHHBfGm2Ifi6qWV+coDGkrUKZAxE3Lot5kcsRlh+g==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
callsites "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
parse-entities@^1.0.2, parse-entities@^1.1.0:
version "1.2.2"
resolved "https://registry.yarnpkg.com/parse-entities/-/parse-entities-1.2.2.tgz#c31bf0f653b6661354f8973559cb86dd1d5edf50"
integrity sha512-NzfpbxW/NPrzZ/yYSoQxyqUZMZXIdCfE0OIN4ESsnptHJECoUk3FZktxNuzQf4tjt5UEopnxpYJbvYuxIFDdsg==
dependencies:
character-entities "^1.0.0"
character-entities-legacy "^1.0.0"
character-reference-invalid "^1.0.0"
is-alphanumerical "^1.0.0"
is-decimal "^1.0.0"
is-hexadecimal "^1.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
parse-filepath@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/parse-filepath/-/parse-filepath-1.0.2.tgz#a632127f53aaf3d15876f5872f3ffac763d6c891"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-pjISf1Oq89FYdvWHLz/6x2PWyJE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
is-absolute "^1.0.0"
map-cache "^0.2.0"
path-root "^0.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
parse-json@^5.0.0:
version "5.2.0"
resolved "https://registry.yarnpkg.com/parse-json/-/parse-json-5.2.0.tgz#c76fc66dee54231c962b22bcc8a72cf2f99753cd"
integrity sha512-ayCKvm/phCGxOkYRSCM82iDwct8/EonSEgCSxWxD7ve6jHggsFl4fZVQBPRNgQoKiuV/odhFrGzQXZwbifC8Rg==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
"@babel/code-frame" "^7.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
error-ex "^1.3.1"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
json-parse-even-better-errors "^2.3.0"
lines-and-columns "^1.1.6"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
parse-passwd@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/parse-passwd/-/parse-passwd-1.0.0.tgz#6d5b934a456993b23d37f40a382d6f1666a8e5c6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-bVuTSkVpk7I9N/QKOC1vFmao5cY=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency sanitize-html to v1.27.2
2020-07-29 18:18:07 +03:00
parse-srcset@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/parse-srcset/-/parse-srcset-1.0.2.tgz#f2bd221f6cc970a938d88556abc589caaaa2bde1"
integrity sha1-8r0iH2zJcKk42IVWq8WJyqqiveE=
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
parse-uri@~1.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/parse-uri/-/parse-uri-1.0.3.tgz#f3c24a74907a4e357c1741e96ca9faadecfd6db5"
integrity sha512-upMnGxNcm+45So85HoguwZTVZI9u11i36DdxJfGF2HYWS2eh3TIx7+/tTi7qrEq15qzGkVhsKjesau+kCk48pA==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
parse5-htmlparser2-tree-adapter@^6.0.1:
version "6.0.1"
resolved "https://registry.yarnpkg.com/parse5-htmlparser2-tree-adapter/-/parse5-htmlparser2-tree-adapter-6.0.1.tgz#2cdf9ad823321140370d4dbf5d3e92c7c8ddc6e6"
integrity sha512-qPuWvbLgvDGilKc5BoicRovlT4MtYT6JfJyBOMDsKoiT+GiuP5qyrPCnR9HcPECIJJmZh5jRndyNThnhhb/vlA==
dependencies:
parse5 "^6.0.1"
parse5@6.0.1, parse5@^6.0.1:
Update dependency @tryghost/html-to-mobiledoc to v0.7.12
2021-03-10 22:11:13 +03:00
version "6.0.1"
resolved "https://registry.yarnpkg.com/parse5/-/parse5-6.0.1.tgz#e1a1c085c569b3dc08321184f19a39cc27f7c30b"
integrity sha512-Ofn/CTFzRGTTxwpNEs9PP93gXShHcTq255nzRYSKe8AkVpZY7e1fpmTfOyoIvjP5HG7Z2ZM7VS9PPhQGW2pOpw==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
parseurl@~1.3.3:
version "1.3.3"
resolved "https://registry.yarnpkg.com/parseurl/-/parseurl-1.3.3.tgz#9da19e7bee8d12dff0513ed5b76957793bc2e8d4"
integrity sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
pascalcase@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/pascalcase/-/pascalcase-0.1.1.tgz#b363e55e8006ca6fe21784d2db22bd15d7917f14"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-s2PlXoAGym/iF4TS2yK9FdeRfxQ=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Added oauth login and invitation acceptance issue https://github.com/TryGhost/Team/issues/614 - Users who have a password can directly sign-in via oauth - User who are logged-in get their password disabled - Users accepting an invitation get their password disabled - The way we disable password is by setting it to a long random password
2021-04-21 20:33:48 +03:00
passport-google-oauth1@1.x.x:
version "1.0.0"
resolved "https://registry.yarnpkg.com/passport-google-oauth1/-/passport-google-oauth1-1.0.0.tgz#af74a803df51ec646f66a44d82282be6f108e0cc"
integrity sha1-r3SoA99R7GRvZqRNgigr5vEI4Mw=
dependencies:
passport-oauth1 "1.x.x"
passport-google-oauth20@2.x.x:
version "2.0.0"
resolved "https://registry.yarnpkg.com/passport-google-oauth20/-/passport-google-oauth20-2.0.0.tgz#0d241b2d21ebd3dc7f2b60669ec4d587e3a674ef"
integrity sha512-KSk6IJ15RoxuGq7D1UKK/8qKhNfzbLeLrG3gkLZ7p4A6DBCcv7xpyQwuXtWdpyR0+E0mwkpjY1VfPOhxQrKzdQ==
dependencies:
passport-oauth2 "1.x.x"
Pin dependencies
2021-04-22 11:53:38 +03:00
passport-google-oauth@2.0.0:
Added oauth login and invitation acceptance issue https://github.com/TryGhost/Team/issues/614 - Users who have a password can directly sign-in via oauth - User who are logged-in get their password disabled - Users accepting an invitation get their password disabled - The way we disable password is by setting it to a long random password
2021-04-21 20:33:48 +03:00
version "2.0.0"
resolved "https://registry.yarnpkg.com/passport-google-oauth/-/passport-google-oauth-2.0.0.tgz#f6eb4bc96dd6c16ec0ecfdf4e05ec48ca54d4dae"
integrity sha512-JKxZpBx6wBQXX1/a1s7VmdBgwOugohH+IxCy84aPTZNq/iIPX6u7Mqov1zY7MKRz3niFPol0KJz8zPLBoHKtYA==
dependencies:
passport-google-oauth1 "1.x.x"
passport-google-oauth20 "2.x.x"
passport-oauth1@1.x.x:
Lock file maintenance
2021-07-05 04:25:22 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/passport-oauth1/-/passport-oauth1-1.2.0.tgz#5229d431781bf5b265bec86ce9a9cce58a756cf9"
integrity sha512-Sv2YWodC6jN12M/OXwmR4BIXeeIHjjbwYTQw4kS6tHK4zYzSEpxBgSJJnknBjICA5cj0ju3FSnG1XmHgIhYnLg==
Added oauth login and invitation acceptance issue https://github.com/TryGhost/Team/issues/614 - Users who have a password can directly sign-in via oauth - User who are logged-in get their password disabled - Users accepting an invitation get their password disabled - The way we disable password is by setting it to a long random password
2021-04-21 20:33:48 +03:00
dependencies:
oauth "0.9.x"
passport-strategy "1.x.x"
utils-merge "1.x.x"
passport-oauth2@1.x.x:
Lock file maintenance
2021-07-05 04:25:22 +03:00
version "1.6.0"
resolved "https://registry.yarnpkg.com/passport-oauth2/-/passport-oauth2-1.6.0.tgz#5f599735e0ea40ea3027643785f81a3a9b4feb50"
integrity sha512-emXPLqLcVEcLFR/QvQXZcwLmfK8e9CqvMgmOFJxcNT3okSFMtUbRRKpY20x5euD+01uHsjjCa07DYboEeLXYiw==
Added oauth login and invitation acceptance issue https://github.com/TryGhost/Team/issues/614 - Users who have a password can directly sign-in via oauth - User who are logged-in get their password disabled - Users accepting an invitation get their password disabled - The way we disable password is by setting it to a long random password
2021-04-21 20:33:48 +03:00
dependencies:
base64url "3.x.x"
oauth "0.9.x"
passport-strategy "1.x.x"
uid2 "0.0.x"
utils-merge "1.x.x"
passport-strategy@1.x.x:
version "1.0.0"
resolved "https://registry.yarnpkg.com/passport-strategy/-/passport-strategy-1.0.0.tgz#b5539aa8fc225a3d1ad179476ddf236b440f52e4"
integrity sha1-tVOaqPwiWj0a0XlHbd8ja0QPUuQ=
Pin dependencies
2021-04-22 11:53:38 +03:00
passport@0.4.1:
Added oauth login and invitation acceptance issue https://github.com/TryGhost/Team/issues/614 - Users who have a password can directly sign-in via oauth - User who are logged-in get their password disabled - Users accepting an invitation get their password disabled - The way we disable password is by setting it to a long random password
2021-04-21 20:33:48 +03:00
version "0.4.1"
resolved "https://registry.yarnpkg.com/passport/-/passport-0.4.1.tgz#941446a21cb92fc688d97a0861c38ce9f738f270"
integrity sha512-IxXgZZs8d7uFSt3eqNjM9NQ3g3uQCW5avD8mRNoXV99Yig50vjuaez6dQK2qC0kVWPRTujxY0dWgGfT09adjYg==
dependencies:
passport-strategy "1.x.x"
pause "0.0.1"
Update Test & linting packages
2020-07-21 20:38:46 +03:00
path-exists@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/path-exists/-/path-exists-4.0.0.tgz#513bdbe2d3b95d7762e8c1137efa195c6c61b5b3"
integrity sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
path-is-absolute@^1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/path-is-absolute/-/path-is-absolute-1.0.1.tgz#174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-F0uSaHNVNP+8es5r9TpanhtcX18=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
path-key@^2.0.0, path-key@^2.0.1:
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 21:45:29 +03:00
version "2.0.1"
resolved "https://registry.yarnpkg.com/path-key/-/path-key-2.0.1.tgz#411cadb574c5a140d3a4b1910d40d80cc9f40b40"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-QRyttXTFoUDTpLGRDUDYDMn0C0A=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
path-key@^3.1.0:
version "3.1.1"
resolved "https://registry.yarnpkg.com/path-key/-/path-key-3.1.1.tgz#581f6ade658cbba65a0d3380de7753295054f375"
integrity sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
path-match@1.2.4:
version "1.2.4"
resolved "https://registry.yarnpkg.com/path-match/-/path-match-1.2.4.tgz#a62747f3c7e0c2514762697f24443585b09100ea"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-pidH88fgwlFHYml/JEQ1hbCRAOo=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
http-errors "~1.4.0"
path-to-regexp "^1.0.0"
Update dependency proxyquire to v2.1.1
2019-08-05 06:29:02 +03:00
path-parse@^1.0.6:
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "1.0.7"
resolved "https://registry.yarnpkg.com/path-parse/-/path-parse-1.0.7.tgz#fbc114b60ca42b30d9daf5858e4bd68bbedb6735"
integrity sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
path-proxy@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/path-proxy/-/path-proxy-1.0.0.tgz#18e8a36859fc9d2f1a53b48dee138543c020de5e"
integrity sha1-GOijaFn8nS8aU7SN7hOFQ8Ag3l4=
dependencies:
inflection "~1.3.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
path-root-regex@^0.1.0:
version "0.1.2"
resolved "https://registry.yarnpkg.com/path-root-regex/-/path-root-regex-0.1.2.tgz#bfccdc8df5b12dc52c8b43ec38d18d72c04ba96d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-v8zcjfWxLcUsi0PsONGNcsBLqW0=
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
path-root@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/path-root/-/path-root-0.1.1.tgz#9a4a6814cac1c0cd73360a95f32083c8ea4745b7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-mkpoFMrBwM1zNgqV8yCDyOpHRbc=
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
path-root-regex "^0.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
path-to-regexp@0.1.7:
version "0.1.7"
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-0.1.7.tgz#df604178005f522f15eb4490e7247a1bfaa67f8c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-32BBeABfUi8V60SQ5yR6G/qmf4w=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
path-to-regexp@^1.0.0, path-to-regexp@^1.7.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.8.0"
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-1.8.0.tgz#887b3ba9d84393e87a0a0b9f4cb756198b53548a"
integrity sha512-n43JRhlUKUAlibEJhPeir1ncUID16QnEjNpwzNdO3Lm4ywrBpBZ5oLD0I6br9evr1Y9JTqwRtAh7JLoOzAQdVA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
isarray "0.0.1"
Added oauth login and invitation acceptance issue https://github.com/TryGhost/Team/issues/614 - Users who have a password can directly sign-in via oauth - User who are logged-in get their password disabled - Users accepting an invitation get their password disabled - The way we disable password is by setting it to a long random password
2021-04-21 20:33:48 +03:00
pause@0.0.1:
version "0.0.1"
resolved "https://registry.yarnpkg.com/pause/-/pause-0.0.1.tgz#1d408b3fdb76923b9543d96fb4c9dfd535d9cb5d"
integrity sha1-HUCLP9t2kjuVQ9lvtMnf1TXZy10=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
pend@~1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/pend/-/pend-1.2.0.tgz#7a57eb550a6783f9115331fcf4663d5c8e007a50"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-elfrVQpng/kRUzH89GY9XI4AelA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
performance-now@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/performance-now/-/performance-now-2.1.0.tgz#6309f4e0e5fa913ec1c69307ae364b4b377c9e7b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Ywn04OX6kT7BxpMHrjZLSzd8nns=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Update dependency brute-knex to v4.0.1
2020-11-02 20:07:12 +03:00
pg-connection-string@2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/pg-connection-string/-/pg-connection-string-2.1.0.tgz#e07258f280476540b24818ebb5dca29e101ca502"
integrity sha512-bhlV7Eq09JrRIvo1eKngpwuqKtJnNhZdpdOlvrPrA4dxqXPjxSrbNrfnIDmTpwMyRszrcV4kU5ZA4mMsQUrjdg==
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
Update dependency knex to v0.21.17
2021-02-10 01:28:13 +03:00
pg-connection-string@2.4.0:
version "2.4.0"
resolved "https://registry.yarnpkg.com/pg-connection-string/-/pg-connection-string-2.4.0.tgz#c979922eb47832999a204da5dbe1ebf2341b6a10"
integrity sha512-3iBXuv7XKvxeMrIgym7njT+HlZkwZqqGX4Bu9cci8xHZNT+Um1gWKqCsAzcC0d95rcKMU5WBg6YRUcHyV0HZKQ==
Lock file maintenance
2021-05-05 18:56:03 +03:00
picomatch@^2.0.4, picomatch@^2.2.1, picomatch@^2.2.3:
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "2.3.0"
resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.3.0.tgz#f1f061de8f6a4bf022892e2d128234fb98302972"
integrity sha512-lY1Q/PiJGC2zOv/z391WOTD+Z02bCgsFfvxoXXf6h7kv9o+WmsmzYqrAwY63sNgOxE4xEdq0WyUnXfKeBrSvYw==
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
Update dependency @lodder/grunt-postcss to v3
2020-10-20 11:41:14 +03:00
pify@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/pify/-/pify-4.0.1.tgz#4b2cd25c50d598735c50292224fd8c6df41e3231"
integrity sha512-uB80kBFb/tfd68bVleG9T5GGsGPjJrLAUpR5PZIrhBnIaRTQRjqdJSsIKkOP6OAIFbj7GOrcudc5pNjZ+geV2g==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
pluralize@8.0.0, pluralize@^8.0.0:
Update dependency gscan to v2.6.2
2019-07-02 12:09:26 +03:00
version "8.0.0"
resolved "https://registry.yarnpkg.com/pluralize/-/pluralize-8.0.0.tgz#1a6fa16a38d12a1901e0320fa017051c539ce3b1"
integrity sha512-Nc3IT5yHzflTfbjgqWcCPpo7DaKy4FnpB0l/zCAW0Tc7jxAiuqSxHasntB3D7887LSrA93kDJ9IXovxJYxyLCA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
posix-character-classes@^0.1.0:
version "0.1.1"
resolved "https://registry.yarnpkg.com/posix-character-classes/-/posix-character-classes-0.1.1.tgz#01eac0fe3b5af71a2a6c02feabb8c1fef7e00eab"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-AerA/jta9xoqbAL+q7jB/vfgDqs=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-calc@^8.0.0:
version "8.0.0"
resolved "https://registry.yarnpkg.com/postcss-calc/-/postcss-calc-8.0.0.tgz#a05b87aacd132740a5db09462a3612453e5df90a"
integrity sha512-5NglwDrcbiy8XXfPM11F3HeC6hoT9W7GUH/Zi5U/p7u3Irv4rHhdDcIZwG0llHXV4ftsBjpfWMXAnXNl4lnt8g==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-selector-parser "^6.0.2"
postcss-value-parser "^4.0.2"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.5
2021-05-28 23:59:08 +03:00
postcss-colormin@^5.2.0:
version "5.2.0"
resolved "https://registry.yarnpkg.com/postcss-colormin/-/postcss-colormin-5.2.0.tgz#2b620b88c0ff19683f3349f4cf9e24ebdafb2c88"
integrity sha512-+HC6GfWU3upe5/mqmxuqYZ9B2Wl4lcoUUNkoaX59nEWV4EtADCMiBqui111Bu8R8IvaZTmqmxrqOAqjbHIwXPw==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5.0.5
2021-05-28 23:59:08 +03:00
browserslist "^4.16.6"
caniuse-api "^3.0.0"
colord "^2.0.1"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser "^4.1.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-convert-values@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-convert-values/-/postcss-convert-values-5.0.1.tgz#4ec19d6016534e30e3102fdf414e753398645232"
integrity sha512-C3zR1Do2BkKkCgC0g3sF8TS0koF2G+mN8xxayZx3f10cIRmTaAnpgpRQZjNekTZxM2ciSPoh2IWJm0VZx8NoQg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser "^4.1.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-discard-comments@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-discard-comments/-/postcss-discard-comments-5.0.1.tgz#9eae4b747cf760d31f2447c27f0619d5718901fe"
integrity sha512-lgZBPTDvWrbAYY1v5GYEv8fEO/WhKOu/hmZqmCYfrpD6eyDWWzAOsl2rF29lpvziKO02Gc5GJQtlpkTmakwOWg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-discard-duplicates@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-discard-duplicates/-/postcss-discard-duplicates-5.0.1.tgz#68f7cc6458fe6bab2e46c9f55ae52869f680e66d"
integrity sha512-svx747PWHKOGpAXXQkCc4k/DsWo+6bc5LsVrAsw+OU+Ibi7klFZCyX54gjYzX4TH+f2uzXjRviLARxkMurA2bA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-discard-empty@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-discard-empty/-/postcss-discard-empty-5.0.1.tgz#ee136c39e27d5d2ed4da0ee5ed02bc8a9f8bf6d8"
integrity sha512-vfU8CxAQ6YpMxV2SvMcMIyF2LX1ZzWpy0lqHDsOdaKKLQVQGVP1pzhrI9JlsO65s66uQTfkQBKBD/A5gp9STFw==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-discard-overridden@^5.0.1:
Update dependency cssnano to v5.0.2
2021-05-03 20:05:43 +03:00
version "5.0.1"
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-discard-overridden/-/postcss-discard-overridden-5.0.1.tgz#454b41f707300b98109a75005ca4ab0ff2743ac6"
integrity sha512-Y28H7y93L2BpJhrdUR2SR2fnSsT+3TVx1NmVQLbcnZWwIUpJ7mfcTC6Za9M2PG6w8j7UQRfzxqn8jU2VwFxo3Q==
postcss-merge-longhand@^5.0.2:
version "5.0.2"
resolved "https://registry.yarnpkg.com/postcss-merge-longhand/-/postcss-merge-longhand-5.0.2.tgz#277ada51d9a7958e8ef8cf263103c9384b322a41"
integrity sha512-BMlg9AXSI5G9TBT0Lo/H3PfUy63P84rVz3BjCFE9e9Y9RXQZD3+h3YO1kgTNsNJy7bBc1YQp8DmSnwLIW5VPcw==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
css-color-names "^1.0.1"
postcss-value-parser "^4.1.0"
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
stylehacks "^5.0.1"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.5
2021-05-28 23:59:08 +03:00
postcss-merge-rules@^5.0.2:
version "5.0.2"
resolved "https://registry.yarnpkg.com/postcss-merge-rules/-/postcss-merge-rules-5.0.2.tgz#d6e4d65018badbdb7dcc789c4f39b941305d410a"
integrity sha512-5K+Md7S3GwBewfB4rjDeol6V/RZ8S+v4B66Zk2gChRqLTCC8yjnHQ601omj9TKftS19OPGqZ/XzoqpzNQQLwbg==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
dependencies:
Update dependency cssnano to v5.0.5
2021-05-28 23:59:08 +03:00
browserslist "^4.16.6"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
caniuse-api "^3.0.0"
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
cssnano-utils "^2.0.1"
postcss-selector-parser "^6.0.5"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
vendors "^1.0.3"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-minify-font-values@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-minify-font-values/-/postcss-minify-font-values-5.0.1.tgz#a90cefbfdaa075bd3dbaa1b33588bb4dc268addf"
integrity sha512-7JS4qIsnqaxk+FXY1E8dHBDmraYFWmuL6cgt0T1SWGRO5bzJf8sUoelwa4P88LEWJZweHevAiDKxHlofuvtIoA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser "^4.1.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.8
2021-08-19 12:13:19 +03:00
postcss-minify-gradients@^5.0.2:
version "5.0.2"
resolved "https://registry.yarnpkg.com/postcss-minify-gradients/-/postcss-minify-gradients-5.0.2.tgz#7c175c108f06a5629925d698b3c4cf7bd3864ee5"
integrity sha512-7Do9JP+wqSD6Prittitt2zDLrfzP9pqKs2EcLX7HJYxsxCOwrrcLt4x/ctQTsiOw+/8HYotAoqNkrzItL19SdQ==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5.0.8
2021-08-19 12:13:19 +03:00
colord "^2.6"
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
cssnano-utils "^2.0.1"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser "^4.1.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-minify-params@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-minify-params/-/postcss-minify-params-5.0.1.tgz#371153ba164b9d8562842fdcd929c98abd9e5b6c"
integrity sha512-4RUC4k2A/Q9mGco1Z8ODc7h+A0z7L7X2ypO1B6V8057eVK6mZ6xwz6QN64nHuHLbqbclkX1wyzRnIrdZehTEHw==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
alphanum-sort "^1.0.2"
browserslist "^4.16.0"
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
cssnano-utils "^2.0.1"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser "^4.1.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
uniqs "^2.0.0"
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-minify-selectors@^5.1.0:
version "5.1.0"
resolved "https://registry.yarnpkg.com/postcss-minify-selectors/-/postcss-minify-selectors-5.1.0.tgz#4385c845d3979ff160291774523ffa54eafd5a54"
integrity sha512-NzGBXDa7aPsAcijXZeagnJBKBPMYLaJJzB8CQh6ncvyl2sIndLVWfbcDi0SBjRWk5VqEjXvf8tYwzoKf4Z07og==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
alphanum-sort "^1.0.2"
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-selector-parser "^6.0.5"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-normalize-charset@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-normalize-charset/-/postcss-normalize-charset-5.0.1.tgz#121559d1bebc55ac8d24af37f67bd4da9efd91d0"
integrity sha512-6J40l6LNYnBdPSk+BHZ8SF+HAkS4q2twe5jnocgd+xWpz/mx/5Sa32m3W1AA8uE8XaXN+eg8trIlfu8V9x61eg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-normalize-display-values@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-normalize-display-values/-/postcss-normalize-display-values-5.0.1.tgz#62650b965981a955dffee83363453db82f6ad1fd"
integrity sha512-uupdvWk88kLDXi5HEyI9IaAJTE3/Djbcrqq8YgjvAVuzgVuqIk3SuJWUisT2gaJbZm1H9g5k2w1xXilM3x8DjQ==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
dependencies:
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
cssnano-utils "^2.0.1"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser "^4.1.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-normalize-positions@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-normalize-positions/-/postcss-normalize-positions-5.0.1.tgz#868f6af1795fdfa86fbbe960dceb47e5f9492fe5"
integrity sha512-rvzWAJai5xej9yWqlCb1OWLd9JjW2Ex2BCPzUJrbaXmtKtgfL8dBMOOMTX6TnvQMtjk3ei1Lswcs78qKO1Skrg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser "^4.1.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-normalize-repeat-style@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-normalize-repeat-style/-/postcss-normalize-repeat-style-5.0.1.tgz#cbc0de1383b57f5bb61ddd6a84653b5e8665b2b5"
integrity sha512-syZ2itq0HTQjj4QtXZOeefomckiV5TaUO6ReIEabCh3wgDs4Mr01pkif0MeVwKyU/LHEkPJnpwFKRxqWA/7O3w==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
cssnano-utils "^2.0.1"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser "^4.1.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-normalize-string@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-normalize-string/-/postcss-normalize-string-5.0.1.tgz#d9eafaa4df78c7a3b973ae346ef0e47c554985b0"
integrity sha512-Ic8GaQ3jPMVl1OEn2U//2pm93AXUcF3wz+OriskdZ1AOuYV25OdgS7w9Xu2LO5cGyhHCgn8dMXh9bO7vi3i9pA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser "^4.1.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-normalize-timing-functions@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-normalize-timing-functions/-/postcss-normalize-timing-functions-5.0.1.tgz#8ee41103b9130429c6cbba736932b75c5e2cb08c"
integrity sha512-cPcBdVN5OsWCNEo5hiXfLUnXfTGtSFiBU9SK8k7ii8UD7OLuznzgNRYkLZow11BkQiiqMcgPyh4ZqXEEUrtQ1Q==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
cssnano-utils "^2.0.1"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser "^4.1.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-normalize-unicode@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-normalize-unicode/-/postcss-normalize-unicode-5.0.1.tgz#82d672d648a411814aa5bf3ae565379ccd9f5e37"
integrity sha512-kAtYD6V3pK0beqrU90gpCQB7g6AOfP/2KIPCVBKJM2EheVsBQmx/Iof+9zR9NFKLAx4Pr9mDhogB27pmn354nA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
browserslist "^4.16.0"
postcss-value-parser "^4.1.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update CSS preprocessors
2021-06-11 14:34:17 +03:00
postcss-normalize-url@^5.0.2:
version "5.0.2"
resolved "https://registry.yarnpkg.com/postcss-normalize-url/-/postcss-normalize-url-5.0.2.tgz#ddcdfb7cede1270740cf3e4dfc6008bd96abc763"
integrity sha512-k4jLTPUxREQ5bpajFQZpx8bCF2UrlqOTzP9kEqcEnOfwsRshWs2+oAFIHfDQB8GO2PaUaSE0NlTAYtbluZTlHQ==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
is-absolute-url "^3.0.3"
Update CSS preprocessors
2021-06-11 14:34:17 +03:00
normalize-url "^6.0.1"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser "^4.1.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-normalize-whitespace@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-normalize-whitespace/-/postcss-normalize-whitespace-5.0.1.tgz#b0b40b5bcac83585ff07ead2daf2dcfbeeef8e9a"
integrity sha512-iPklmI5SBnRvwceb/XH568yyzK0qRVuAG+a1HFUsFRf11lEJTiQQa03a4RSCQvLKdcpX7XsI1Gen9LuLoqwiqA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser "^4.1.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update CSS preprocessors
2021-06-11 14:34:17 +03:00
postcss-ordered-values@^5.0.2:
version "5.0.2"
resolved "https://registry.yarnpkg.com/postcss-ordered-values/-/postcss-ordered-values-5.0.2.tgz#1f351426977be00e0f765b3164ad753dac8ed044"
integrity sha512-8AFYDSOYWebJYLyJi3fyjl6CqMEG/UVworjiyK1r573I56kb3e879sCJLGvR3merj+fAdPpVplXKQZv+ey6CgQ==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
cssnano-utils "^2.0.1"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser "^4.1.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-reduce-initial@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-reduce-initial/-/postcss-reduce-initial-5.0.1.tgz#9d6369865b0f6f6f6b165a0ef5dc1a4856c7e946"
integrity sha512-zlCZPKLLTMAqA3ZWH57HlbCjkD55LX9dsRyxlls+wfuRfqCi5mSlZVan0heX5cHr154Dq9AfbH70LyhrSAezJw==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
browserslist "^4.16.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
caniuse-api "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-reduce-transforms@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-reduce-transforms/-/postcss-reduce-transforms-5.0.1.tgz#93c12f6a159474aa711d5269923e2383cedcf640"
integrity sha512-a//FjoPeFkRuAguPscTVmRQUODP+f3ke2HqFNgGPwdYnpeC29RZdCBvGRGTsKpMURb/I3p6jdKoBQ2zI+9Q7kA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
cssnano-utils "^2.0.1"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser "^4.1.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Lock file maintenance
2021-06-01 18:19:18 +03:00
postcss-selector-parser@^6.0.2, postcss-selector-parser@^6.0.4, postcss-selector-parser@^6.0.5:
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
version "6.0.6"
resolved "https://registry.yarnpkg.com/postcss-selector-parser/-/postcss-selector-parser-6.0.6.tgz#2c5bba8174ac2f6981ab631a42ab0ee54af332ea"
integrity sha512-9LXrvaaX3+mcv5xkg5kFwqSzSH1JIObIx51PrndZwlmznwXRfxMddDvo9gve3gVR8ZTKgoFDdWkbRFmEhT4PMg==
dependencies:
cssesc "^3.0.0"
util-deprecate "^1.0.2"
Update dependency cssnano to v5.0.5
2021-05-28 23:59:08 +03:00
postcss-svgo@^5.0.2:
version "5.0.2"
resolved "https://registry.yarnpkg.com/postcss-svgo/-/postcss-svgo-5.0.2.tgz#bc73c4ea4c5a80fbd4b45e29042c34ceffb9257f"
integrity sha512-YzQuFLZu3U3aheizD+B1joQ94vzPfE6BNUcSYuceNxlVnKKsOtdo6hL9/zyC168Q8EwfLSgaDSalsUGa9f2C0A==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser "^4.1.0"
svgo "^2.3.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-unique-selectors@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/postcss-unique-selectors/-/postcss-unique-selectors-5.0.1.tgz#3be5c1d7363352eff838bd62b0b07a0abad43bfc"
integrity sha512-gwi1NhHV4FMmPn+qwBNuot1sG1t2OmacLQ/AX29lzyggnjd+MnVD5uqQmpXO3J17KGL2WAxQruj1qTd3H0gG/w==
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
dependencies:
alphanum-sort "^1.0.2"
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
postcss-selector-parser "^6.0.5"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
uniqs "^2.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
postcss-value-parser@^4.0.2, postcss-value-parser@^4.1.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "4.1.0"
resolved "https://registry.yarnpkg.com/postcss-value-parser/-/postcss-value-parser-4.1.0.tgz#443f6a20ced6481a2bda4fa8532a6e55d789a2cb"
integrity sha512-97DXOFbQJhk71ne5/Mt6cOu6yxsSfM0QGQyl0L25Gca4yGWEGJaig7l7gbCX623VqTBNGLRLaVUCnNkcedlRSQ==
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
Update dependency postcss to v8.3.8
2021-09-27 13:32:42 +03:00
postcss@8.3.8:
version "8.3.8"
resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.3.8.tgz#9ebe2a127396b4b4570ae9f7770e7fb83db2bac1"
integrity sha512-GT5bTjjZnwDifajzczOC+r3FI3Cu+PgPvrsjhQdRqa2kTJ4968/X9CUce9xttIB0xOs5c6xf0TCWZo/y9lF6bA==
Update dependency postcss to v8.3.7
2021-09-22 11:06:22 +03:00
dependencies:
Update dependency postcss to v8.3.8
2021-09-27 13:32:42 +03:00
nanocolors "^0.2.2"
Update dependency postcss to v8.3.7
2021-09-22 11:06:22 +03:00
nanoid "^3.1.25"
source-map-js "^0.6.2"
postcss@^8.0.2:
Update CSS preprocessors
2021-07-21 19:35:14 +03:00
version "8.3.6"
resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.3.6.tgz#2730dd76a97969f37f53b9a6096197be311cc4ea"
integrity sha512-wG1cc/JhRgdqB6WHEuyLTedf3KIRuD0hG6ldkFEZNCjRxiC+3i6kkWUUbiJQayP28iwG35cEmAbe98585BYV0A==
dependencies:
colorette "^1.2.2"
nanoid "^3.1.23"
source-map-js "^0.6.2"
Update dependency @tryghost/image-transform to v1.0.14
2021-09-22 18:34:15 +03:00
prebuild-install@^6.1.4:
Lock file maintenance
2021-08-16 04:04:05 +03:00
version "6.1.4"
resolved "https://registry.yarnpkg.com/prebuild-install/-/prebuild-install-6.1.4.tgz#ae3c0142ad611d58570b89af4986088a4937e00f"
integrity sha512-Z4vpywnK1lBg+zdPCVCsKq0xO66eEV9rWo2zrROGGiRS4JtueBOdlB1FnY8lcy7JsUud/Q3ijUxyWN26Ika0vQ==
Update dependency @tryghost/image-transform to v1.0.11
2021-04-21 11:12:19 +03:00
dependencies:
detect-libc "^1.0.3"
expand-template "^2.0.3"
github-from-package "0.0.0"
minimist "^1.2.3"
mkdirp-classic "^0.5.3"
napi-build-utils "^1.0.1"
node-abi "^2.21.0"
npmlog "^4.0.1"
pump "^3.0.0"
rc "^1.2.7"
simple-get "^3.0.3"
tar-fs "^2.0.0"
tunnel-agent "^0.6.0"
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
prelude-ls@^1.2.1:
version "1.2.1"
resolved "https://registry.yarnpkg.com/prelude-ls/-/prelude-ls-1.2.1.tgz#debc6489d7a6e6b0e7611888cec880337d316396"
integrity sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
prelude-ls@~1.1.2:
version "1.1.2"
resolved "https://registry.yarnpkg.com/prelude-ls/-/prelude-ls-1.1.2.tgz#21932a549f5e52ffd9a827f570e04be62a97da54"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IZMqVJ9eUv/ZqCf1cOBL5iqX2lQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
prepend-http@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/prepend-http/-/prepend-http-2.0.0.tgz#e92434bfa5ea8c19f41cdfd401d741a3c819d897"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-6SQ0v6XqjBn0HN/UAddBo8gZ2Jc=
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
pretty-bytes@^5.3.0, pretty-bytes@^5.4.1:
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
version "5.6.0"
resolved "https://registry.yarnpkg.com/pretty-bytes/-/pretty-bytes-5.6.0.tgz#356256f643804773c82f64723fe78c92c62beaeb"
integrity sha512-FFw039TmrBqFK8ma/7OL3sDz/VytdtJr044/QUJtH0wK9lb9jLq9tJyIxUwtQJHwar2BqtiA4iCWSwo9JLkzFg==
Updated bookshelf-relations dependency to 2.2.0
2020-08-03 22:37:25 +03:00
prettyjson@1.2.1, prettyjson@^1.2.1:
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
version "1.2.1"
resolved "https://registry.yarnpkg.com/prettyjson/-/prettyjson-1.2.1.tgz#fcffab41d19cab4dfae5e575e64246619b12d289"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-/P+rQdGcq0365eV15kJGYZsS0ok=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
colors "^1.1.2"
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
minimist "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
printj@~1.1.0:
version "1.1.2"
resolved "https://registry.yarnpkg.com/printj/-/printj-1.1.2.tgz#d90deb2975a8b9f600fb3a1c94e3f4c53c78a222"
integrity sha512-zA2SmoLaxZyArQTOPj5LXecR+RagfPSU5Kw1qP+jkWeNlrq+eJZyY2oS68SU1Z/7/myXM4lo9716laOFAVStCQ==
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
probe-image-size@5.0.0, probe-image-size@^5.0.0:
Update dependency probe-image-size to v5 (#11128)
2019-09-30 23:35:10 +03:00
version "5.0.0"
resolved "https://registry.yarnpkg.com/probe-image-size/-/probe-image-size-5.0.0.tgz#1b87d20340ab8fcdb4324ec77fbc8a5f53419878"
integrity sha512-V6uBYw5eBc5UVIE7MUZD6Nxg0RYuGDWLDenEn0B1WC6PcTvn1xdQ6HLDDuznefsiExC6rNrCz7mFRBo0f3Xekg==
dependencies:
deepmerge "^4.0.0"
inherits "^2.0.3"
next-tick "^1.0.0"
request "^2.83.0"
stream-parser "~0.3.1"
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
process-nextick-args@~2.0.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "2.0.1"
resolved "https://registry.yarnpkg.com/process-nextick-args/-/process-nextick-args-2.0.1.tgz#7820d9b16120cc55ca9ae7792680ae7dba6d7fe2"
integrity sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Update dependency node-jose to v1.1.4
2020-03-26 22:17:47 +03:00
process@^0.11.10:
version "0.11.10"
resolved "https://registry.yarnpkg.com/process/-/process-0.11.10.tgz#7332300e840161bda3e69a1d1d91a7d4bc16f182"
integrity sha1-czIwDoQBYb2j5podHZGn1LwW8YI=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
progress@^2.0.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "2.0.3"
resolved "https://registry.yarnpkg.com/progress/-/progress-2.0.3.tgz#7e8cf8d8f5b8f239c1bc68beb4eb78567d572ef8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-7PiHtLll5LdnKIMw100I+8xJXR5gW2QwWYkT6iJva0bXitZKa/XMrSbdmg3r2Xnaidz9Qumd0VPaMrZlF9V9sA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2021-06-01 18:19:18 +03:00
promise-inflight@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/promise-inflight/-/promise-inflight-1.0.1.tgz#98472870bf228132fcbdd868129bad12c3c029e3"
integrity sha1-mEcocL8igTL8vdhoEputEsPAKeM=
promise-retry@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/promise-retry/-/promise-retry-2.0.1.tgz#ff747a13620ab57ba688f5fc67855410c370da22"
integrity sha512-y+WKFlBR8BGXnsNlIHFGPZmyDf3DFMoLhaflAnyZgV6rG6xu+JwesTo2Q9R6XwYmtmwAFCkAk3e35jEdoeh/3g==
dependencies:
err-code "^2.0.2"
retry "^0.12.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
promisify-call@^2.0.2:
version "2.0.4"
resolved "https://registry.yarnpkg.com/promisify-call/-/promisify-call-2.0.4.tgz#d48c2d45652ccccd52801ddecbd533a6d4bd5fba"
integrity sha1-1IwtRWUszM1SgB3ey9UzptS9X7o=
dependencies:
with-callback "^1.0.2"
Update dependency nock to v11 (#11093)
2019-09-10 11:13:26 +03:00
propagate@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/propagate/-/propagate-2.0.1.tgz#40cdedab18085c792334e64f0ac17256d38f9a45"
integrity sha512-vGrhOavPSTz4QVNuBNdcNXePNdNMaO1xj9yBeH1ScQPjk/rhg9sSlCXPhMkFuaNNW/syTvYqsnbIJxMBfRbbag==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added support for graceful job shutdown and worker threads refs #12402 - With bumped version of job-manager it offloads job procesing into separate worker thread. Having jobs run out of main Ghost process even loop allows for safe job execution, which does not block Ghost from serving requests or performing other functions without a delay - Added experimental data access to 'testmode' jobs. This should serve as an illustration of how to access data from the job layer
2020-11-23 07:17:49 +03:00
property-expr@^2.0.4:
Added support for jobs defined as modules no issue - These changes should allow easy testing of scheduled jobs and provide an implementation example for future jobs within Ghost - Added experimental support to run jobs based on functions defined in modules - Extendeded testmode "schedule" endpoint with an optional job name parameter which picks up job from "jobs" folder - Adjusted scheduleJob method use and passed "schedule" as first parameter - Bumped job-manager version to allow for all new functionality
2020-11-10 07:29:35 +03:00
version "2.0.4"
resolved "https://registry.yarnpkg.com/property-expr/-/property-expr-2.0.4.tgz#37b925478e58965031bb612ec5b3260f8241e910"
integrity sha512-sFPkHQjVKheDNnPvotjQmm3KD3uk1fWKUN7CrpdbwmUx3CrG3QiM8QpTSimvig5vTXmTvjz7+TDvXOI9+4rkcg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
proto-list@~1.2.1:
version "1.2.4"
resolved "https://registry.yarnpkg.com/proto-list/-/proto-list-1.2.4.tgz#212d5bfe1318306a420f6402b8e26ff39647a849"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IS1b/hMYMGpCD2QCuOJv85ZHqEk=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
proxy-addr@~2.0.5:
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "2.0.7"
resolved "https://registry.yarnpkg.com/proxy-addr/-/proxy-addr-2.0.7.tgz#f19fe69ceab311eeb94b42e70e8c2070f9ba1025"
integrity sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
dependencies:
Lock file maintenance
2021-06-01 18:19:18 +03:00
forwarded "0.2.0"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
ipaddr.js "1.9.1"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
proxy-agent@^3.0.3:
version "3.1.1"
resolved "https://registry.yarnpkg.com/proxy-agent/-/proxy-agent-3.1.1.tgz#7e04e06bf36afa624a1540be247b47c970bd3014"
integrity sha512-WudaR0eTsDx33O3EJE16PjBRZWcX8GqCEeERw1W3hZJgH/F2a46g7jty6UGty6NeJ4CKQy8ds2CJPMiyeqaTvw==
dependencies:
agent-base "^4.2.0"
debug "4"
http-proxy-agent "^2.1.0"
https-proxy-agent "^3.0.0"
lru-cache "^5.1.1"
pac-proxy-agent "^3.0.1"
proxy-from-env "^1.0.0"
socks-proxy-agent "^4.0.1"
Update dependency jwks-rsa to v2
2021-04-15 19:03:37 +03:00
proxy-from-env@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/proxy-from-env/-/proxy-from-env-1.1.0.tgz#e102f16ca355424865755d2c9e8ea4f24d58c3e2"
integrity sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
pseudomap@^1.0.1, pseudomap@^1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/pseudomap/-/pseudomap-1.0.2.tgz#f052a28da70e618917ef0a8ac34c1ae5a68286b3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8FKijacOYYkX7wqKw0wa5aaChrM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
psl@^1.1.28, psl@^1.1.33:
Updated Ignition and @tryghost/errors dependencies no issue - These dependencies needed to be bumped together
2020-05-26 14:51:49 +03:00
version "1.8.0"
resolved "https://registry.yarnpkg.com/psl/-/psl-1.8.0.tgz#9326f8bcfb013adcc005fdff056acce020e51c24"
integrity sha512-RIdOzyoavK+hA18OGGWDqUTsCLhtA7IcZ/6NCs4fFJaHBDab+pDDmDIByWFRQJq2Cd7r1OoQxBGKOaztq+hjIQ==
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
pump@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/pump/-/pump-3.0.0.tgz#b4a2116815bde2f4e1ea602354e8c75565107a64"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-LwZy+p3SFs1Pytd/jYct4wpv49HiYCqd9Rlc5ZVdk0V+8Yzv6jR5Blk3TRmPL1ft69TxP0IMZGJ+WPFU2BFhww==
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
dependencies:
end-of-stream "^1.1.0"
once "^1.3.1"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
punycode2@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/punycode2/-/punycode2-1.0.0.tgz#e2b4b9a9a8ff157d0b84438e203181ee7892dfd8"
integrity sha1-4rS5qaj/FX0LhEOOIDGB7niS39g=
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
punycode@^2.1.0, punycode@^2.1.1:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/punycode/-/punycode-2.1.1.tgz#b58b010ac40c22c5657616c8d2c2c02c7bf479ec"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-XRsRjdf+j5ml+y/6GKHPZbrF/8p2Yga0JPtdqTIY2Xe5ohJPD9saDJJLPvp9+NSBprVvevdXZybnj2cv8OEd0A==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
qs@6.7.0:
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
version "6.7.0"
resolved "https://registry.yarnpkg.com/qs/-/qs-6.7.0.tgz#41dc1a015e3d581f1621776be31afb2876a9b1bc"
integrity sha512-VCdBRNFTX1fyE7Nb6FYoURo/SPe62QCaAyzJvUjwRaIsc+NePBEniHlvxFmmX56+HZphIGtV0XeCirBtpDrTyQ==
Update dependency supertest to v5
2020-09-25 16:36:48 +03:00
qs@^6.4.0, qs@^6.6.0, qs@^6.9.4:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "6.10.1"
resolved "https://registry.yarnpkg.com/qs/-/qs-6.10.1.tgz#4931482fa8d647a5aab799c5271d2133b981fb6a"
integrity sha512-M528Hph6wsSVOBiYUnGf+K/7w0hNshs/duGsNXPUCLH5XAqjEtiPGwNONLV0tBH8NoGb0mvD5JubnUTrujKDTg==
dependencies:
side-channel "^1.0.4"
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
qs@~6.5.2:
version "6.5.2"
resolved "https://registry.yarnpkg.com/qs/-/qs-6.5.2.tgz#cb3ae806e8740444584ef154ce8ee98d403f3e36"
integrity sha512-N5ZAX4/LxJmF+7wN74pUD6qAh9/wnvdQcjq9TZjevvXzSUo7bfmw91saqMjzGS2xq91/odN2dW/WOl7qQHNDGA==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
Update dependency image-size to v0.8.3 (#11149)
2019-10-01 00:17:18 +03:00
queue@6.0.1:
version "6.0.1"
resolved "https://registry.yarnpkg.com/queue/-/queue-6.0.1.tgz#abd5a5b0376912f070a25729e0b6a7d565683791"
integrity sha512-AJBQabRCCNr9ANq8v77RJEv73DPbn55cdTb+Giq4X0AVnNVZvMHlYp7XlQiN+1npCZj1DuSmaA2hYVUUDgxFDg==
dependencies:
inherits "~2.0.3"
Lock file maintenance
2021-05-05 18:56:03 +03:00
queue@6.0.2:
version "6.0.2"
resolved "https://registry.yarnpkg.com/queue/-/queue-6.0.2.tgz#b91525283e2315c7553d2efa18d83e76432fed65"
integrity sha512-iHZWu+q3IdFZFX36ro/lKBkSvfkztY5Y7HMiPlOUjhupPcG2JMfst2KKEpu5XndviX/3UhFbRngUPNKtgvtZiA==
dependencies:
inherits "~2.0.3"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
quick-lru@^5.1.1:
version "5.1.1"
resolved "https://registry.yarnpkg.com/quick-lru/-/quick-lru-5.1.1.tgz#366493e6b3e42a3a6885e2e99d18f80fb7a8c932"
integrity sha512-WuyALRjWPDGtt/wzJiadO5AXY+8hZ80hVpe6MyivgraREW751X3SbhRvG3eLKOYN+8VEvqLcf3wdnt44Z4S4SA==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
ramda@^0.27.0:
Update dependency eslint-plugin-ghost to v2
2020-10-23 12:01:27 +03:00
version "0.27.1"
resolved "https://registry.yarnpkg.com/ramda/-/ramda-0.27.1.tgz#66fc2df3ef873874ffc2da6aa8984658abacf5c9"
integrity sha512-PgIdVpn5y5Yns8vqb8FzBUEYn98V3xcPgawAkkgj0YJ0qDsnHCiNmZYfOGMgOvoB0eWFLpYbhxUR3mxfDIMvpw==
Updated tests eslint config to use eslint-plugin-ghost@0.5.0 no issue - bump eslint-plugin-ghost to v0.5.0 - update core/test eslint config to use "ghost:test" in place of custom ruleset - apply automated eslint fixes
2019-08-19 14:41:09 +03:00
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
random-bytes@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/random-bytes/-/random-bytes-1.0.0.tgz#4f68a1dc0ae58bd3fb95848c30324db75d64360b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-T2ih3Arli9P7lYSMMDJNt11kNgs=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency mocha to v8.1.0
2020-07-30 23:37:56 +03:00
randombytes@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/randombytes/-/randombytes-2.1.0.tgz#df6f84372f0270dc65cdf6291349ab7a473d4f2a"
integrity sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==
dependencies:
safe-buffer "^5.1.0"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
range-parser@~1.2.1:
version "1.2.1"
resolved "https://registry.yarnpkg.com/range-parser/-/range-parser-1.2.1.tgz#3cf37023d199e1c24d1a55b84800c2f3e6468031"
integrity sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
raw-body@2.4.0:
version "2.4.0"
resolved "https://registry.yarnpkg.com/raw-body/-/raw-body-2.4.0.tgz#a1ce6fb9c9bc356ca52e89256ab59059e13d0332"
integrity sha512-4Oz8DUIwdvoa5qMJelxipzi/iJIi40O5cGV1wNYp5hvZP8ZN0T+jiNkL0QepXs+EsQ9XJ8ipEDoiH70ySUJP3Q==
dependencies:
bytes "3.1.0"
http-errors "1.7.2"
iconv-lite "0.4.24"
unpipe "1.0.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
raw-body@^2.2.0:
version "2.4.1"
resolved "https://registry.yarnpkg.com/raw-body/-/raw-body-2.4.1.tgz#30ac82f98bb5ae8c152e67149dac8d55153b168c"
integrity sha512-9WmIKF6mkvA0SLmA2Knm9+qj89e+j1zqgyn8aXGd7+nAduPoqgI9lO57SAZNn/Byzo5P7JhXTyg9PzaJbH73bA==
dependencies:
bytes "3.1.0"
http-errors "1.7.3"
iconv-lite "0.4.24"
unpipe "1.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
raw-body@~1.1.0:
version "1.1.7"
resolved "https://registry.yarnpkg.com/raw-body/-/raw-body-1.1.7.tgz#1d027c2bfa116acc6623bca8f00016572a87d425"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-HQJ8K/oRasxmI7yo8AAWVyqH1CU=
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
dependencies:
bytes "1"
string_decoder "0.10"
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
rc@^1.2.7:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.2.8"
resolved "https://registry.yarnpkg.com/rc/-/rc-1.2.8.tgz#cd924bf5200a075b83c188cd6b9e211b7fc0d3ed"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
deep-extend "^0.6.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ini "~1.3.0"
minimist "^1.2.0"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
strip-json-comments "~2.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
re2@^1.15.9:
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "1.16.0"
resolved "https://registry.yarnpkg.com/re2/-/re2-1.16.0.tgz#f311eb4865b1296123800ea8e013cec8dab25590"
integrity sha512-eizTZL2ZO0ZseLqfD4t3Qd0M3b3Nr0MBWpX81EbPMIud/1d/CSfUIx2GQK8fWiAeHoSekO5EOeFib2udTZLwYw==
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
dependencies:
install-artifact-from-github "^1.2.0"
nan "^2.14.2"
Lock file maintenance
2021-06-01 18:19:18 +03:00
node-gyp "^8.0.0"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
read-pkg-up@^7.0.1:
version "7.0.1"
resolved "https://registry.yarnpkg.com/read-pkg-up/-/read-pkg-up-7.0.1.tgz#f3a6135758459733ae2b95638056e1854e7ef507"
integrity sha512-zK0TB7Xd6JpCLmlLmufqykGE+/TlOePD6qKClNW7hHDKFh/J7/7gCWGR7joEQEW1bKq3a3yUZSObOoWLFQ4ohg==
dependencies:
find-up "^4.1.0"
read-pkg "^5.2.0"
type-fest "^0.8.1"
read-pkg@^5.2.0:
version "5.2.0"
resolved "https://registry.yarnpkg.com/read-pkg/-/read-pkg-5.2.0.tgz#7bf295438ca5a33e56cd30e053b34ee7250c93cc"
integrity sha512-Ug69mNOpfvKDAc2Q8DRpMjjzdtrnv9HcSMX+4VsZxD1aZ6ZzrIE7rlzXBtWTyhULSMKg076AW6WR5iZpD0JiOg==
dependencies:
"@types/normalize-package-data" "^2.4.0"
normalize-package-data "^2.5.0"
parse-json "^5.0.0"
type-fest "^0.6.0"
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
readable-stream@1.1.x:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.1.14"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-1.1.14.tgz#7cf4c54ef648e3813084c636dd2079e166c081d9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-fPTFTvZI44EwhMY23SB54WbAgdk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
core-util-is "~1.0.0"
inherits "~2.0.1"
isarray "0.0.1"
string_decoder "~0.10.x"
🔥 Removed netjet support refs: https://github.com/cloudflare/netjet/issues/46 - HTTP2/Push never made it, this module is therefore defunct
2021-06-28 16:02:33 +03:00
readable-stream@2, readable-stream@2.3.7, readable-stream@^2.0.0, readable-stream@^2.0.5, readable-stream@^2.0.6, readable-stream@^2.2.2, readable-stream@^2.3.7:
Update dependency mysql to v2.18.1
2020-02-19 14:11:32 +03:00
version "2.3.7"
resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-2.3.7.tgz#1eca1cf711aef814c04f62252a36a62f6cb23b57"
integrity sha512-Ebho8K4jIbHAxnuxi7o42OrZgF/ZTNcsZj6nRKyUmkhLFq8CHItp/fy6hQZuZmP/n3yZ9VBUbp4zz/mX8hmYPw==
dependencies:
core-util-is "~1.0.0"
inherits "~2.0.3"
isarray "~1.0.0"
process-nextick-args "~2.0.0"
safe-buffer "~5.1.1"
string_decoder "~1.1.1"
util-deprecate "~1.0.1"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
readable-stream@^3.0.2, readable-stream@^3.1.1, readable-stream@^3.4.0, readable-stream@^3.6.0:
Update dependency @tryghost/members-csv to v0.2.1
2020-07-08 14:07:53 +03:00
version "3.6.0"
resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-3.6.0.tgz#337bbda3adc0706bd3e024426a286d4b4b2c9198"
integrity sha512-BViHy7LKeTz4oNnkcLJ+lVSL6vpiFeX6/d3oSH8zCW7UxP2onchk+vTGB143xuFjHS3deTgkKoXXymXqymiIdA==
dependencies:
inherits "^2.0.3"
string_decoder "^1.1.1"
util-deprecate "^1.0.1"
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
readdir-glob@^1.0.0:
version "1.1.1"
resolved "https://registry.yarnpkg.com/readdir-glob/-/readdir-glob-1.1.1.tgz#f0e10bb7bf7bfa7e0add8baffdc54c3f7dbee6c4"
integrity sha512-91/k1EzZwDx6HbERR+zucygRFfiPl2zkIYZtv3Jjr6Mn7SkKcVct8aVO+sSRiGMc6fLf72du3d92/uY63YPdEA==
dependencies:
minimatch "^3.0.4"
Update Test & linting packages
2021-07-05 03:37:17 +03:00
readdirp@^3.6.0, readdirp@~3.6.0:
Update dependency express-hbs to v2.3.5
2021-04-16 12:01:28 +03:00
version "3.6.0"
resolved "https://registry.yarnpkg.com/readdirp/-/readdirp-3.6.0.tgz#74a370bd857116e245b29cc97340cd431a02a6c7"
integrity sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==
dependencies:
picomatch "^2.2.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
rechoir@^0.6.2:
version "0.6.2"
resolved "https://registry.yarnpkg.com/rechoir/-/rechoir-0.6.2.tgz#85204b54dba82d5742e28c96756ef43af50e3384"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-hSBLVNuoLVdC4oyWdW70OvUOM4Q=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
resolve "^1.1.6"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
rechoir@^0.7.0:
Lock file maintenance
2021-07-26 03:45:02 +03:00
version "0.7.1"
resolved "https://registry.yarnpkg.com/rechoir/-/rechoir-0.7.1.tgz#9478a96a1ca135b5e88fc027f03ee92d6c645686"
integrity sha512-/njmZ8s1wVeR6pjTZ+0nCnv8SpZNRMT2D1RLOJQESlYFDBvwpTA4KWJpZ+sBJ4+vhjILRcK7JIFdGCdxEAAitg==
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
dependencies:
resolve "^1.9.0"
Added support for jobs defined as modules no issue - These changes should allow easy testing of scheduled jobs and provide an implementation example for future jobs within Ghost - Added experimental support to run jobs based on functions defined in modules - Extendeded testmode "schedule" endpoint with an optional job name parameter which picks up job from "jobs" folder - Adjusted scheduleJob method use and passed "schedule" as first parameter - Bumped job-manager version to allow for all new functionality
2020-11-10 07:29:35 +03:00
regenerator-runtime@^0.13.4:
Lock file maintenance
2021-07-26 03:45:02 +03:00
version "0.13.9"
resolved "https://registry.yarnpkg.com/regenerator-runtime/-/regenerator-runtime-0.13.9.tgz#8925742a98ffd90814988d7566ad30ca3b263b52"
integrity sha512-p3VT+cOEgxFsRRA9X4lkI1E+k2/CtnKtU4gcxyaCUreilL/vqI6CdZ3wxVUx3UOUg+gnUOQQcRI7BmSI656MYA==
Added support for jobs defined as modules no issue - These changes should allow easy testing of scheduled jobs and provide an implementation example for future jobs within Ghost - Added experimental support to run jobs based on functions defined in modules - Extendeded testmode "schedule" endpoint with an optional job name parameter which picks up job from "jobs" folder - Adjusted scheduleJob method use and passed "schedule" as first parameter - Bumped job-manager version to allow for all new functionality
2020-11-10 07:29:35 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
regex-not@^1.0.0, regex-not@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/regex-not/-/regex-not-1.0.2.tgz#1f4ece27e00b0b65e0247a6810e6a85d83a5752c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-J6SDjUgDxQj5NusnOtdFxDwN/+HWykR8GELwctJ7mdqhcyy1xEc4SRFHUXvxTp661YaVKAjfRLZ9cCqS6tn32A==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
extend-shallow "^3.0.2"
safe-regex "^1.1.0"
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
regexp-tree@^0.1.23, regexp-tree@~0.1.1:
version "0.1.23"
resolved "https://registry.yarnpkg.com/regexp-tree/-/regexp-tree-0.1.23.tgz#8a8ce1cc5e971acef62213a7ecdb1f6e18a1f1b2"
integrity sha512-+7HWfb4Bvu8Rs2eQTUIpX9I/PlQkYOuTNbRpKLJlQpSgwSkzFYh+pUj0gtvglnOZLKB6YgnIgRuJ2/IlpL48qw==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
regexpp@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/regexpp/-/regexpp-2.0.1.tgz#8d19d31cf632482b589049f8281f93dbcba4d07f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-lv0M6+TkDVniA3aD1Eg0DVpfU/booSu7Eev3TDO/mZKHBfVjgCGTV4t4buppESEYDtkArYFOxTJWv6S5C+iaNw==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
regexpp@^3.0.0, regexpp@^3.1.0:
Lock file maintenance
2021-07-05 04:25:22 +03:00
version "3.2.0"
resolved "https://registry.yarnpkg.com/regexpp/-/regexpp-3.2.0.tgz#0425a2768d8f23bad70ca4b90461fa2f1213e1b2"
integrity sha512-pq2bWo9mVD43nbts2wGv17XLiNLya+GklZ8kaDLV2Z08gDCsGpnKn9BFMepvWuHCbyVvY7J5o5+BVvoQbmlJLg==
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
🐛 Fixed "Incorrectly eaten value" error if markdown footnote has trailing newline whitespace no issue - update `url-utils` dependency which contains a fixed version of remark footnote parsing
2020-03-29 22:24:25 +03:00
remark-footnotes@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/remark-footnotes/-/remark-footnotes-1.0.0.tgz#9c7a97f9a89397858a50033373020b1ea2aad011"
integrity sha512-X9Ncj4cj3/CIvLI2Z9IobHtVi8FVdUrdJkCNaL9kdX8ohfsi18DXHsCVd/A7ssARBdccdDb5ODnt62WuEWaM/g==
🐛 Fixed "unsaved changes" modal displaying when post has been saved refs https://github.com/TryGhost/Ghost/issues/10477 The unsaved changes modal is displaying even when the post has been saved if images have been uploaded because the server is transforming absolute image urls to relative during input of the `mobiledoc` field but not transforming them back to absolute during output. The editor then thinks it's out of sync and shows the warning when trying to leave. - `@tryghost/url-utils` has been updated with new methods for transforming URLs in mobiledoc content - moves absolute->relative transformation from the API input serializers into the Post model - transforms URLs in more fields for a more comprehensive transformation and fewer issues when re-configuring a site's domain - previously there could be problems with internal links between posts not being transformed so you could change the url config to newdomain.com but links in post content would still be pointing to olddomain.com - updates the API post output serializers to transform all modified fields - drops the `?absolute_urls=true` param switch from the `canary` API post output serializer so that all URLs are output as absolute - we're transforming more urls to relative when saving so this is necessary to ensure the unsaved changes modal is not triggered - the query param isn't documented and will disappear in v3
2019-10-07 22:23:45 +03:00
remark-parse@^7.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "7.0.2"
resolved "https://registry.yarnpkg.com/remark-parse/-/remark-parse-7.0.2.tgz#41e7170d9c1d96c3d32cf1109600a9ed50dba7cf"
integrity sha512-9+my0lQS80IQkYXsMA8Sg6m9QfXYJBnXjWYN5U+kFc5/n69t+XZVXU/ZBYr3cYH8FheEGf1v87rkFDhJ8bVgMA==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
dependencies:
collapse-white-space "^1.0.2"
is-alphabetical "^1.0.0"
is-decimal "^1.0.0"
is-whitespace-character "^1.0.0"
is-word-character "^1.0.0"
markdown-escapes "^1.0.0"
parse-entities "^1.1.0"
repeat-string "^1.5.4"
state-toggle "^1.0.0"
trim "0.0.1"
trim-trailing-lines "^1.0.0"
unherit "^1.0.4"
unist-util-remove-position "^1.0.0"
vfile-location "^2.0.0"
xtend "^4.0.1"
🐛 Fixed "unsaved changes" modal displaying when post has been saved refs https://github.com/TryGhost/Ghost/issues/10477 The unsaved changes modal is displaying even when the post has been saved if images have been uploaded because the server is transforming absolute image urls to relative during input of the `mobiledoc` field but not transforming them back to absolute during output. The editor then thinks it's out of sync and shows the warning when trying to leave. - `@tryghost/url-utils` has been updated with new methods for transforming URLs in mobiledoc content - moves absolute->relative transformation from the API input serializers into the Post model - transforms URLs in more fields for a more comprehensive transformation and fewer issues when re-configuring a site's domain - previously there could be problems with internal links between posts not being transformed so you could change the url config to newdomain.com but links in post content would still be pointing to olddomain.com - updates the API post output serializers to transform all modified fields - drops the `?absolute_urls=true` param switch from the `canary` API post output serializer so that all URLs are output as absolute - we're transforming more urls to relative when saving so this is necessary to ensure the unsaved changes modal is not triggered - the query param isn't documented and will disappear in v3
2019-10-07 22:23:45 +03:00
remark-stringify@^7.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "7.0.4"
resolved "https://registry.yarnpkg.com/remark-stringify/-/remark-stringify-7.0.4.tgz#3de1e3f93853288d3407da1cd44f2212321dd548"
integrity sha512-qck+8NeA1D0utk1ttKcWAoHRrJxERYQzkHDyn+pF5Z4whX1ug98uCNPPSeFgLSaNERRxnD6oxIug6DzZQth6Pg==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
dependencies:
ccount "^1.0.0"
is-alphanumeric "^1.0.0"
is-decimal "^1.0.0"
is-whitespace-character "^1.0.0"
longest-streak "^2.0.1"
markdown-escapes "^1.0.0"
markdown-table "^1.1.0"
mdast-util-compact "^1.0.0"
parse-entities "^1.0.2"
repeat-string "^1.5.4"
state-toggle "^1.0.0"
stringify-entities "^2.0.0"
unherit "^1.0.4"
xtend "^4.0.1"
🐛 Fixed "Incorrectly eaten value" error if markdown footnote has trailing newline whitespace no issue - update `url-utils` dependency which contains a fixed version of remark footnote parsing
2020-03-29 22:24:25 +03:00
remark@^11.0.2:
version "11.0.2"
resolved "https://registry.yarnpkg.com/remark/-/remark-11.0.2.tgz#12b90ea100ac3362b1976fa87a6e4e0ab5968202"
integrity sha512-bh+eJgn8wgmbHmIBOuwJFdTVRVpl3fcVP6HxmpPWO0ULGP9Qkh6INJh0N5Uy7GqlV7DQYGoqaKiEIpM5LLvJ8w==
dependencies:
remark-parse "^7.0.0"
remark-stringify "^7.0.0"
unified "^8.2.0"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
remove-trailing-slash@^0.1.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "0.1.1"
resolved "https://registry.yarnpkg.com/remove-trailing-slash/-/remove-trailing-slash-0.1.1.tgz#be2285a59f39c74d1bce4f825950061915e3780d"
integrity sha512-o4S4Qh6L2jpnCy83ysZDau+VORNvnFw07CKSAymkd6ICNVEPisMyzlc00KlvvicsxKck94SEwhDnMNdICzO+tA==
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
repeat-element@^1.1.2:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "1.1.4"
resolved "https://registry.yarnpkg.com/repeat-element/-/repeat-element-1.1.4.tgz#be681520847ab58c7568ac75fbfad28ed42d39e9"
integrity sha512-LFiNfRcSu7KK3evMyYOuCzv3L10TW7yC1G2/+StMjK8Y6Vqd2MG7r/Qjw4ghtuCOjFvlnms/iMmLqpvW/ES/WQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
repeat-string@^1.5.4, repeat-string@^1.6.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.6.1"
resolved "https://registry.yarnpkg.com/repeat-string/-/repeat-string-1.6.1.tgz#8dcae470e1c88abc2d600fff4a776286da75e637"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-jcrkcOHIirwtYA//Sndihtp15jc=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
request-promise-core@1.1.4:
version "1.1.4"
resolved "https://registry.yarnpkg.com/request-promise-core/-/request-promise-core-1.1.4.tgz#3eedd4223208d419867b78ce815167d10593a22f"
integrity sha512-TTbAfBBRdWD7aNNOoVOBH4pN/KigV6LyapYNNlAPA8JwbovRti1E88m3sYAwsLi5ryhPKsE9APwnjFTgdUjTpw==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
lodash "^4.17.19"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
request-promise@^4.2.4:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "4.2.6"
resolved "https://registry.yarnpkg.com/request-promise/-/request-promise-4.2.6.tgz#7e7e5b9578630e6f598e3813c0f8eb342a27f0a2"
integrity sha512-HCHI3DJJUakkOr8fNoCc73E5nU5bqITjOYFMDrKHYOXWXrgD/SBaC7LjwuPymUprRyuF06UK7hd/lMHkmUXglQ==
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
dependencies:
bluebird "^3.5.0"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
request-promise-core "1.1.4"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
stealthy-require "^1.1.1"
tough-cookie "^2.3.3"
Lock file maintenance
2021-06-01 18:19:18 +03:00
"request@>=2.76.0 <3.0.0", request@^2.83.0, request@^2.87.0:
Updated Ignition and @tryghost/errors dependencies no issue - These dependencies needed to be bumped together
2020-05-26 14:51:49 +03:00
version "2.88.2"
resolved "https://registry.yarnpkg.com/request/-/request-2.88.2.tgz#d73c918731cb5a87da047e207234146f664d12b3"
integrity sha512-MsvtOrfG9ZcrOwAW+Qi+F6HbD0CWXEh9ou77uOb7FM2WPhwT7smM833PzanhJLsgXjN89Ir6V2PczXNnMpwKhw==
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
dependencies:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
aws-sign2 "~0.7.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
aws4 "^1.8.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
caseless "~0.12.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
combined-stream "~1.0.6"
extend "~3.0.2"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
forever-agent "~0.6.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
form-data "~2.3.2"
Updated Ignition and @tryghost/errors dependencies no issue - These dependencies needed to be bumped together
2020-05-26 14:51:49 +03:00
har-validator "~5.1.3"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
http-signature "~1.2.0"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
is-typedarray "~1.0.0"
isstream "~0.1.2"
json-stringify-safe "~5.0.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
mime-types "~2.1.19"
oauth-sign "~0.9.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
performance-now "^2.1.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
qs "~6.5.2"
safe-buffer "^5.1.2"
Updated Ignition and @tryghost/errors dependencies no issue - These dependencies needed to be bumped together
2020-05-26 14:51:49 +03:00
tough-cookie "~2.5.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
tunnel-agent "^0.6.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
uuid "^3.3.2"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
Update dependency gscan to v3.5.4
2020-05-01 13:15:50 +03:00
require-dir@1.2.0:
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/require-dir/-/require-dir-1.2.0.tgz#0d443b75e96012d3ca749cf19f529a789ae74817"
integrity sha512-LY85DTSu+heYgDqq/mK+7zFHWkttVNRXC9NKcKGyuGLdlsfbjEPrIEYdCVrx6hqnJb+xSu3Lzaoo8VnmOhhjNA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
require-directory@^2.1.1:
version "2.1.1"
resolved "https://registry.yarnpkg.com/require-directory/-/require-directory-2.1.1.tgz#8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"
integrity sha1-jGStX9MNqxyXbiNE/+f3kqam30I=
Lock file maintenance
2021-05-05 18:56:03 +03:00
require-from-string@^2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/require-from-string/-/require-from-string-2.0.2.tgz#89a7fdd938261267318eafe14f9c32e598c36909"
integrity sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
Update dependency eslint-plugin-ghost to v2.5.0 (#13149) Co-authored-by: Renovate Bot <bot@renovateapp.com> This version of eslint contains changes for Admin only
2021-07-16 15:13:04 +03:00
requireindex@^1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/requireindex/-/requireindex-1.2.0.tgz#3463cdb22ee151902635aa6c9535d4de9c2ef1ef"
integrity sha512-L9jEkOi3ASd9PYit2cwRfyppc9NoABujTP8/5gFcbERmo5jUoAKovIC3fsF17pkTnGsrByysqX+Kxd2OTNI1ww==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
reserved-words@^0.1.2:
version "0.1.2"
resolved "https://registry.yarnpkg.com/reserved-words/-/reserved-words-0.1.2.tgz#00a0940f98cd501aeaaac316411d9adc52b31ab1"
integrity sha1-AKCUD5jNUBrqqsMWQR2a3FKzGrE=
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
resolve-alpn@^1.0.0:
Lock file maintenance
2021-09-06 03:36:57 +03:00
version "1.2.1"
resolved "https://registry.yarnpkg.com/resolve-alpn/-/resolve-alpn-1.2.1.tgz#b7adbdac3546aaaec20b45e7d8265927072726f9"
integrity sha512-0a1F4l73/ZFZOakJnQ3FvkJ2+gSTQWz/r2KE5OdDY0TxPm5h4GkqkWWfM47T7HsbnOtcJVEF4epCVy6u7Q3K+g==
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
resolve-dir@^1.0.0, resolve-dir@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/resolve-dir/-/resolve-dir-1.0.1.tgz#79a40644c362be82f26effe739c9bb5382046f43"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-eaQGRMNivoLybv/nOcm7U4IEb0M=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
expand-tilde "^2.0.0"
global-modules "^1.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
resolve-from@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/resolve-from/-/resolve-from-4.0.0.tgz#4abcd852ad32dd7baabfe9b40e00a36db5f392e6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-pb/MYmXstAkysRFx8piNI1tGFNQIFA3vkE3Gq4EuA1dF6gHp/+vgZqsCGJapvy8N3Q+4o7FwvquPJcnZ7RYy4g==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
resolve-url@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/resolve-url/-/resolve-url-0.2.1.tgz#2c637fe77c893afd2a663fe21aa9080068e2052a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-LGN/53yJOv0qZj/iGqkIAGjiBSo=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Moved vhost arg logic out of the parent app - Makes the logic for determining the admin and frontend vhost args independent and easier to test - Moved the tests to specifically test the vhost utils & removed proxyquire as a dependency - We want to breakdown the current parent app into the existing core/app.js and boot code, allowing us to decouple the backend and frontend further - This is all part of the refactoring to separate server and frontend completely
2021-06-28 16:27:22 +03:00
resolve@1.20.0, resolve@^1.1.6, resolve@^1.1.7, resolve@^1.10.0, resolve@^1.10.1, resolve@^1.19.0, resolve@^1.9.0:
Updated knex-migrator to v3.5.1 no issue - Renovate was being slow again
2021-02-23 18:56:22 +03:00
version "1.20.0"
resolved "https://registry.yarnpkg.com/resolve/-/resolve-1.20.0.tgz#629a013fb3f70755d6f0b7935cc1c2c5378b1975"
integrity sha512-wENBPt4ySzg4ybFQW2TT1zMQucPK95HSh/nq2CFTZVOGut2+pQvSsgtda4d26YrYcr067wjbmzOG8byDPBX63A==
Update dependency knex-migrator to v3.5.0
2020-10-21 15:40:55 +03:00
dependencies:
Updated knex-migrator to v3.5.1 no issue - Renovate was being slow again
2021-02-23 18:56:22 +03:00
is-core-module "^2.2.0"
Update dependency knex-migrator to v3.5.0
2020-10-21 15:40:55 +03:00
path-parse "^1.0.6"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
responselike@^1.0.2:
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/responselike/-/responselike-1.0.2.tgz#918720ef3b631c5642be068f15ade5a46f4ba1e7"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
integrity sha1-kYcg7ztjHFZCvgaPFa3lpG9Loec=
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
lowercase-keys "^1.0.0"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
responselike@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/responselike/-/responselike-2.0.0.tgz#26391bcc3174f750f9a79eacc40a12a5c42d7723"
integrity sha512-xH48u3FTB9VsZw7R+vvgaKeLKzT6jOogbQhEe/jewwnZgzPcnyWui2Av6JpoYZF/91uueC+lqhWqeURw5/qhCw==
dependencies:
lowercase-keys "^2.0.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
restore-cursor@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/restore-cursor/-/restore-cursor-3.1.0.tgz#39f67c54b3a7a58cea5236d95cf0034239631f7e"
integrity sha512-l+sSefzHpj5qimhFSE5a8nufZYAM3sBSVMAPtYkmC+4EH2anSGaEMXSD0izRQbu9nfyQ9y5JrVmp7E8oZrUjvA==
dependencies:
onetime "^5.1.0"
signal-exit "^3.0.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
ret@~0.1.10:
version "0.1.15"
resolved "https://registry.yarnpkg.com/ret/-/ret-0.1.15.tgz#b8a4825d5bdb1fc3f6f53c2bc33f81388681c7bc"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-TTlYpa+OL+vMMNG24xSlQGEJ3B/RzEfUlLct7b5G/ytav+wPrplCpVMFuwzXbkecJrb6IYo1iFb0S9v37754mg==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Lock file maintenance
2021-06-01 18:19:18 +03:00
retry@^0.12.0:
version "0.12.0"
resolved "https://registry.yarnpkg.com/retry/-/retry-0.12.0.tgz#1b42a6266a21f07421d1b0b54b7dc167b01c013b"
integrity sha1-G0KmJmoh8HQh0bC1S33BZ7AcATs=
Added job-manager & wired up shutdown and testmode - Bottom line - we need to manage shutting down gracefully when doing long-running tasks - To achieve that, we're going to use job queues In this commit: - added new @tryghost/job-manager dependency - added a minimal job service, that handles in passing things like logging and (maybe later) config - job service is wired up to server shutdown, so that the queue finishes before the server exits - also added a new job endpoint to testmode so that it's easy to test job behaviour without needing to do real work
2020-08-11 23:26:34 +03:00
reusify@^1.0.4:
version "1.0.4"
resolved "https://registry.yarnpkg.com/reusify/-/reusify-1.0.4.tgz#90da382b1e126efc02146e90845a88db12925d76"
integrity sha512-U9nH88a3fc/ekCF1l0/UP1IosiuIjyTh7hBvXVMHYgVcfGvt897Xguj2UOLDeI5BG2m7/uwyaLVT6fbtCwTyzw==
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
rewire@5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/rewire/-/rewire-5.0.0.tgz#c4e6558206863758f6234d8f11321793ada2dbff"
integrity sha512-1zfitNyp9RH5UDyGGLe9/1N0bMlPQ0WrX0Tmg11kMHBpqwPJI4gfPpP7YngFyLbFmhXh19SToAG0sKKEFcOIJA==
Bump rewire to version 3.0.2 no issue - nothing to adapt for the major jump
2017-11-28 21:22:29 +03:00
dependencies:
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
eslint "^6.8.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency sqlite3 to v5
2021-04-15 16:46:12 +03:00
rimraf@2, rimraf@^2.6.1, rimraf@^2.6.2:
version "2.7.1"
resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-2.7.1.tgz#35797f13a7fdadc566142c29d4f07ccad483e3ec"
integrity sha512-uWjbaKIK3T1OSVptzX7Nl6PvQ3qAGtKEtVRjRuazjfL3Bx5eI409VZSqgND+4UNnmzLVdPj9FqFJNPqBZFve4w==
dependencies:
glob "^7.1.3"
Update dependency grunt to v1.2.1
2020-07-21 19:32:36 +03:00
rimraf@2.6.3:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "2.6.3"
resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-2.6.3.tgz#b2d104fe0d8fb27cf9e0a1cda8262dd3833c6cab"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-mwqeW5XsA2qAejG46gYdENaxXjx9onRNCfn7L0duuP4hCuTIi/QO7PDK07KJfp1d+izWPrzEJDcSqBa0OZQriA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
glob "^7.1.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated `tmp` dependency to v0.2.1 no issue - `tmp` 0.1.0 was broken and I added `tmp` to the Renovate ignore list to stop it creating PRs - https://github.com/TryGhost/Ghost/commit/082160106ae4fbedcf7de99b671d42e001ca2a89 - 0.2.1 is fixed again so we can merge the update and remove it from the list
2021-04-19 16:48:57 +03:00
rimraf@^3.0.0, rimraf@^3.0.2, rimraf@~3.0.2:
Update dependency eslint to v7.15.0
2020-12-07 03:07:07 +03:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-3.0.2.tgz#f1a5402ba6220ad52cc1282bac1ae3aa49fd061a"
integrity sha512-JZkJMZkAGFFPP2YqXZXPbMlMBgsxzE8ILs4lMIX/2o0L9UBw9O/Y3o6wFw/i9YLapcUJWwqbi3kdxIPdC62TIA==
dependencies:
glob "^7.1.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
rimraf@~2.4.0:
version "2.4.5"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-2.4.5.tgz#ee710ce5d93a8fdb856fb5ea8ff0e2d75934b2da"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-7nEM5dk6j9uFb7Xqj/Di11k0sto=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
glob "^6.0.1"
rss@1.2.2:
version "1.2.2"
resolved "https://registry.yarnpkg.com/rss/-/rss-1.2.2.tgz#50a1698876138133a74f9a05d2bdc8db8d27a921"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-UKFpiHYTgTOnT5oF0r3I240nqSE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
mime-types "2.1.13"
xml "1.0.1"
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
run-async@^2.4.0:
version "2.4.1"
resolved "https://registry.yarnpkg.com/run-async/-/run-async-2.4.1.tgz#8440eccf99ea3e70bd409d49aab88e10c189a455"
integrity sha512-tvVnVv01b8c1RrA6Ep7JkStj85Guv/YrMcwqYQnwjsAS2cTmmPGBBjAjpCW7RrSodNSoE2/qg9O4bceNvUuDgQ==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
rxjs@^6.6.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "6.6.7"
resolved "https://registry.yarnpkg.com/rxjs/-/rxjs-6.6.7.tgz#90ac018acabf491bf65044235d5863c4dab804c9"
integrity sha512-hTdwr+7yYNIT5n4AMYp85KA6yw2Va0FLa3Rguvbpa4W3I5xynaBZo41cM3XM+4Q6fRMj3sBYIR1VAmZMXYJvRQ==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
dependencies:
tslib "^1.9.0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
safe-buffer@5.1.2, safe-buffer@~5.1.0, safe-buffer@~5.1.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "5.1.2"
resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.1.2.tgz#991ec69d296e0313747d59bdfd2b745c35f8828d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==
Lock file maintenance
2021-08-16 04:04:05 +03:00
safe-buffer@5.2.1, safe-buffer@>=5.1.0, safe-buffer@^5.0.1, safe-buffer@^5.1.0, safe-buffer@^5.1.2, safe-buffer@^5.2.1, safe-buffer@~5.2.0:
Updated Ignition and @tryghost/errors dependencies no issue - These dependencies needed to be bumped together
2020-05-26 14:51:49 +03:00
version "5.2.1"
resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.2.1.tgz#1eaf9fa9bdb1fdd4ec75f58f9cdb4e6b7827eec6"
integrity sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
safe-json-parse@~1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/safe-json-parse/-/safe-json-parse-1.0.1.tgz#3e76723e38dfdda13c9b1d29a1e07ffee4b30b57"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-PnZyPjjf3aE8mx0poeB//uSzC1c=
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
safe-json-stringify@~1:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/safe-json-stringify/-/safe-json-stringify-1.2.0.tgz#356e44bc98f1f93ce45df14bcd7c01cda86e0afd"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-gH8eh2nZudPQO6TytOvbxnuhYBOvDBBLW52tz5q6X58lJcd/tkmqFR+5Z9adS8aJtURSXWThWy/xJtJwixErvg==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
safe-regex@^1.1.0:
version "1.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/safe-regex/-/safe-regex-1.1.0.tgz#40a3669f3b077d1e943d44629e157dd48023bf2e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-QKNmnzsHfR6UPURinhV91IAjvy4=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
ret "~0.1.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
safe-regex@^2.1.1:
version "2.1.1"
resolved "https://registry.yarnpkg.com/safe-regex/-/safe-regex-2.1.1.tgz#f7128f00d056e2fe5c11e81a1324dd974aadced2"
integrity sha512-rx+x8AMzKb5Q5lQ95Zoi6ZbJqwCLkqi3XuJXp5P3rT8OEc6sZCJG5AE5dU3lsgRr/F4Bs31jSlVN+j5KrsGu9A==
dependencies:
regexp-tree "~0.1.1"
Update dependency @tryghost/job-manager to v0.3.0
2020-11-19 08:21:09 +03:00
safe-timers@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/safe-timers/-/safe-timers-1.1.0.tgz#c58ae8325db8d3b067322f0a4ef3a0cad67aad83"
integrity sha1-xYroMl2407BnMi8KTvOgytZ6rYM=
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
"safer-buffer@>= 2.1.2 < 3", "safer-buffer@>= 2.1.2 < 3.0.0", safer-buffer@^2.0.2, safer-buffer@^2.1.0, safer-buffer@~2.1.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/safer-buffer/-/safer-buffer-2.1.2.tgz#44fa161b0187b9549dd84bb91802f9bd8385cd6a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Update dependency sanitize-html to v2.5.1
2021-09-14 17:56:18 +03:00
sanitize-html@2.5.1:
version "2.5.1"
resolved "https://registry.yarnpkg.com/sanitize-html/-/sanitize-html-2.5.1.tgz#f49998dc54c8180153940440d3a7294b09e4258a"
integrity sha512-hUITPitQk+eFNLtr4dEkaaiAJndG2YE87IOpcfBSL1XdklWgwcNDJdr9Ppe8QKL/C3jFt1xH/Mbj20e0GZQOfg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency sanitize-html to v2
2020-10-21 13:34:09 +03:00
deepmerge "^4.2.2"
escape-string-regexp "^4.0.0"
Update dependency sanitize-html to v2.3.0
2020-12-16 19:11:16 +03:00
htmlparser2 "^6.0.0"
Update dependency sanitize-html to v2
2020-10-21 13:34:09 +03:00
is-plain-object "^5.0.0"
klona "^2.0.3"
Update dependency sanitize-html to v1.27.2
2020-07-29 18:18:07 +03:00
parse-srcset "^1.0.2"
Update dependency sanitize-html to v2
2020-10-21 13:34:09 +03:00
postcss "^8.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
sax@^1.2.4:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.2.4"
resolved "https://registry.yarnpkg.com/sax/-/sax-1.2.4.tgz#2816234e2378bddc4e5354fab5caa895df7100d9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-NqVDv9TpANUjFm0N8uM5GxL36UgKi9/atZw+x7YFnQ8ckwFGKrl4xX4yWtrey3UJm5nP1kUbnYgLopqWNSRhWw==
Update yarn.lock
2017-01-26 21:04:09 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.7.12
2021-03-10 22:11:13 +03:00
saxes@^5.0.1:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "5.0.1"
resolved "https://registry.yarnpkg.com/saxes/-/saxes-5.0.1.tgz#eebab953fa3b7608dbe94e5dadb15c888fa6696d"
integrity sha512-5LBh1Tls8c9xgGjw3QrMwETmTMVk0oFgvrFSvWx62llR2hcEInrKNZ2GZCCuuy2lvWrdl5jhbpeqc5hRYKFOcw==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
xmlchars "^2.2.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update dependency @tryghost/members-api to v0.27.0
2020-08-17 23:04:08 +03:00
section-tests@^1.3.0:
version "1.3.1"
resolved "https://registry.yarnpkg.com/section-tests/-/section-tests-1.3.1.tgz#60c09cc881da75d2921cc5c3487558882461e2cb"
integrity sha512-cZFz5XcvYzdHUCOwwrrSFPA9KZdukGENO7ukOgxpcScZaM8zRMIyR6LRySdgoX0nD7NH+XY85F1pQ7n89CZliw==
dependencies:
"@distributed-systems/callsite" "^1.1.0"
chalk "^1.1.3"
ee-log "^1.1.0"
ee-types "^2.1.4"
glob "^7.1.2"
Lock file maintenance
2021-06-01 18:19:18 +03:00
secure-json-parse@^2.4.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "2.4.0"
resolved "https://registry.yarnpkg.com/secure-json-parse/-/secure-json-parse-2.4.0.tgz#5aaeaaef85c7a417f76271a4f5b0cc3315ddca85"
integrity sha512-Q5Z/97nbON5t/L/sH6mY2EacfjVGwrCcSi5D3btRO2GZ8pf1K1UN7Z9H5J57hjVU2Qzxr1xO+FmBhOvEkzCMmg==
Update dependency ghost-ignition to v4.4.1
2021-01-21 21:16:29 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
secure-keys@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/secure-keys/-/secure-keys-1.0.0.tgz#f0c82d98a3b139a8776a8808050b824431087fca"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8MgtmKOxOah3aogIBQuCRDEIf8o=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
"semver@2 || 3 || 4 || 5", semver@^5.3.0, semver@^5.4.1, semver@^5.5.0, semver@^5.6.0:
version "5.7.1"
resolved "https://registry.yarnpkg.com/semver/-/semver-5.7.1.tgz#a954f931aeba508d307bbf069eff0c01c96116f7"
integrity sha512-sauaDf/PZdVgrLTNYHRtpXa1iRiKcaebiKQ1BJdpQlWH2lCvexQdX55snPFyK7QzpudqbCI0qXFfOasHdyNDGQ==
Lock file maintenance
2021-05-05 18:56:03 +03:00
semver@7.3.5, semver@^7.2.1, semver@^7.3.2, semver@^7.3.4, semver@^7.3.5:
Update dependency semver to v7.3.5
2021-03-23 12:15:11 +03:00
version "7.3.5"
resolved "https://registry.yarnpkg.com/semver/-/semver-7.3.5.tgz#0b621c879348d8998e4b0e4be94b3f12e6018ef7"
integrity sha512-PoeGJYh8HK4BTO/a9Tf6ZG3veo/A7ZVsYrSA6J8ny9nb3B1VrpkuN+z9OE5wfE5p6H4LchYZsegiQgbJD94ZFQ==
dependencies:
lru-cache "^6.0.0"
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
semver@^6.0.0, semver@^6.1.0, semver@^6.1.2, semver@^6.3.0:
Updated semver dependency no issue - required code change for new API
2020-02-24 21:01:53 +03:00
version "6.3.0"
resolved "https://registry.yarnpkg.com/semver/-/semver-6.3.0.tgz#ee0a64c8af5e8ceea67687b133761e1becbd1d3d"
integrity sha512-b39TBaTSfV6yBrapU89p5fKekE2m/NwnDocOVruQFS1/veMgdzuPcnOM34M6CwxW8jH/lxEa5rBoDeUwu5HHTw==
Update dependency sqlite3 to v5
2021-04-15 16:46:12 +03:00
semver@~5.3.0:
version "5.3.0"
resolved "https://registry.yarnpkg.com/semver/-/semver-5.3.0.tgz#9b2ce5d3de02d17c6012ad326aa6b4d0cf54f94f"
integrity sha1-myzl094C0XxgEq0yaqa00M9U+U8=
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
send@0.17.1:
version "0.17.1"
resolved "https://registry.yarnpkg.com/send/-/send-0.17.1.tgz#c1d8b059f7900f7466dd4938bdc44e11ddb376c8"
integrity sha512-BsVKsiGcQMFwT8UxypobUKyv7irCNRHk1T0G680vk88yf6LBByGcZJOTJCrTP2xVN6yI+XjPJcNuE3V4fT9sAg==
dependencies:
debug "2.6.9"
depd "~1.1.2"
destroy "~1.0.4"
encodeurl "~1.0.2"
escape-html "~1.0.3"
etag "~1.8.1"
fresh "0.5.2"
http-errors "~1.7.2"
mime "1.6.0"
ms "2.1.1"
on-finished "~2.3.0"
range-parser "~1.2.1"
statuses "~1.5.0"
Update Test & linting packages
2021-07-05 03:37:17 +03:00
serialize-javascript@6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/serialize-javascript/-/serialize-javascript-6.0.0.tgz#efae5d88f45d7924141da8b5c3a7a7e663fefeb8"
integrity sha512-Qr3TosvguFt8ePWqsvRfrKyQXIiW+nGbYpy8XK24NQHE83caxWt+mIymTT19DGFbNWNLfEwsrkSmN64lVWB9ag==
dependencies:
randombytes "^2.1.0"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
serve-static@1.14.1:
version "1.14.1"
resolved "https://registry.yarnpkg.com/serve-static/-/serve-static-1.14.1.tgz#666e636dc4f010f7ef29970a88a674320898b2f9"
integrity sha512-JMrvUwE54emCYWlTI+hGrGv5I8dEwmco/00EvkzIIsR7MqrHonbD9pO2MOfFnpFntl7ecpZs+3mW+XbQZu9QCg==
dependencies:
encodeurl "~1.0.2"
escape-html "~1.0.3"
parseurl "~1.3.3"
send "0.17.1"
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
set-blocking@~2.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.0.0"
resolved "https://registry.yarnpkg.com/set-blocking/-/set-blocking-2.0.0.tgz#045f9782d011ae9a6803ddd382b24392b3d890f7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-BF+XgtARrppoA93TgrJDkrPYkPc=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
set-value@^2.0.0, set-value@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/set-value/-/set-value-2.0.1.tgz#a18d40530e6f07de4228c7defe4227af8cad005b"
integrity sha512-JxHc1weCN68wRY0fhCoXpyK55m/XPHafOmK4UWD7m2CI14GMcFypt4w/0+NV5f/ZMby2F6S2wwA7fgynh9gWSw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
extend-shallow "^2.0.1"
is-extendable "^0.1.1"
is-plain-object "^2.0.3"
split-string "^3.0.1"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
setprototypeof@1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/setprototypeof/-/setprototypeof-1.1.1.tgz#7e95acb24aa92f5885e0abef5ba131330d4ae683"
integrity sha512-JvdAWfbXeIGaZ9cILp38HntZSFSo3mWg6xGcJJsd+d4aRMOqauag1C63dJfDw7OaMYwEbHMOxEZ1lqVRYP2OAw==
Update dependency @tryghost/image-transform to v1.0.14
2021-09-22 18:34:15 +03:00
sharp@^0.29.0:
version "0.29.1"
resolved "https://registry.yarnpkg.com/sharp/-/sharp-0.29.1.tgz#f60b50f24f399464a24187c86bd2da41aae50b85"
integrity sha512-DpgdAny9TuS+oWCQ7MRS8XyY9x6q1+yW3a5wNx0J3HrGuB/Jot/8WcT+lElHY9iJu2pwtegSGxqMaqFiMhs4rQ==
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
dependencies:
Update dependency @tryghost/image-transform to v1.0.14
2021-09-22 18:34:15 +03:00
color "^4.0.1"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
detect-libc "^1.0.3"
Update dependency @tryghost/image-transform to v1.0.14
2021-09-22 18:34:15 +03:00
node-addon-api "^4.1.0"
prebuild-install "^6.1.4"
Update dependency @tryghost/image-transform to v1.0.11
2021-04-21 11:12:19 +03:00
semver "^7.3.5"
simple-get "^3.1.0"
tar-fs "^2.1.1"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
tunnel-agent "^0.6.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
shebang-command@^1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/shebang-command/-/shebang-command-1.2.0.tgz#44aac65b695b03398968c39f363fee5deafdf1ea"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-RKrGW2lbAzmJaMOfNj/uXer98eo=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
shebang-regex "^1.0.0"
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
shebang-command@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/shebang-command/-/shebang-command-2.0.0.tgz#ccd0af4f8835fbdc265b82461aaf0c36663f34ea"
integrity sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==
dependencies:
shebang-regex "^3.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
shebang-regex@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/shebang-regex/-/shebang-regex-1.0.0.tgz#da42f49740c0b42db2ca9728571cb190c98efea3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-2kL0l0DAtC2yypcoVxyxkMmO/qM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
shebang-regex@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/shebang-regex/-/shebang-regex-3.0.0.tgz#ae16f1644d873ecad843b0307b143362d4c42172"
integrity sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 21:41:16 +03:00
should-equal@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/should-equal/-/should-equal-2.0.0.tgz#6072cf83047360867e68e98b09d71143d04ee0c3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-ZP36TMrK9euEuWQYBig9W55WPC7uo37qzAEmbjHz4gfyuXrEUgF8cUvQVO+w+d3OMfPvSRQJ22lSm8MQJ43LTA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 21:41:16 +03:00
should-type "^1.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 21:41:16 +03:00
should-format@^3.0.3:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "3.0.3"
resolved "https://registry.yarnpkg.com/should-format/-/should-format-3.0.3.tgz#9bfc8f74fa39205c53d38c34d717303e277124f1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-m/yPdPo5IFxT04w01xcwPidxJPE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
should-type "^1.3.0"
should-type-adaptors "^1.0.1"
should-type-adaptors@^1.0.1:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/should-type-adaptors/-/should-type-adaptors-1.1.0.tgz#401e7f33b5533033944d5cd8bf2b65027792e27a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-JA4hdoLnN+kebEp2Vs8eBe9g7uy0zbRo+RMcU0EsNy+R+k049Ki+N5tT5Jagst2g7EAja+euFuoXFCa8vIklfA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
should-type "^1.3.0"
should-util "^1.0.0"
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 21:41:16 +03:00
should-type@^1.3.0, should-type@^1.4.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.4.0"
resolved "https://registry.yarnpkg.com/should-type/-/should-type-1.4.0.tgz#0756d8ce846dfd09843a6947719dfa0d4cff5cf3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-B1bYzoRt/QmEOmlHcZ36DUz/XPM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
should-util@^1.0.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/should-util/-/should-util-1.0.1.tgz#fb0d71338f532a3a149213639e2d32cbea8bcb28"
integrity sha512-oXF8tfxx5cDk8r2kYqlkUJzZpDBqVY/II2WhvU0n9Y3XYvAYRmeaf1PvvIvTgPnv4KJ+ES5M0PyDq5Jp+Ygy2g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🐛 Fixed eslint installation error when using node version < 8.10 and < 6.14 closes #10420 - bumped brute-knex > error eslint@5.12.1: The engine “node” is incompatible with this module. Expected version “^6.14.0 || ^8.10.0 || >=9.10.0”. Got “8.9.1”
2019-01-27 20:29:40 +03:00
should@13.2.3:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "13.2.3"
resolved "https://registry.yarnpkg.com/should/-/should-13.2.3.tgz#96d8e5acf3e97b49d89b51feaa5ae8d07ef58f10"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-ggLesLtu2xp+ZxI+ysJTmNjh2U0TsC+rQ/pfED9bUZZ4DKefP27D+7YJVVTvKsmjLpIi9jAa7itwDGkDDmt1GQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 21:41:16 +03:00
should-equal "^2.0.0"
should-format "^3.0.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
should-type "^1.4.0"
should-type-adaptors "^1.0.1"
should-util "^1.0.0"
Lock file maintenance
2021-05-05 18:56:03 +03:00
side-channel@^1.0.4:
version "1.0.4"
resolved "https://registry.yarnpkg.com/side-channel/-/side-channel-1.0.4.tgz#efce5c8fdc104ee751b25c58d4290011fa5ea2cf"
integrity sha512-q5XPytqFEIKHkGdiMIrY10mvLRvnQh42/+GoBlFW3b2LXLE2xxJpZFdm94we0BaoV3RwJyGqg5wS7epxTv0Zvw==
dependencies:
call-bind "^1.0.0"
get-intrinsic "^1.0.2"
object-inspect "^1.9.0"
Respected peer dependency for bookshelf no issue - need to use knex 0.14.x for now - Bookshelf already bumped the peer dependency in master, but was not released yet
2019-01-22 10:58:28 +03:00
sigmund@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/sigmund/-/sigmund-1.0.1.tgz#3ff21f198cad2175f9f3b781853fd94d0d19b590"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-P/IfGYytIXX587eBhT/ZTQ0ZtZA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
signal-exit@^3.0.0, signal-exit@^3.0.2:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "3.0.4"
resolved "https://registry.yarnpkg.com/signal-exit/-/signal-exit-3.0.4.tgz#366a4684d175b9cab2081e3681fda3747b6c51d7"
integrity sha512-rqYhcAnZ6d/vTPGghdrw7iumdcbXpsk1b8IG/rz+VWV51DM0p7XCtMoJ3qhPLIbp3tvyt3pKRbaaEMZYpHto8Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
simple-concat@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/simple-concat/-/simple-concat-1.0.1.tgz#f46976082ba35c2263f1c8ab5edfe26c41c9552f"
integrity sha512-cSFtAPtRhljv69IK0hTVZQ+OfE9nePi/rtJmw5UjHeVyVroEqJXP1sFztKUy1qU+xvz3u/sfYJLa947b7nAN2Q==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Switched to extracted `@tryghost/mobiledoc-dom-renderer` package no issue - moved `mobiledoc.renderers.mobiledocHtmlRenderer` to `mobiledoc.mobiledocHtmlRenderer` so that it's easier for the getter to access the parent objects getters - removed all tests and dependencies that now live in @tryghost/mobiledoc-dom-renderer - kept the `mobiledocHtmlRenderer` test because that's testing that we've correctly wired up our cards and atoms and the output is what we expect
2020-04-08 20:21:15 +03:00
simple-dom@^1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/simple-dom/-/simple-dom-1.4.0.tgz#78ad1f41b8b70d16f82b7e0d458441c9262565b7"
integrity sha512-TnBPkmOyjdaOqyBMb4ick+n8c0Xv9Iwg1PykFV7hz9Se3UCiacTbRb+25cPmvozFNJLBUNvUzX/KsPfXF14ivA==
dependencies:
"@simple-dom/document" "^1.4.0"
"@simple-dom/interface" "^1.4.0"
"@simple-dom/parser" "^1.4.0"
"@simple-dom/serializer" "^1.4.0"
"@simple-dom/void-map" "^1.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency @tryghost/image-transform to v1.0.11
2021-04-21 11:12:19 +03:00
simple-get@^3.0.3, simple-get@^3.1.0:
Update dependency sharp to v0.23.1
2019-09-30 03:35:55 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/simple-get/-/simple-get-3.1.0.tgz#b45be062435e50d159540b576202ceec40b9c6b3"
integrity sha512-bCR6cP+aTdScaQCnQKbPKtJOKDp/hj9EDLJo3Nw4y1QksqaovlW/bnptB6/c1e+qmNIDHRK+oXFDdEqBT8WzUA==
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
dependencies:
Update dependency sharp to v0.23.1
2019-09-30 03:35:55 +03:00
decompress-response "^4.2.0"
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
once "^1.3.1"
simple-concat "^1.0.0"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
simple-swizzle@^0.2.2:
version "0.2.2"
resolved "https://registry.yarnpkg.com/simple-swizzle/-/simple-swizzle-0.2.2.tgz#a4da6b635ffcccca33f70d17cb92592de95e557a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-pNprY1/8zMoz9w0Xy5JZLeleVXo=
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
dependencies:
is-arrayish "^0.3.1"
Update dependency sinon to v11.1.2
2021-07-27 15:52:52 +03:00
sinon@11.1.2:
version "11.1.2"
resolved "https://registry.yarnpkg.com/sinon/-/sinon-11.1.2.tgz#9e78850c747241d5c59d1614d8f9cbe8840e8674"
integrity sha512-59237HChms4kg7/sXhiRcUzdSkKuydDeTiamT/jesUVHshBgL8XAmhgFo0GfK6RruMDM/iRSij1EybmMog9cJw==
Update dependency sinon to v11
2021-05-25 00:44:33 +03:00
dependencies:
"@sinonjs/commons" "^1.8.3"
Update dependency sinon to v11.1.2
2021-07-27 15:52:52 +03:00
"@sinonjs/fake-timers" "^7.1.2"
Update dependency sinon to v11
2021-05-25 00:44:33 +03:00
"@sinonjs/samsam" "^6.0.2"
diff "^5.0.0"
Update dependency sinon to v11.1.0
2021-05-25 17:14:19 +03:00
nise "^5.1.0"
Update dependency sinon to v11.1.1
2021-05-26 18:58:01 +03:00
supports-color "^7.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
slice-ansi@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/slice-ansi/-/slice-ansi-2.1.0.tgz#cacd7693461a637a5788d92a7dd4fba068e81636"
integrity sha512-Qu+VC3EwYLldKa1fCxuuvULvSJOKEgk9pi8dZeCVK7TqBfUNTH4sFkk4joj8afVSfAYgJoSOetjx9QWOJ5mYoQ==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
ansi-styles "^3.2.0"
astral-regex "^1.0.0"
is-fullwidth-code-point "^2.0.0"
Update dependency eslint to v7.16.0
2020-12-19 02:06:06 +03:00
slice-ansi@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/slice-ansi/-/slice-ansi-4.0.0.tgz#500e8dd0fd55b05815086255b3195adf2a45fe6b"
integrity sha512-qMCMfhY040cVHT43K9BFygqYbUPFZKHOg7K73mtTWJRb8pyP3fzf4Ixd5SzdEJQ6MRUg/WBnOLxghZtKKurENQ==
dependencies:
ansi-styles "^4.0.0"
astral-regex "^2.0.0"
is-fullwidth-code-point "^3.0.0"
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
slick@^1.12.2:
version "1.12.2"
resolved "https://registry.yarnpkg.com/slick/-/slick-1.12.2.tgz#bd048ddb74de7d1ca6915faa4a57570b3550c2d7"
integrity sha1-vQSN23TefRymkV+qSldXCzVQwtc=
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
smart-buffer@^4.1.0:
Lock file maintenance
2021-08-09 03:03:02 +03:00
version "4.2.0"
resolved "https://registry.yarnpkg.com/smart-buffer/-/smart-buffer-4.2.0.tgz#6e1d71fa4f18c05f7d0ff216dd16a481d0e8d9ae"
integrity sha512-94hK0Hh8rPqQl2xXc3HsaBoOXKV20MToPkcXvwbISWLEs+64sBq5kFgn2kJDHb1Pry9yrP0dxrCI9RRci7RXKg==
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
smartquotes@~2.3.2:
version "2.3.2"
resolved "https://registry.yarnpkg.com/smartquotes/-/smartquotes-2.3.2.tgz#fb1630c49ba04e57446e1a97dc10d590072af4a6"
integrity sha512-0R6YJ5hLpDH4mZR7N5eZ12oCMLspvGOHL9A9SEm2e3b/CQmQidekW4SWSKEmor/3x6m3NCBBEqLzikcZC9VJNQ==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
smtp-connection@2.12.0:
version "2.12.0"
resolved "https://registry.yarnpkg.com/smtp-connection/-/smtp-connection-2.12.0.tgz#d76ef9127cb23c2259edb1e8349c2e8d5e2d74c1"
integrity sha1-1275EnyyPCJZ7bHoNJwujV4tdME=
dependencies:
httpntlm "1.6.1"
nodemailer-shared "1.1.0"
Update dependency eslint-plugin-ghost to v1.0.1
2020-03-25 21:31:55 +03:00
snake-case@^3.0.3:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "3.0.4"
resolved "https://registry.yarnpkg.com/snake-case/-/snake-case-3.0.4.tgz#4f2bbd568e9935abdfd593f34c691dadb49c452c"
integrity sha512-LAOh4z89bGQvl9pFfNF8V146i7o7/CqFPbqzYgP+yYzDIDeS9HaNFtXABamRW+AQzEVODcvE79ljJ+8a9YSdMg==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
dependencies:
Lock file maintenance
2021-05-05 18:56:03 +03:00
dot-case "^3.0.4"
tslib "^2.0.3"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
snapdragon-node@^2.0.1:
version "2.1.1"
resolved "https://registry.yarnpkg.com/snapdragon-node/-/snapdragon-node-2.1.1.tgz#6c175f86ff14bdb0724563e8f3c1b021a286853b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-O27l4xaMYt/RSQ5TR3vpWCAB5Kb/czIcqUFOM/C4fYcLnbZUc1PkjTAMjof2pBWaSTwOUd6qUHcFGVGj7aIwnw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
define-property "^1.0.0"
isobject "^3.0.0"
snapdragon-util "^3.0.1"
snapdragon-util@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/snapdragon-util/-/snapdragon-util-3.0.1.tgz#f956479486f2acd79700693f6f7b805e45ab56e2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-mbKkMdQKsjX4BAL4bRYTj21edOf8cN7XHdYUJEe+Zn99hVEYcMvKPct1IqNe7+AZPirn8BCDOQBHQZknqmKlZQ==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
kind-of "^3.2.0"
snapdragon@^0.8.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "0.8.2"
resolved "https://registry.yarnpkg.com/snapdragon/-/snapdragon-0.8.2.tgz#64922e7c565b0e14204ba1aa7d6964278d25182d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-FtyOnWN/wCHTVXOMwvSv26d+ko5vWlIDD6zoUJ7LW8vh+ZBC8QdljveRP+crNrtBwioEUWy/4dMtbBjA4ioNlg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
base "^0.11.1"
debug "^2.2.0"
define-property "^0.2.5"
extend-shallow "^2.0.1"
map-cache "^0.2.2"
source-map "^0.5.6"
source-map-resolve "^0.5.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
use "^3.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
socks-proxy-agent@^4.0.1:
version "4.0.2"
resolved "https://registry.yarnpkg.com/socks-proxy-agent/-/socks-proxy-agent-4.0.2.tgz#3c8991f3145b2799e70e11bd5fbc8b1963116386"
integrity sha512-NT6syHhI9LmuEMSK6Kd2V7gNv5KFZoLE7V5udWmn0de+3Mkj3UMA/AJPLyeNUVmElCurSHtUdM3ETpR3z770Wg==
dependencies:
agent-base "~4.2.1"
socks "~2.3.2"
Lock file maintenance
2021-06-01 18:19:18 +03:00
socks-proxy-agent@^5.0.0:
Lock file maintenance
2021-07-05 04:25:22 +03:00
version "5.0.1"
resolved "https://registry.yarnpkg.com/socks-proxy-agent/-/socks-proxy-agent-5.0.1.tgz#032fb583048a29ebffec2e6a73fca0761f48177e"
integrity sha512-vZdmnjb9a2Tz6WEQVIurybSwElwPxMZaIc7PzqbJTrezcKNznv6giT7J7tZDZ1BojVaa1jvO/UiUdhDVB0ACoQ==
Lock file maintenance
2021-06-01 18:19:18 +03:00
dependencies:
Lock file maintenance
2021-07-05 04:25:22 +03:00
agent-base "^6.0.2"
Lock file maintenance
2021-06-01 18:19:18 +03:00
debug "4"
socks "^2.3.3"
socks@^2.3.3:
version "2.6.1"
resolved "https://registry.yarnpkg.com/socks/-/socks-2.6.1.tgz#989e6534a07cf337deb1b1c94aaa44296520d30e"
integrity sha512-kLQ9N5ucj8uIcxrDwjm0Jsqk06xdpBjGNQtpXy4Q8/QY2k+fY7nZH8CARy+hkbG+SGAovmzzuauCpBlb8FrnBA==
dependencies:
ip "^1.1.5"
smart-buffer "^4.1.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
socks@~2.3.2:
version "2.3.3"
resolved "https://registry.yarnpkg.com/socks/-/socks-2.3.3.tgz#01129f0a5d534d2b897712ed8aceab7ee65d78e3"
integrity sha512-o5t52PCNtVdiOvzMry7wU4aOqYWL0PeCXRWBEiJow4/i/wr+wpsJQ9awEu1EonLIqsfGd5qSgDdxEOvCdmBEpA==
dependencies:
ip "1.1.5"
smart-buffer "^4.1.0"
Lock file maintenance
2021-06-01 18:19:18 +03:00
source-map-js@^0.6.2:
version "0.6.2"
resolved "https://registry.yarnpkg.com/source-map-js/-/source-map-js-0.6.2.tgz#0bb5de631b41cfbda6cfba8bd05a80efdfd2385e"
integrity sha512-/3GptzWzu0+0MBQFrDKzw/DvvMTUORvgY6k6jd/VS6iCR4RDTKWH6v6WPwQoUO8667uQEf9Oe38DxAYWY5F/Ug==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
source-map-resolve@^0.5.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "0.5.3"
resolved "https://registry.yarnpkg.com/source-map-resolve/-/source-map-resolve-0.5.3.tgz#190866bece7553e1f8f267a2ee82c606b5509a1a"
integrity sha512-Htz+RnsXWk5+P2slx5Jh3Q66vhQj1Cllm0zvnaY98+NFx+Dv2CF/f5O/t8x+KaNdrdIAsruNzoh/KpialbqAnw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
atob "^2.1.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
decode-uri-component "^0.2.0"
resolve-url "^0.2.1"
source-map-url "^0.4.0"
urix "^0.1.0"
source-map-url@^0.4.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "0.4.1"
resolved "https://registry.yarnpkg.com/source-map-url/-/source-map-url-0.4.1.tgz#0af66605a745a5a2f91cf1bbf8a7afbc283dec56"
integrity sha512-cPiFOTLUKvJFIg4SKVScy4ilPPW6rFgMgfuZJPNoDuMs3nC1HbMUycBoJw77xFIp6z1UJQJOfx6C9GMH80DiTw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
source-map@^0.5.0, source-map@^0.5.6:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "0.5.7"
resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.5.7.tgz#8a039d2d1021d22d1ea14c80d8ea468ba2ef3fcc"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-igOdLRAh0i0eoUyA2OpGi6LvP8w=
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
source-map@^0.6.1, source-map@~0.6.1:
version "0.6.1"
resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.6.1.tgz#74722af32e9614e9c287a8d0bbde48b5e2f1a263"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
source-map@^0.7.3:
version "0.7.3"
resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.7.3.tgz#5302f8169031735226544092e64981f751750383"
integrity sha512-CkCj6giN3S+n9qrYiBTX5gystlENnRW5jZeNLHpe6aue+SrHcG5VYwujhW9s4dY31mEGsxBDrHR6oI69fTXsaQ==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
spdx-correct@^3.0.0:
version "3.1.1"
resolved "https://registry.yarnpkg.com/spdx-correct/-/spdx-correct-3.1.1.tgz#dece81ac9c1e6713e5f7d1b6f17d468fa53d89a9"
integrity sha512-cOYcUWwhCuHCXi49RhFRCyJEK3iPj1Ziz9DpViV3tbZOwXD49QzIN3MpOLJNxh2qwq2lJJZaKMVw9qNi4jTC0w==
dependencies:
spdx-expression-parse "^3.0.0"
spdx-license-ids "^3.0.0"
spdx-exceptions@^2.1.0:
version "2.3.0"
resolved "https://registry.yarnpkg.com/spdx-exceptions/-/spdx-exceptions-2.3.0.tgz#3f28ce1a77a00372683eade4a433183527a2163d"
integrity sha512-/tTrYOC7PPI1nUAgx34hUpqXuyJG+DTHJTnIULG4rDygi4xu/tfgmq1e1cIRwRzwZgo4NLySi+ricLkZkw4i5A==
spdx-expression-parse@^3.0.0:
version "3.0.1"
resolved "https://registry.yarnpkg.com/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz#cf70f50482eefdc98e3ce0a6833e4a53ceeba679"
integrity sha512-cbqHunsQWnJNE6KhVSMsMeH5H/L9EpymbzqTQ3uLwNCLZ1Q481oWaofqH7nO6V07xlXwY6PhQdQ2IedWx/ZK4Q==
dependencies:
spdx-exceptions "^2.1.0"
spdx-license-ids "^3.0.0"
spdx-license-ids@^3.0.0:
Lock file maintenance
2021-08-16 04:04:05 +03:00
version "3.0.10"
resolved "https://registry.yarnpkg.com/spdx-license-ids/-/spdx-license-ids-3.0.10.tgz#0d9becccde7003d6c658d487dd48a32f0bf3014b"
integrity sha512-oie3/+gKf7QtpitB0LYLETe+k8SifzsX4KixvpOsbI6S0kRiRQ5MKOio8eMSAKQ17N06+wdEOXRiId+zOxo0hA==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
split-string@^3.0.1, split-string@^3.0.2:
version "3.1.0"
resolved "https://registry.yarnpkg.com/split-string/-/split-string-3.1.0.tgz#7cb09dda3a86585705c64b39a6466038682e8fe2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-NzNVhJDYpwceVVii8/Hu6DKfD2G+NrQHlS/V/qgv763EYudVwEcMQNxd2lh+0VrUByXN/oJkl5grOhYWvQUYiw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
extend-shallow "^3.0.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
sprintf-js@^1.0.3:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/sprintf-js/-/sprintf-js-1.1.2.tgz#da1765262bf8c0f571749f2ad6c26300207ae673"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-VE0SOVEHCk7Qc8ulkWw3ntAzXuqf7S2lvwQaDLRnUeIEaKNQJzV6BwmLKhOqT61aGhfUMrXeaBk+oDGCzvhcug==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
sprintf-js@~1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.3"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/sprintf-js/-/sprintf-js-1.0.3.tgz#04e6926f662895354f3dd015203633b857297e2c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-BOaSb2YolTVPPdAVIDYzuFcpfiw=
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 19:43:08 +03:00
Update dependency sqlite3 to v5
2021-04-15 16:46:12 +03:00
sqlite3@5.0.2:
version "5.0.2"
resolved "https://registry.yarnpkg.com/sqlite3/-/sqlite3-5.0.2.tgz#00924adcc001c17686e0a6643b6cbbc2d3965083"
integrity sha512-1SdTNo+BVU211Xj1csWa8lV6KM0CtucDwRyA0VHl91wEH1Mgh7RxUpI4rVvG7OhHrzCSGaVyW5g8vKvlrk9DJA==
dependencies:
node-addon-api "^3.0.0"
node-pre-gyp "^0.11.0"
optionalDependencies:
node-gyp "3.x"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
sqlstring@2.3.1:
version "2.3.1"
resolved "https://registry.yarnpkg.com/sqlstring/-/sqlstring-2.3.1.tgz#475393ff9e91479aea62dcaf0ca3d14983a7fb40"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-R1OT/56RR5rqYtyvDKPRSYOn+0A=
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
sshpk@^1.7.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.16.1"
resolved "https://registry.yarnpkg.com/sshpk/-/sshpk-1.16.1.tgz#fb661c0bef29b39db40769ee39fa70093d6f6877"
integrity sha512-HXXqVUq7+pcKeLqqZj6mHFUMvXtOJt1uoUx09pFW6011inTMxqI8BA8PM95myrIyyKwdnzjdFjLiE6KBPVtJIg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
asn1 "~0.2.3"
assert-plus "^1.0.0"
bcrypt-pbkdf "^1.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dashdash "^1.12.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ecc-jsbn "~0.1.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
getpass "^0.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
jsbn "~0.1.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
safer-buffer "^2.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
tweetnacl "~0.14.0"
Lock file maintenance
2021-06-01 18:19:18 +03:00
ssri@^8.0.0, ssri@^8.0.1:
version "8.0.1"
resolved "https://registry.yarnpkg.com/ssri/-/ssri-8.0.1.tgz#638e4e439e2ffbd2cd289776d5ca457c4f51a2af"
integrity sha512-97qShzy1AiyxvPNIkLWoGua7xoQzzPjQ0HAH4B0rWKo7SZ6USuPcrUiAFrws0UH8RrbWmgq3LMTObhPIHbbBeQ==
dependencies:
minipass "^3.1.1"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
stable@^0.1.8:
version "0.1.8"
resolved "https://registry.yarnpkg.com/stable/-/stable-0.1.8.tgz#836eb3c8382fe2936feaf544631017ce7d47a3cf"
integrity sha512-ji9qxRnOVfcuLDySj9qzhGSEFVobyt1kIOSkj1qZzYLzq7Tos/oUUWvotUPQLlrsidqsK6tBH89Bc9kL5zHA6w==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
state-toggle@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/state-toggle/-/state-toggle-1.0.3.tgz#e123b16a88e143139b09c6852221bc9815917dfe"
integrity sha512-d/5Z4/2iiCnHw6Xzghyhb+GcmF89bxwgXG60wjIiZaxnymbyOmI8Hk4VqHXiVVp6u2ysaskFfXg3ekCj4WNftQ==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
Update dependency jsonpath to v1.0.2
2019-07-02 13:28:29 +03:00
static-eval@2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/static-eval/-/static-eval-2.0.2.tgz#2d1759306b1befa688938454c546b7871f806a42"
integrity sha512-N/D219Hcr2bPjLxPiV+TQE++Tsmrady7TqAJugLy7Xk1EumfDWS/f5dtBbkRCGE7wKKXuYockQoj8Rm2/pVKyg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump jsonpath to version 1.0.0 no issue - major bump - we only use jsonpath inside the `get` helper - the functionality still works as expected - includes security fix, see https://github.com/dchester/jsonpath/commit/98464aa5fea65bad09564a5632bad72e31736244
2017-10-31 14:21:48 +03:00
escodegen "^1.8.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
static-extend@^0.1.1:
version "0.1.2"
resolved "https://registry.yarnpkg.com/static-extend/-/static-extend-0.1.2.tgz#60809c39cbff55337226fd5e0b520f341f1fb5c6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-YICcOcv/VTNyJv1eC1IPNB8ftcY=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
define-property "^0.2.5"
object-copy "^0.1.0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
"statuses@>= 1.2.1 < 2", "statuses@>= 1.5.0 < 2", statuses@~1.5.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "1.5.0"
resolved "https://registry.yarnpkg.com/statuses/-/statuses-1.5.0.tgz#161c7dac177659fd9811f43771fa99381478628c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Fhx9rBd2Wf2YEfQ3cfqZOBR4Yow=
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
stealthy-require@^1.1.1:
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/stealthy-require/-/stealthy-require-1.1.1.tgz#35b09875b4ff49f26a777e509b3090a3226bf24b"
integrity sha1-NbCYdbT/SfJqd35QmzCQoyJr8ks=
Added stoppable for graceful shutdown of requests - stopppable is a dependency that handles closing connections properly, which server.close does not - active connections are allowed to complete what they are doing - idle connections are closed - no new connections are allowed - we call stoppable in stop() instead of server.close so that idle connections don't hold the server open - calling await stop() from shutdown then ensures that we have a consistent experience of stop - all together this allows ghost to shutdown gracefully when there are long-running requests - @TODO: handle graceful shutdown of long-running processes - @TODO: consider do we need to send 503s whilst the server is shutting down?
2020-08-10 13:42:31 +03:00
stoppable@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/stoppable/-/stoppable-1.1.0.tgz#32da568e83ea488b08e4d7ea2c3bcc9d75015d5b"
integrity sha512-KXDYZ9dszj6bzvnEMRYvxgeTHU74QBFL54XKtP3nyMuJ81CFYtABZ3bAzL2EdFUaEwJOBOgENyFj3R7oTzDyyw==
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
stream-buffers@^3.0.2:
version "3.0.2"
resolved "https://registry.yarnpkg.com/stream-buffers/-/stream-buffers-3.0.2.tgz#5249005a8d5c2d00b3a32e6e0a6ea209dc4f3521"
integrity sha512-DQi1h8VEBA/lURbSwFtEHnSTb9s2/pwLEaFuNhXwy1Dx3Sa0lOuYT2yNUr4/j2fs8oCAMANtrZ5OrPZtyVs3MQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
stream-parser@~0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/stream-parser/-/stream-parser-0.3.1.tgz#1618548694420021a1182ff0af1911c129761773"
integrity sha1-FhhUhpRCACGhGC/wrxkRwSl2F3M=
dependencies:
debug "2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
streamsearch@0.1.2:
version "0.1.2"
resolved "https://registry.yarnpkg.com/streamsearch/-/streamsearch-0.1.2.tgz#808b9d0e56fc273d809ba57338e929919a1a9f1a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-gIudDlb8Jz2Am6VzOOkpkZoanxo=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added `yarn test:slow` tool to show slow tests - We have a lot of tests, so it can be hard to see if any are problematic - We have a problem with some tests being too slow, this highlights these in particular - Very slow tests that take seconds are not really unit tests, we should look for different ways to run these - Also we should tailor our mocha settings more, so that we have more lenient settings for acceptance/regression tests but not for unit tests - Note: You have to wait for all tests to run to see the output
2021-07-05 12:42:27 +03:00
string-length@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/string-length/-/string-length-1.0.1.tgz#56970fb1c38558e9e70b728bf3de269ac45adfac"
integrity sha1-VpcPscOFWOnnC3KL894mmsRa36w=
dependencies:
strip-ansi "^3.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
string-template@~0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/string-template/-/string-template-0.2.1.tgz#42932e598a352d01fc22ec3367d9d84eec6c9add"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-QpMuWYo1LQH8IuwzZ9nYTuxsmt0=
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
string-width@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/string-width/-/string-width-1.0.2.tgz#118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-EYvfW4zcUaKn5w0hHgfisLmxB9M=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
code-point-at "^1.0.0"
is-fullwidth-code-point "^1.0.0"
strip-ansi "^3.0.0"
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
"string-width@^1.0.2 || 2":
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/string-width/-/string-width-2.1.1.tgz#ab93f27a8dc13d28cac815c462143a6d9012ae9e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-nOqH59deCq9SRHlxq1Aw85Jnt4w6KvLKqWVik6oA9ZklXLNIOlqg4F2yrT1MVaTjAqvVwdfeZ7w7aCvJD7ugkw==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
is-fullwidth-code-point "^2.0.0"
strip-ansi "^4.0.0"
Lock file maintenance
2021-05-05 18:56:03 +03:00
string-width@^3.0.0:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/string-width/-/string-width-3.1.0.tgz#22767be21b62af1081574306f69ac51b62203961"
integrity sha512-vafcv6KjVZKSgz06oM/H6GDBrAtz8vdhQakGjFIvNrHA6y3HCF1CInLy+QLq8dTJPQ1b+KDUqDFctkdRW44e1w==
dependencies:
emoji-regex "^7.0.1"
is-fullwidth-code-point "^2.0.0"
strip-ansi "^5.1.0"
Update dependency nconf to v0.11.0
2020-11-25 12:06:19 +03:00
string-width@^4.1.0, string-width@^4.2.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "4.2.2"
resolved "https://registry.yarnpkg.com/string-width/-/string-width-4.2.2.tgz#dafd4f9559a7585cfba529c6a0a4f73488ebd4c5"
integrity sha512-XBJbT3N4JhVumXE0eoLU9DCjcaF92KLNqTmFCnG1pf8duUxFGwtP6AD6nkjw9a3IdiRtL3E2w3JDiE/xi3vOeA==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
dependencies:
emoji-regex "^8.0.0"
is-fullwidth-code-point "^3.0.0"
strip-ansi "^6.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
string_decoder@0.10, string_decoder@~0.10.x:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.10.31"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-0.10.31.tgz#62e203bc41766c6c28c9fc84301dab1c5310fa94"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-YuIDvEF2bGwoyfyEMB2rHFMQ+pQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
string_decoder@^1.1.1:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-1.3.0.tgz#42f114594a46cf1a8e30b0a84f56c78c3edac21e"
integrity sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
dependencies:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
safe-buffer "~5.2.0"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
string_decoder@~1.1.1:
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
version "1.1.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-1.1.1.tgz#9cf1611ba62685d7030ae9e4ba34149c3af03fc8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
dependencies:
safe-buffer "~5.1.0"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
stringify-entities@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/stringify-entities/-/stringify-entities-2.0.0.tgz#fa7ca6614b355fb6c28448140a20c4ede7462827"
integrity sha512-fqqhZzXyAM6pGD9lky/GOPq6V4X0SeTAFBl0iXb/BzOegl40gpf/bV3QQP7zULNYvjr6+Dx8SCaDULjVoOru0A==
dependencies:
character-entities-html4 "^1.0.0"
character-entities-legacy "^1.0.0"
is-alphanumerical "^1.0.0"
is-decimal "^1.0.2"
is-hexadecimal "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
strip-ansi@^3.0.0, strip-ansi@^3.0.1:
version "3.0.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-3.0.1.tgz#6a385fb8853d952d5ff05d0e8aaf94278dc63dcf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ajhfuIU9lS1f8F0Oiq+UJ43GPc8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
ansi-regex "^2.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
strip-ansi@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-4.0.0.tgz#a8479022eb1ac368a871389b635262c505ee368f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-qEeQIusaw2iocTibY1JixQXuNo8=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
ansi-regex "^3.0.0"
Update Test & linting packages
2019-08-16 22:07:23 +03:00
strip-ansi@^5.0.0, strip-ansi@^5.1.0, strip-ansi@^5.2.0:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
version "5.2.0"
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-5.2.0.tgz#8c9a536feb6afc962bdfa5b104a5091c1ad9c0ae"
integrity sha512-DuRs1gKbBqsMKIZlrffwlug8MHkcnpjs5VPmL1PAh+mA30U0DTotfDZ0d2UUsXpPmPmMMJ6W773MaA3J+lbiWA==
dependencies:
ansi-regex "^4.1.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
strip-ansi@^6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-6.0.0.tgz#0b1571dd7669ccd4f3e06e14ef1eed26225ae532"
integrity sha512-AuvKTrTfQNYNIctbR1K/YGTR1756GycPsg7b9bdV9Duqur4gv6aKqHXah67Z8ImS7WEz5QVcOtlfW2rZEugt6w==
dependencies:
ansi-regex "^5.0.0"
Update dependency mocha to v8.2.0
2020-10-17 00:23:19 +03:00
strip-json-comments@3.1.1, strip-json-comments@^3.0.1, strip-json-comments@^3.1.0, strip-json-comments@^3.1.1:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "3.1.1"
resolved "https://registry.yarnpkg.com/strip-json-comments/-/strip-json-comments-3.1.1.tgz#31f1281b3832630434831c310c01cccda8cbe006"
integrity sha512-6fPc+R4ihwqP6N/aIv2f1gMH8lOVtWQHoqC4yK6oSDVVocumAsfCqjkXnqiYMhmMwS/mEHLp7Vehlt3ql6lEig==
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
Update dependency grunt-mocha-cli to v7
2020-12-03 01:43:54 +03:00
strip-json-comments@~2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/strip-json-comments/-/strip-json-comments-2.0.1.tgz#3c531942e908c2697c0ec344858c286c7ca0a60a"
integrity sha1-PFMZQukIwml8DsNEhYwobHygpgo=
Added member analytics events handling refs https://github.com/TryGhost/Team/issues/1064 refs https://github.com/TryGhost/Team/issues/1056 refs https://github.com/TryGhost/Team/issues/1054 refs https://github.com/TryGhost/Team/issues/1055 - adds handling for new member analytic events including new ingress endpoint - introduces member-analytics packages and code
2021-09-22 15:50:56 +03:00
stripe@^8.174.0:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "8.176.0"
resolved "https://registry.yarnpkg.com/stripe/-/stripe-8.176.0.tgz#2f4980ab49acbfe6d67ecaddd54c05e20de9532c"
integrity sha512-0KCDo8TWFgeNWU7cPaqdjO2u2OSth0cmWYZmA7xsuxRCk7/lgWbJ/UbeSphx74cCIjFCmGuzDoNuNxqon9lEbg==
Added initial subscription support with stripe to Members API (#10460) These changes introduce a new "service" to the members api, which handles getting and creating subscriptions. This is wired up to get subscription information when creating tokens, and attaching information to the token, so that the Content API can allow/deny access. Behind the subscription service we have a Stripe "payment processor", this holds the logic for creating subscriptions etc... in Stripe. The logic for getting items out of stripe uses a hash of the relevant data as the id to search for, this allows us to forgo keeping stripe data in a db, so that this feature can get out quicker.
2019-02-07 12:41:39 +03:00
dependencies:
Bumped `@tryghost/members-api` to 1.3.0 refs https://github.com/TryGhost/Team/issues/619 - Bumps `@tryghost/members-api` to `1.3.0` which adds a one-off migration to populate missing stripe prices and products - Bumps patch versions on `@trghost/members-ssr` and `@tryghost/magic-link` to 1.02
2021-04-20 15:02:07 +03:00
"@types/node" ">=8.1.0"
Update dependency stripe to v7
2019-07-02 03:44:07 +03:00
qs "^6.6.0"
Added initial subscription support with stripe to Members API (#10460) These changes introduce a new "service" to the members api, which handles getting and creating subscriptions. This is wired up to get subscription information when creating tokens, and attaching information to the token, so that the Content API can allow/deny access. Behind the subscription service we have a Stripe "payment processor", this holds the logic for creating subscriptions etc... in Stripe. The logic for getting items out of stripe uses a hash of the relevant data as the id to search for, this allows us to forgo keeping stripe data in a db, so that this feature can get out quicker.
2019-02-07 12:41:39 +03:00
Update dependency cssnano to v5.0.3
2021-05-21 11:10:20 +03:00
stylehacks@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/stylehacks/-/stylehacks-5.0.1.tgz#323ec554198520986806388c7fdaebc38d2c06fb"
integrity sha512-Es0rVnHIqbWzveU1b24kbw92HsebBepxfcqe5iix7t9j0PQqhs0IxXVXv0pY2Bxa08CgMkzD6OWql7kbGOuEdA==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
dependencies:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
browserslist "^4.16.0"
postcss-selector-parser "^6.0.4"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
Update dependency supertest to v6.1.0
2021-01-15 20:09:41 +03:00
superagent@^6.1.0:
Update dependency supertest to v5
2020-09-25 16:36:48 +03:00
version "6.1.0"
resolved "https://registry.yarnpkg.com/superagent/-/superagent-6.1.0.tgz#09f08807bc41108ef164cfb4be293cebd480f4a6"
integrity sha512-OUDHEssirmplo3F+1HWKUrUjvnQuA+nZI6i/JJBdXb5eq9IyEQwPyPpqND+SSsxf6TygpBEkUjISVRN4/VOpeg==
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
dependencies:
Update dependency supertest to v5
2020-09-25 16:36:48 +03:00
component-emitter "^1.3.0"
cookiejar "^2.1.2"
debug "^4.1.1"
fast-safe-stringify "^2.0.7"
form-data "^3.0.0"
formidable "^1.2.2"
methods "^1.1.2"
mime "^2.4.6"
qs "^6.9.4"
readable-stream "^3.6.0"
semver "^7.3.2"
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
Update dependency supertest to v6.1.6
2021-08-18 00:18:04 +03:00
supertest@6.1.6:
version "6.1.6"
resolved "https://registry.yarnpkg.com/supertest/-/supertest-6.1.6.tgz#6151c518f4c5ced2ac2aadb9f96f1bf8198174c8"
integrity sha512-0hACYGNJ8OHRg8CRITeZOdbjur7NLuNs0mBjVhdpxi7hP6t3QIbOzLON5RTUmZcy2I9riuII3+Pr2C7yztrIIg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency supertest to v6.1.0
2021-01-15 20:09:41 +03:00
methods "^1.1.2"
superagent "^6.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency sinon to v11.1.1
2021-05-26 18:58:01 +03:00
supports-color@8.1.1:
Update dependency mocha to v8.3.0
2021-02-11 22:44:24 +03:00
version "8.1.1"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-8.1.1.tgz#cd6fc17e28500cff56c1b86c0a7fd4a54a73005c"
integrity sha512-MpUEN2OodtUzxvKQl72cUF7RQ5EiHsGvSsVG0ia9c5RbWGL2CI4C7EpPS8UTBIplnlzZiNuV56w+FuNxy3ty2Q==
dependencies:
has-flag "^4.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
supports-color@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-2.0.0.tgz#535d045ce6b6363fa40117084629995e9df324c7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-U10EXOa2Nj+kARcIRimZXp3zJMc=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
supports-color@^5.3.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "5.5.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-5.5.0.tgz#e2e69a44ac8772f78a1ec0b35b689df6530efc8f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-QjVjwdXIt408MIiAqCX4oUKsgU2EqAGzs2Ppkm4aQYbjm+ZEWEcW4SfFNTr4uMNZma0ey4f5lgLrkB0aX0QMow==
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
has-flag "^3.0.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
Update dependency sinon to v11.1.1
2021-05-26 18:58:01 +03:00
supports-color@^7.1.0, supports-color@^7.2.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "7.2.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-7.2.0.tgz#1b7dcdcb32b8138801b3e478ba6a51caa89648da"
integrity sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==
Update dependency mocha to v8.2.0
2020-10-17 00:23:19 +03:00
dependencies:
has-flag "^4.0.0"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
svgo@^2.3.0:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "2.6.1"
resolved "https://registry.yarnpkg.com/svgo/-/svgo-2.6.1.tgz#60b613937e0081028cffc2369090e366b08f1f0e"
integrity sha512-SDo274ymyG1jJ3HtCr3hkfwS8NqWdF0fMr6xPlrJ5y2QMofsQxIEFWgR1epwb197teKGgnZbzozxvJyIeJpE2Q==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Lock file maintenance
2021-09-20 03:12:18 +03:00
"@trysound/sax" "0.2.0"
colorette "^1.4.0"
Lock file maintenance
2021-08-30 06:24:29 +03:00
commander "^7.2.0"
Lock file maintenance
2021-07-05 04:25:22 +03:00
css-select "^4.1.3"
Lock file maintenance
2021-08-30 06:24:29 +03:00
css-tree "^1.1.3"
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
csso "^4.2.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
stable "^0.1.8"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
symbol-tree@^3.2.4:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "3.2.4"
resolved "https://registry.yarnpkg.com/symbol-tree/-/symbol-tree-3.2.4.tgz#430637d248ba77e078883951fb9aa0eed7c63fa2"
integrity sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
🐛 Upgrade Gscan to 4.1.1 issue TryGhost/Team#864 Use latest gscan to fix issue where custom themes didn't work
2021-07-08 12:52:21 +03:00
sywac@^1.3.0:
Update dependency gscan to v3.5.5
2020-07-24 14:05:09 +03:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/sywac/-/sywac-1.3.0.tgz#324789bdb8bd7d0d66625c9144fce81ab5ba6f99"
integrity sha512-LDt2stNTp4bVPMgd70Jj9PWrSa4batl+bv+Ea5NLNGT7ufc4oQPtRfQ73wbddNV6RilaPqnEt6y1Wkm5FVTNEg==
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
table@^5.2.3:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "5.4.6"
resolved "https://registry.yarnpkg.com/table/-/table-5.4.6.tgz#1292d19500ce3f86053b05f0e8e7e4a3bb21079e"
integrity sha512-wmEc8m4fjnob4gt5riFRtTu/6+4rSe12TpAELNSqHMfF3IqnA+CH37USM6/YR3qRZv7e56kAEAtd6nKZaxe0Ug==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
Lock file maintenance
2019-08-01 08:14:51 +03:00
ajv "^6.10.2"
lodash "^4.17.14"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
slice-ansi "^2.1.0"
string-width "^3.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Update dependency eslint to v7.27.0
2021-05-24 03:31:56 +03:00
table@^6.0.9:
version "6.7.1"
resolved "https://registry.yarnpkg.com/table/-/table-6.7.1.tgz#ee05592b7143831a8c94f3cee6aae4c1ccef33e2"
integrity sha512-ZGum47Yi6KOOFDE8m223td53ath2enHcYLgOCjGr5ngu8bdIARQk6mN/wRMv4yMRcHnCSnHbCEha4sobQx5yWg==
Update dependency eslint to v7.16.0
2020-12-19 02:06:06 +03:00
dependencies:
Lock file maintenance
2021-05-05 18:56:03 +03:00
ajv "^8.0.1"
lodash.clonedeep "^4.5.0"
lodash.truncate "^4.4.2"
Update dependency eslint to v7.16.0
2020-12-19 02:06:06 +03:00
slice-ansi "^4.0.0"
string-width "^4.2.0"
Lock file maintenance
2021-05-05 18:56:03 +03:00
strip-ansi "^6.0.0"
Update dependency eslint to v7.16.0
2020-12-19 02:06:06 +03:00
Lock file maintenance
2021-05-05 18:56:03 +03:00
tar-fs@^2.0.0, tar-fs@^2.1.1:
Update dependency @tryghost/image-transform to v1.0.11
2021-04-21 11:12:19 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/tar-fs/-/tar-fs-2.1.1.tgz#489a15ab85f1f0befabb370b7de4f9eb5cbe8784"
integrity sha512-V0r2Y9scmbDRLCNex/+hYzvp/zyYjvFbHPNgVTKfQvVrb6guiE/fxP+XblDNR011utopbkex2nM4dHNV6GDsng==
dependencies:
chownr "^1.1.1"
mkdirp-classic "^0.5.2"
pump "^3.0.0"
tar-stream "^2.1.4"
Lock file maintenance
2021-05-05 18:56:03 +03:00
tar-stream@^2.1.2, tar-stream@^2.1.4, tar-stream@^2.2.0:
Update dependency @tryghost/image-transform to v1.0.11
2021-04-21 11:12:19 +03:00
version "2.2.0"
resolved "https://registry.yarnpkg.com/tar-stream/-/tar-stream-2.2.0.tgz#acad84c284136b060dc3faa64474aa9aebd77287"
integrity sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==
dependencies:
bl "^4.0.3"
end-of-stream "^1.4.1"
fs-constants "^1.0.0"
inherits "^2.0.3"
readable-stream "^3.1.1"
Update dependency sqlite3 to v5
2021-04-15 16:46:12 +03:00
tar@^2.0.0:
version "2.2.2"
resolved "https://registry.yarnpkg.com/tar/-/tar-2.2.2.tgz#0ca8848562c7299b8b446ff6a4d60cdbb23edc40"
integrity sha512-FCEhQ/4rE1zYv9rYXJw/msRqsnmlje5jHP6huWeBZ704jUTy02c5AZyWujpMR1ax6mVw9NyJMfuK2CMDWVIfgA==
dependencies:
block-stream "*"
fstream "^1.0.12"
inherits "2"
Update dependency sharp to v0.23.2
2019-11-04 03:34:39 +03:00
tar@^4:
Lock file maintenance
2021-08-23 05:05:27 +03:00
version "4.4.19"
resolved "https://registry.yarnpkg.com/tar/-/tar-4.4.19.tgz#2e4d7263df26f2b914dee10c825ab132123742f3"
integrity sha512-a20gEsvHnWe0ygBY8JbxoM4w3SJdhc7ZAuxkLqh+nvNQN2IOt0B5lLgM490X5Hl8FF0dl0tOf2ewFYAlIFgzVA==
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
dependencies:
Lock file maintenance
2021-08-16 04:04:05 +03:00
chownr "^1.1.4"
fs-minipass "^1.2.7"
minipass "^2.9.0"
minizlib "^1.3.3"
mkdirp "^0.5.5"
safe-buffer "^5.2.1"
yallist "^3.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2021-08-30 06:24:29 +03:00
tar@^6.0.2, tar@^6.1.2:
version "6.1.11"
resolved "https://registry.yarnpkg.com/tar/-/tar-6.1.11.tgz#6760a38f003afa1b2ffd0ffe9e9abbd0eab3d621"
integrity sha512-an/KZQzQUkZCkuoAA64hM92X0Urb6VpRhAFllDzz44U2mcD5scmT3zBc4VgVpkugF580+DQn8eAFSyoQt0tznA==
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
dependencies:
chownr "^2.0.0"
fs-minipass "^2.0.0"
minipass "^3.0.0"
minizlib "^2.1.1"
mkdirp "^1.0.3"
yallist "^4.0.0"
Update dependency brute-knex to v4.0.1
2020-11-02 20:07:12 +03:00
tarn@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/tarn/-/tarn-2.0.0.tgz#c68499f69881f99ae955b4317ca7d212d942fdee"
integrity sha512-7rNMCZd3s9bhQh47ksAQd92ADFcJUjjbyOvyFjNLwTPpGieFHMC84S+LOzw0fx1uh6hnDz/19r8CPMnIjJlMMA==
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
Update dependency knex to v0.21.7
2020-10-26 05:06:53 +03:00
tarn@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/tarn/-/tarn-3.0.1.tgz#ebac2c6dbc6977d34d4526e0a7814200386a8aec"
integrity sha512-6usSlV9KyHsspvwu2duKH+FMUhqJnAh6J5J/4MITl8s94iSUQTLkJggdiewKv4RyARQccnigV48Z+khiuVZDJw==
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
test-exclude@^6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/test-exclude/-/test-exclude-6.0.0.tgz#04a8698661d805ea6fa293b6cb9e63ac044ef15e"
integrity sha512-cAGWPIyOHU6zlmg88jwm7VRyXnMN7iV68OGAbYDk/Mh/xC/pzVPlQtY6ngoIH/5/tciuhGfvESU8GrHrcxD56w==
dependencies:
"@istanbuljs/schema" "^0.1.2"
glob "^7.1.4"
minimatch "^3.0.4"
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
text-table@^0.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.2.0"
resolved "https://registry.yarnpkg.com/text-table/-/text-table-0.2.0.tgz#7f5ee823ae805207c00af2df4a84ec3fcfa570b4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-f17oI66AUgfACvLfSoTsP8+lcLQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
through@^2.3.6:
version "2.3.8"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/through/-/through-2.3.8.tgz#0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-DdTJ/6q8NXlgsbckEV1+Doai4fU=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
thunkify@^2.1.2:
version "2.1.2"
resolved "https://registry.yarnpkg.com/thunkify/-/thunkify-2.1.2.tgz#faa0e9d230c51acc95ca13a361ac05ca7e04553d"
integrity sha1-+qDp0jDFGsyVyhOjYawFyn4EVT0=
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
tildify@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/tildify/-/tildify-2.0.0.tgz#f205f3674d677ce698b7067a99e949ce03b4754a"
integrity sha512-Cc+OraorugtXNfs50hU9KS369rFXCfgGLpfCfvlc+Ud5u6VWmUQsOAa9HbTvheQdYnrdJqqv1e5oIqXppMYnSw==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
timsort@^0.3.0:
version "0.3.0"
resolved "https://registry.yarnpkg.com/timsort/-/timsort-0.3.0.tgz#405411a8e7e6339fe64db9a234de11dc31e02bd4"
integrity sha1-QFQRqOfmM5/mTbmiNN4R3DHgK9Q=
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
tiny-lr@^1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/tiny-lr/-/tiny-lr-1.1.1.tgz#9fa547412f238fedb068ee295af8b682c98b2aab"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-44yhA3tsaRoMOjQQ+5v5mVdqef+kH6Qze9jTpqtVufgYjYt08zyZAwNwwVBj3i1rJMnR52IxOW0LK0vBzgAkuA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
body "^5.1.0"
debug "^3.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
faye-websocket "~0.10.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
livereload-js "^2.3.0"
object-assign "^4.1.0"
qs "^6.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
tlds@^1.217.0:
version "1.221.1"
resolved "https://registry.yarnpkg.com/tlds/-/tlds-1.221.1.tgz#6cf6bff5eaf30c5618c5801c3f425a6dc61ca0ad"
integrity sha512-N1Afn/SLeOQRpxMwHBuNFJ3GvGrdtY4XPXKPFcx8he0U9Jg9ZkvTKE1k3jQDtCmlFn44UxjVtouF6PT4rEGd3Q==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Updated `tmp` dependency to v0.2.1 no issue - `tmp` 0.1.0 was broken and I added `tmp` to the Renovate ignore list to stop it creating PRs - https://github.com/TryGhost/Ghost/commit/082160106ae4fbedcf7de99b671d42e001ca2a89 - 0.2.1 is fixed again so we can merge the update and remove it from the list
2021-04-19 16:48:57 +03:00
tmp@0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/tmp/-/tmp-0.2.1.tgz#8457fc3037dcf4719c251367a1af6500ee1ccf14"
integrity sha512-76SUhtfqR2Ijn+xllcI5P1oyannHNHByD80W1q447gU3mp9G9PSpGdWmjUOHRDPiHYacIk66W7ubDTuPF3BEtQ==
dependencies:
rimraf "^3.0.0"
tmp@^0.0.33:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
version "0.0.33"
resolved "https://registry.yarnpkg.com/tmp/-/tmp-0.0.33.tgz#6d34335889768d21b2bcda0aa277ced3b1bfadf9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-jRCJlojKnZ3addtTOjdIqoRuPEKBvNXcGYqzO6zWZX8KfKEpnGY5jfggJQ3EjKuu8D4bJRr0y+cYJFmYbImXGw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
os-tmpdir "~1.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
to-fast-properties@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/to-fast-properties/-/to-fast-properties-2.0.0.tgz#dc5e698cbd079265bc73e0377681a4e4e83f616e"
integrity sha1-3F5pjL0HkmW8c+A3doGk5Og/YW4=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
to-object-path@^0.3.0:
version "0.3.0"
resolved "https://registry.yarnpkg.com/to-object-path/-/to-object-path-0.3.0.tgz#297588b7b0e7e0ac08e04e672f85c1f4999e17af"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-KXWIt7Dn4KwI4E5nL4XB9JmeF68=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
kind-of "^3.0.2"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
to-readable-stream@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/to-readable-stream/-/to-readable-stream-1.0.0.tgz#ce0aa0c2f3df6adf852efb404a783e77c0475771"
integrity sha512-Iq25XBt6zD5npPhlLVXGFN3/gyR2/qODcKNNyTMd4vbm39HUaOiAM4PMq0eMVC/Tkxz+Zjdsc55g9yyz+Yq00Q==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
to-regex-range@^2.1.0:
version "2.1.1"
resolved "https://registry.yarnpkg.com/to-regex-range/-/to-regex-range-2.1.1.tgz#7c80c17b9dfebe599e27367e0d4dd5590141db38"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-fIDBe53+vlmeJzZ+DU3VWQFB2zg=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
is-number "^3.0.0"
repeat-string "^1.6.1"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
to-regex-range@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/to-regex-range/-/to-regex-range-5.0.1.tgz#1648c44aae7c8d988a326018ed72f5b4dd0392e4"
integrity sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==
dependencies:
is-number "^7.0.0"
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
to-regex@^3.0.1, to-regex@^3.0.2:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/to-regex/-/to-regex-3.0.2.tgz#13cfdd9b336552f30b51f33a8ae1b42a7a7599ce"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-FWtleNAtZ/Ki2qtqej2CXTOayOH9bHDQF+Q48VpWyDXjbYxA4Yz8iDB31zXOBUlOHHKidDbqGVrTUvQMPmBGBw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
define-property "^2.0.2"
extend-shallow "^3.0.2"
regex-not "^1.0.2"
safe-regex "^1.1.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
toidentifier@1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/toidentifier/-/toidentifier-1.0.0.tgz#7e1be3470f1e77948bc43d94a3c8f4d7752ba553"
integrity sha512-yaOH/Pk/VEhBWWTlhI+qXxDFXlejDGcQipMlyxda9nthulaxLZUNcUqFxokp0vcYnvteJln5FNQDRrxj3YcbVw==
Added support for jobs defined as modules no issue - These changes should allow easy testing of scheduled jobs and provide an implementation example for future jobs within Ghost - Added experimental support to run jobs based on functions defined in modules - Extendeded testmode "schedule" endpoint with an optional job name parameter which picks up job from "jobs" folder - Adjusted scheduleJob method use and passed "schedule" as first parameter - Bumped job-manager version to allow for all new functionality
2020-11-10 07:29:35 +03:00
toposort@^2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/toposort/-/toposort-2.0.2.tgz#ae21768175d1559d48bef35420b2f4962f09c330"
integrity sha1-riF2gXXRVZ1IvvNUILL0li8JwzA=
Update dependency @tryghost/html-to-mobiledoc to v0.7.12
2021-03-10 22:11:13 +03:00
tough-cookie@4.0.0, tough-cookie@^4.0.0:
🐛 Fixed embed/bookmark retrieval for sites that require cookies during redirects no issue - known failing case was Medium. Some *.medium.com articles triggered redirects but without cookies being stored/sent across the redirect requests it would cause an infinite redirect loop and we'd abort after 10 redirects - use `got`'s [cookie support](https://github.com/sindresorhus/got/tree/v9.6.0#cookies) via `tough-cookie` so that we can create bookmark cards for medium.com and other sites with similar problems
2020-06-17 12:03:36 +03:00
version "4.0.0"
resolved "https://registry.yarnpkg.com/tough-cookie/-/tough-cookie-4.0.0.tgz#d822234eeca882f991f0f908824ad2622ddbece4"
integrity sha512-tHdtEpQCMrc1YLrMaqXXcj6AxhYi/xgit6mZu1+EDWUn+qhUf8wMQoFIy9NXuq23zAwtcB0t/MjACGR18pcRbg==
dependencies:
psl "^1.1.33"
punycode "^2.1.1"
universalify "^0.1.2"
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
tough-cookie@^2.3.3, tough-cookie@~2.5.0:
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
version "2.5.0"
resolved "https://registry.yarnpkg.com/tough-cookie/-/tough-cookie-2.5.0.tgz#cd9fb2a0aa1d5a12b473bd9fb96fa3dcff65ade2"
integrity sha512-nlLsUzgm1kfLXSXfRZMc1KLAugd4hqJHDTvc2hDIwS3mZAfMEuMbc03SujMF+GEcpaX/qboeycw6iO8JwVv2+g==
dependencies:
psl "^1.1.28"
punycode "^2.1.1"
Lock file maintenance
2021-07-05 04:25:22 +03:00
tr46@^2.1.0:
Lock file maintenance
2021-06-01 18:19:18 +03:00
version "2.1.0"
resolved "https://registry.yarnpkg.com/tr46/-/tr46-2.1.0.tgz#fa87aa81ca5d5941da8cbf1f9b749dc969a4e240"
integrity sha512-15Ih7phfcdP5YxqiB+iDtLoaTz4Nd35+IiAv0kQ5FNKHzXgdWqPoTIqEDDJmXceQt4JZk6lVPT8lnDlPpGDppw==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
punycode "^2.1.1"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
trim-trailing-lines@^1.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "1.1.4"
resolved "https://registry.yarnpkg.com/trim-trailing-lines/-/trim-trailing-lines-1.1.4.tgz#bd4abbec7cc880462f10b2c8b5ce1d8d1ec7c2c0"
integrity sha512-rjUWSqnfTNrjbB9NQWfPMH/xRK1deHeGsHoVfpxJ++XeYXE0d6B1En37AHfw3jtfTU7dzMzZL2jjpe8Qb5gLIQ==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
trim@0.0.1:
version "0.0.1"
resolved "https://registry.yarnpkg.com/trim/-/trim-0.0.1.tgz#5858547f6b290757ee95cccc666fb50084c460dd"
integrity sha1-WFhUf2spB1fulczMZm+1AITEYN0=
trough@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.0.5"
resolved "https://registry.yarnpkg.com/trough/-/trough-1.0.5.tgz#b8b639cefad7d0bb2abd37d433ff8293efa5f406"
integrity sha512-rvuRbTarPXmMb79SmzEp8aqXNKcK+y0XaB298IXueQ8I2PsrATcPBCSPyK/dDNa2iWOhKlfNnOjdAOTBU/nkFA==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib@^1.11.1, tslib@^1.9.0, tslib@^1.9.3:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "1.14.1"
resolved "https://registry.yarnpkg.com/tslib/-/tslib-1.14.1.tgz#cf2d38bdc34a134bcaf1091c41f6619e2f672d00"
integrity sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg==
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
tslib@^2.0.1, tslib@^2.0.3, tslib@^2.2.0, tslib@^2.3.0:
Lock file maintenance
2021-08-16 04:04:05 +03:00
version "2.3.1"
resolved "https://registry.yarnpkg.com/tslib/-/tslib-2.3.1.tgz#e8a335add5ceae51aa261d32a490158ef042ef01"
integrity sha512-77EbyPPpMz+FRFRuAFlWMtmgUWGe9UOG2Z25NqCwiIjRhOf5iKGuzSe5P2w1laq+FkRy4p+PCuVkJSGkzTEKVw==
Bump rewire to version 3.0.2 no issue - nothing to adapt for the major jump
2017-11-28 21:22:29 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
tsscmp@1.0.6, tsscmp@^1.0.6:
Installed @tryghost/members-api@0.8.3 no-issue This improves logging for webhook signature validation
2019-10-30 13:24:04 +03:00
version "1.0.6"
resolved "https://registry.yarnpkg.com/tsscmp/-/tsscmp-1.0.6.tgz#85b99583ac3589ec4bfef825b5000aa911d605eb"
integrity sha512-LxhtAkPDTkVCMQjt2h6eBVY28KCjikZqZfMcC15YBeNjkgUpdCfBu5HoiOTDu86v6smE8yOjyEktJ8hlbANHQA==
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
tunnel-agent@^0.6.0:
version "0.6.0"
resolved "https://registry.yarnpkg.com/tunnel-agent/-/tunnel-agent-0.6.0.tgz#27a5dea06b36b04a0a9966774b290868f0fc40fd"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-J6XeoGs2sEoKmWZ3SykIaPD8QP0=
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
dependencies:
safe-buffer "^5.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
tweetnacl@^0.14.3, tweetnacl@~0.14.0:
version "0.14.5"
resolved "https://registry.yarnpkg.com/tweetnacl/-/tweetnacl-0.14.5.tgz#5ae68177f192d4456269d108afa93ff8743f4f64"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WuaBd/GS1EViadEIr6k/+HQ/T2Q=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
type-check@^0.4.0, type-check@~0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/type-check/-/type-check-0.4.0.tgz#07b8203bfa7056c0657050e3ccd2c37730bab8f1"
integrity sha512-XleUoc9uwGXqjWwXaUTZAmzMcFZ5858QA2vvx1Ur5xIcixXIP+8LnFDgRplU30us6teqdlskFfu+ae4K79Ooew==
dependencies:
prelude-ls "^1.2.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
type-check@~0.3.2:
version "0.3.2"
resolved "https://registry.yarnpkg.com/type-check/-/type-check-0.3.2.tgz#5884cab512cf1d355e3fb784f30804b2b520db72"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WITKtRLPHTVeP7eE8wgEsrUg23I=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
prelude-ls "~1.1.2"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
type-detect@4.0.8, type-detect@^4.0.8:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "4.0.8"
resolved "https://registry.yarnpkg.com/type-detect/-/type-detect-4.0.8.tgz#7646fb5f18871cfbb7749e69bd39a6388eb7450c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-0fr/mIH1dlO+x7TlcMy+bIDqKPsw/70tVyeHW787goQjhmqaZe10uwLujubK9q9Lg6Fiho1KUKDYz0Z7k7g5/g==
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
Update dependency eslint to v7.22.0
2021-03-13 02:16:42 +03:00
type-fest@^0.20.2:
version "0.20.2"
resolved "https://registry.yarnpkg.com/type-fest/-/type-fest-0.20.2.tgz#1bf207f4b28f91583666cb5fbd327887301cd5f4"
integrity sha512-Ne+eE4r0/iWnpAxD852z3A+N0Bt5RN//NjJwRd2VFHEmrywxf5vsZlh4R6lixl6B+wz/8d+maTSAkN1FIkI3LQ==
Lock file maintenance
2021-05-05 18:56:03 +03:00
type-fest@^0.21.3:
version "0.21.3"
resolved "https://registry.yarnpkg.com/type-fest/-/type-fest-0.21.3.tgz#d260a24b0198436e133fa26a524a6d65fa3b2e37"
integrity sha512-t0rzBq87m3fVcduHDUFhKmyyX+9eo6WQjZvf51Ea/M0Q7+T374Jp1aUiyUl0GKxp8M/OETVHSDvmkyPgvX+X2w==
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
type-fest@^0.6.0:
version "0.6.0"
resolved "https://registry.yarnpkg.com/type-fest/-/type-fest-0.6.0.tgz#8d2a2370d3df886eb5c90ada1c5bf6188acf838b"
integrity sha512-q+MB8nYR1KDLrgr4G5yemftpMC7/QLqVndBmEEdqzmNj5dcFOO4Oo8qlwZE3ULT3+Zim1F8Kq4cBnikNhlCMlg==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
type-fest@^0.8.1:
version "0.8.1"
resolved "https://registry.yarnpkg.com/type-fest/-/type-fest-0.8.1.tgz#09e249ebde851d3b1e48d27c105444667f17b83d"
integrity sha512-4dbzIzqvjtgiM5rw1k5rEHtBANKmdudhGyBEajN01fEyhaAIhsoKNy6y7+IN93IfpFtwY9iqi7kD+xwKhQsNJA==
Lock file maintenance
2019-08-01 08:14:51 +03:00
type-is@^1.6.4, type-is@~1.6.17, type-is@~1.6.18:
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
version "1.6.18"
resolved "https://registry.yarnpkg.com/type-is/-/type-is-1.6.18.tgz#4e552cd05df09467dcbc4ef739de89f2cf37c131"
integrity sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==
dependencies:
media-typer "0.3.0"
mime-types "~2.1.24"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
typedarray@^0.0.6:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.0.6"
resolved "https://registry.yarnpkg.com/typedarray/-/typedarray-0.0.6.tgz#867ac74e3864187b1d3d47d996a78ec5c8830777"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-hnrHTjhkGHsdPUfZlqeOxciDB3c=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
uc.micro@^1.0.1, uc.micro@^1.0.5:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.0.6"
resolved "https://registry.yarnpkg.com/uc.micro/-/uc.micro-1.0.6.tgz#9c411a802a409a91fc6cf74081baba34b24499ac"
integrity sha512-8Y75pvTYkLJW2hWQHXxoqRgV7qb9B+9vFEtidML+7koHUFapnVJAZ6cKs+Qjz5Aw3aZWHMC6u0wJE3At+nSGwA==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
Removed `grunt-contrib-uglify` dependency - the only bit of code that needed this, the minification of `members.js`, was removed in 3.37.0 so we no longer need this plugin
2020-11-03 17:13:00 +03:00
uglify-js@^3.1.4:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "3.14.2"
resolved "https://registry.yarnpkg.com/uglify-js/-/uglify-js-3.14.2.tgz#d7dd6a46ca57214f54a2d0a43cad0f35db82ac99"
integrity sha512-rtPMlmcO4agTUfz10CbgJ1k6UAoXM2gWb3GoMPPZB/+/Ackf8lNWk11K4rYi2D0apgoFRLtQOZhb+/iGNJq26A==
Update Build Tool
2019-07-02 03:34:50 +03:00
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
uid-safe@~2.1.5:
version "2.1.5"
resolved "https://registry.yarnpkg.com/uid-safe/-/uid-safe-2.1.5.tgz#2b3d5c7240e8fc2e58f8aa269e5ee49c0857bd3a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-KPHm4VL5dDXKz01UuEd88Df+KzynaohSL9fBh096KWAxSKZQDI2uBrVqtvRM4rwrIrRRKsdLNML/lnaaVSRioA==
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
dependencies:
random-bytes "~1.0.0"
Added oauth login and invitation acceptance issue https://github.com/TryGhost/Team/issues/614 - Users who have a password can directly sign-in via oauth - User who are logged-in get their password disabled - Users accepting an invitation get their password disabled - The way we disable password is by setting it to a long random password
2021-04-21 20:33:48 +03:00
uid2@0.0.x:
Lock file maintenance
2021-08-30 06:24:29 +03:00
version "0.0.4"
resolved "https://registry.yarnpkg.com/uid2/-/uid2-0.0.4.tgz#033f3b1d5d32505f5ce5f888b9f3b667123c0a44"
integrity sha512-IevTus0SbGwQzYh3+fRsAMTVVPOoIVufzacXcHPmdlle1jUpq7BRL+mw3dgeLanvGZdwwbWhRV6XrcFNdBmjWA==
Added oauth login and invitation acceptance issue https://github.com/TryGhost/Team/issues/614 - Users who have a password can directly sign-in via oauth - User who are logged-in get their password disabled - Users accepting an invitation get their password disabled - The way we disable password is by setting it to a long random password
2021-04-21 20:33:48 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
unc-path-regex@^0.1.2:
version "0.1.2"
resolved "https://registry.yarnpkg.com/unc-path-regex/-/unc-path-regex-0.1.2.tgz#e73dd3d7b0d7c5ed86fbac6b0ae7d8c6a69d50fa"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-5z3T17DXxe2G+6xrCufYxqadUPo=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency grunt to v1.3.0
2020-08-25 14:59:30 +03:00
underscore.string@~3.3.5:
Bumped html-to-text from 3.3.0 to 4.0.0 refs #9389 - https://github.com/werk85/node-html-to-text/blob/master/CHANGELOG.md#version-400 - breaking change does not affect us
2019-01-21 17:02:52 +03:00
version "3.3.5"
resolved "https://registry.yarnpkg.com/underscore.string/-/underscore.string-3.3.5.tgz#fc2ad255b8bd309e239cbc5816fd23a9b7ea4023"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-g+dpmgn+XBneLmXXo+sGlW5xQEt4ErkS3mgeN2GFbremYeMBSJKr9Wf2KJplQVaiPY/f7FN6atosWYNm9ovrYg==
Bumped html-to-text from 3.3.0 to 4.0.0 refs #9389 - https://github.com/werk85/node-html-to-text/blob/master/CHANGELOG.md#version-400 - breaking change does not affect us
2019-01-21 17:02:52 +03:00
dependencies:
sprintf-js "^1.0.3"
util-deprecate "^1.0.2"
Update dependency jsonpath to v1.1.1
2021-04-01 23:00:01 +03:00
underscore@1.12.1:
version "1.12.1"
resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.12.1.tgz#7bb8cc9b3d397e201cf8553336d262544ead829e"
integrity sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🔒 Fixed remote command injection when using `sendmail` email transport refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm refs https://github.com/advisories/GHSA-48ww-j4fc-435p - a vulnerability in `nodemailer` means that the `sendmail` transport is vulnerable to command injection for flags passed to the `sendmail` binary - updating to the latest version of Nodemailer required creating `@tryghost/nodemailer`, which is a wrapper around Nodemailer and several plugins that used to be in the core - this commit switches to using that package, and fixes up some small code + test changes
2021-09-14 14:39:40 +03:00
underscore@~1.7.0:
version "1.7.0"
resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.7.0.tgz#6bbaf0877500d36be34ecaa584e0db9fef035209"
integrity sha1-a7rwh3UA02vjTsqlhODbn+8DUgk=
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
underscore@~1.8.3:
version "1.8.3"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.8.3.tgz#4f3fb53b106e6097fcf9cb4109f2a5e9bdfa5022"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Tz+1OxBuYJf8+ctBCfKl6b36UCI=
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
unherit@^1.0.4:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/unherit/-/unherit-1.1.3.tgz#6c9b503f2b41b262330c80e91c8614abdaa69c22"
integrity sha512-Ft16BJcnapDKp0+J/rqFC3Rrk6Y/Ng4nzsC028k2jdDII/rdZ7Wd3pPT/6+vIIxRagwRc9K0IUX0Ra4fKvw+WQ==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
dependencies:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
inherits "^2.0.0"
xtend "^4.0.0"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
Updated to use slugify method from SDK for safe string refs #10618 - Updated lib safe string security method
2019-05-07 07:48:28 +03:00
unidecode@^0.1.8:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.1.8"
resolved "https://registry.yarnpkg.com/unidecode/-/unidecode-0.1.8.tgz#efbb301538bc45246a9ac8c559d72f015305053e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-77swFTi8RSRqmsjFWdcvAVMFBT4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🐛 Fixed "unsaved changes" modal displaying when post has been saved refs https://github.com/TryGhost/Ghost/issues/10477 The unsaved changes modal is displaying even when the post has been saved if images have been uploaded because the server is transforming absolute image urls to relative during input of the `mobiledoc` field but not transforming them back to absolute during output. The editor then thinks it's out of sync and shows the warning when trying to leave. - `@tryghost/url-utils` has been updated with new methods for transforming URLs in mobiledoc content - moves absolute->relative transformation from the API input serializers into the Post model - transforms URLs in more fields for a more comprehensive transformation and fewer issues when re-configuring a site's domain - previously there could be problems with internal links between posts not being transformed so you could change the url config to newdomain.com but links in post content would still be pointing to olddomain.com - updates the API post output serializers to transform all modified fields - drops the `?absolute_urls=true` param switch from the `canary` API post output serializer so that all URLs are output as absolute - we're transforming more urls to relative when saving so this is necessary to ensure the unsaved changes modal is not triggered - the query param isn't documented and will disappear in v3
2019-10-07 22:23:45 +03:00
unified@^8.2.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "8.4.2"
resolved "https://registry.yarnpkg.com/unified/-/unified-8.4.2.tgz#13ad58b4a437faa2751a4a4c6a16f680c500fff1"
integrity sha512-JCrmN13jI4+h9UAyKEoGcDZV+i1E7BLFuG7OsaDvTXI5P0qhHX+vZO/kOhz9jn8HGENDKbwSeB0nVOg4gVStGA==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
dependencies:
bail "^1.0.0"
extend "^3.0.0"
is-plain-obj "^2.0.0"
trough "^1.0.0"
vfile "^4.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
union-value@^1.0.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/union-value/-/union-value-1.0.1.tgz#0b6fe7b835aecda61c6ea4d4f02c14221e109847"
integrity sha512-tJfXmxMeWYnczCVs7XAEvIV7ieppALdyepWMkHkwciRpZraG/xwT+s2JN8+pr1+8jCRf80FFzvr+MpQeeoF4Xg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
arr-union "^3.1.0"
get-value "^2.0.6"
is-extendable "^0.1.1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
set-value "^2.0.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
uniqs@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/uniqs/-/uniqs-2.0.0.tgz#ffede4b36b25290696e6e165d4a59edb998e6b02"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-/+3ks2slKQaW5uFl1KWe25mOawI=
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Lock file maintenance
2021-06-01 18:19:18 +03:00
unique-filename@^1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/unique-filename/-/unique-filename-1.1.1.tgz#1d69769369ada0583103a1e6ae87681b56573230"
integrity sha512-Vmp0jIp2ln35UTXuryvjzkjGdRyf9b2lTXuSYUiPmzRcl3FDtYqAwOnTJkAngD9SWhnoJzDbTKwaOrZ+STtxNQ==
dependencies:
unique-slug "^2.0.0"
unique-slug@^2.0.0:
version "2.0.2"
resolved "https://registry.yarnpkg.com/unique-slug/-/unique-slug-2.0.2.tgz#baabce91083fc64e945b0f3ad613e264f7cd4e6c"
integrity sha512-zoWr9ObaxALD3DOPfjPSqxt4fnZiWblxHIgeWqW8x7UqDzEtHEQLzji2cuJYQFCU6KmoJikOYAZlrTHHebjx2w==
dependencies:
imurmurhash "^0.1.4"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
unist-util-is@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/unist-util-is/-/unist-util-is-3.0.0.tgz#d9e84381c2468e82629e4a5be9d7d05a2dd324cd"
integrity sha512-sVZZX3+kspVNmLWBPAB6r+7D9ZgAFPNWm66f7YNb420RlQSbn+n8rG8dGZSkrER7ZIXGQYNm5pqC3v3HopH24A==
unist-util-is@^4.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "4.1.0"
resolved "https://registry.yarnpkg.com/unist-util-is/-/unist-util-is-4.1.0.tgz#976e5f462a7a5de73d94b706bac1b90671b57797"
integrity sha512-ZOQSsnce92GrxSqlnEEseX0gi7GH9zTJZ0p9dtu87WRb/37mMPO2Ilx1s/t9vBHrFhbgweUwb+t7cIn5dxPhZg==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
unist-util-remove-position@^1.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "1.1.4"
resolved "https://registry.yarnpkg.com/unist-util-remove-position/-/unist-util-remove-position-1.1.4.tgz#ec037348b6102c897703eee6d0294ca4755a2020"
integrity sha512-tLqd653ArxJIPnKII6LMZwH+mb5q+n/GtXQZo6S6csPRs5zB0u79Yw8ouR3wTw8wxvdJFhpP6Y7jorWdCgLO0A==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
dependencies:
unist-util-visit "^1.1.0"
unist-util-stringify-position@^2.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "2.0.3"
resolved "https://registry.yarnpkg.com/unist-util-stringify-position/-/unist-util-stringify-position-2.0.3.tgz#cce3bfa1cdf85ba7375d1d5b17bdc4cada9bd9da"
integrity sha512-3faScn5I+hy9VleOq/qNbAd6pAx7iH5jYBMS9I1HgQVijz/4mv5Bvw5iw1sC/90CODiKo81G/ps8AJrISn687g==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
dependencies:
"@types/unist" "^2.0.2"
unist-util-visit-parents@^2.0.0:
version "2.1.2"
resolved "https://registry.yarnpkg.com/unist-util-visit-parents/-/unist-util-visit-parents-2.1.2.tgz#25e43e55312166f3348cae6743588781d112c1e9"
integrity sha512-DyN5vD4NE3aSeB+PXYNKxzGsfocxp6asDc2XXE3b0ekO2BaRUpBicbbUygfSvYfUz1IkmjFR1YF7dPklraMZ2g==
dependencies:
unist-util-is "^3.0.0"
unist-util-visit-parents@^3.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "3.1.1"
resolved "https://registry.yarnpkg.com/unist-util-visit-parents/-/unist-util-visit-parents-3.1.1.tgz#65a6ce698f78a6b0f56aa0e88f13801886cdaef6"
integrity sha512-1KROIZWo6bcMrZEwiH2UrXDyalAa0uqzWCxCJj6lPOvTve2WkfgCytoDTPaMnodXh1WrXOq0haVYHj99ynJlsg==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
dependencies:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
"@types/unist" "^2.0.0"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
unist-util-is "^4.0.0"
unist-util-visit@^1.1.0:
version "1.4.1"
resolved "https://registry.yarnpkg.com/unist-util-visit/-/unist-util-visit-1.4.1.tgz#4724aaa8486e6ee6e26d7ff3c8685960d560b1e3"
integrity sha512-AvGNk7Bb//EmJZyhtRUnNMEpId/AZ5Ph/KUpTI09WHQuDZHKovQ1oEv3mfmKpWKtoMzyMC4GLBm1Zy5k12fjIw==
dependencies:
unist-util-visit-parents "^2.0.0"
unist-util-visit@^2.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "2.0.3"
resolved "https://registry.yarnpkg.com/unist-util-visit/-/unist-util-visit-2.0.3.tgz#c3703893146df47203bb8a9795af47d7b971208c"
integrity sha512-iJ4/RczbJMkD0712mGktuGpm/U4By4FfDonL7N/9tATGIF4imikjOuagyMY53tnZq3NP6BcmlrHhEKAfGWjh7Q==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
dependencies:
"@types/unist" "^2.0.0"
unist-util-is "^4.0.0"
unist-util-visit-parents "^3.0.0"
Updated bookshelf-relations dependency to 2.2.0
2020-08-03 22:37:25 +03:00
universalify@^0.1.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/universalify/-/universalify-0.1.2.tgz#b646f69be3942dabcecc9d6639c80dc105efaa66"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-rBJeI5CXAlmy1pV+617WB9J63U6XcazHHF2f2dbJix4XzpUF0RS3Zbj0FGIOCAva5P/d/GBOYaACQ1w+0azUkg==
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 10:51:54 +03:00
Update dependency fs-extra to v9.1.0
2021-01-19 20:55:11 +03:00
universalify@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/universalify/-/universalify-2.0.0.tgz#75a4984efedc4b08975c5aeb73f530d02df25717"
integrity sha512-hAZsKq7Yy11Zu1DE0OzWjw7nnLZmJZYTDZZyEFHZdUhV8FkH5MCfoU1XMaxXovpyW5nq5scPqq0ZDP9Zyl04oQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
unpipe@1.0.0, unpipe@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/unpipe/-/unpipe-1.0.0.tgz#b2bf4ee8514aae6165b4817829d21b2ef49904ec"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-sr9O6FFKrmFltIF4KdIbLvSZBOw=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
unset-value@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/unset-value/-/unset-value-1.0.0.tgz#8376873f7d2335179ffb1e6fc3a8ed0dfc8ab559"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-g3aHP30jNRef+x5vw6jtDfyKtVk=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
has-value "^0.3.1"
isobject "^3.0.0"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
uri-js@^4.2.2:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "4.4.1"
resolved "https://registry.yarnpkg.com/uri-js/-/uri-js-4.4.1.tgz#9b1a52595225859e55f669d928f88c6c57f2a77e"
integrity sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
dependencies:
punycode "^2.1.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
urix@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/urix/-/urix-0.1.0.tgz#da937f7a62e21fec1fd18d49b35c2935067a6c72"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-2pN/emLiH+wf0Y1Js1wpNQZ6bHI=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
url-parse-lax@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/url-parse-lax/-/url-parse-lax-3.0.0.tgz#16b5cafc07dbe3676c1b1999177823d6503acb0c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-FrXK/Afb42dsGxmZF3gj1lA6yww=
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
prepend-http "^2.0.0"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
url-regex-safe@~2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/url-regex-safe/-/url-regex-safe-2.0.2.tgz#41d02bb7c927d57008389f636de0bd850a40fc7c"
integrity sha512-n5qtPAWvMLTmgYMCX1195CKV9oJE6SkSa5bVsMrHSFA/hnqila9J1KVf6gF2M66lCWwPDhJyQlX1tEXqtzBOPQ==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
ip-regex "^4.3.0"
re2 "^1.15.9"
tlds "^1.217.0"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
use@^3.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.1.1"
resolved "https://registry.yarnpkg.com/use/-/use-3.1.1.tgz#d50c8cac79a19fbc20f2911f56eb973f4e10070f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-cwESVXlO3url9YWlFW/TA9cshCEhtu7IKJ/p5soJ/gGpj7vbvFrAY/eIioQ6Dw23KjZhYgiIo8HOs1nQ2vr/oQ==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
util-deprecate@^1.0.1, util-deprecate@^1.0.2, util-deprecate@~1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/util-deprecate/-/util-deprecate-1.0.2.tgz#450d4dc9fa70de732762fbd2d4a28981419a0ccf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-RQ1Nyfpw3nMnYvvS1KKJgUGaDM8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added oauth login and invitation acceptance issue https://github.com/TryGhost/Team/issues/614 - Users who have a password can directly sign-in via oauth - User who are logged-in get their password disabled - Users accepting an invitation get their password disabled - The way we disable password is by setting it to a long random password
2021-04-21 20:33:48 +03:00
utils-merge@1.0.1, utils-merge@1.x.x:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/utils-merge/-/utils-merge-1.0.1.tgz#9f95710f50a267947b2ccc124741c1028427e713"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-n5VxD1CiZ5R7LMwSR0HBAoQn5xM=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Lock file maintenance
2021-07-05 04:25:22 +03:00
uuid@8.3.2, uuid@^8.3.2:
Update dependency uuid to v8.3.2
2020-12-09 00:23:14 +03:00
version "8.3.2"
resolved "https://registry.yarnpkg.com/uuid/-/uuid-8.3.2.tgz#80d5b5ced271bb9af6c445f21a1a04c606cefbe2"
integrity sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==
Updated bookshelf-relations dependency to 2.2.0
2020-08-03 22:37:25 +03:00
uuid@^3.3.2, uuid@^3.3.3:
Updated Ignition and @tryghost/errors dependencies no issue - These dependencies needed to be bumped together
2020-05-26 14:51:49 +03:00
version "3.4.0"
resolved "https://registry.yarnpkg.com/uuid/-/uuid-3.4.0.tgz#b23e4358afa8a202fe7a100af1f5f883f02007ee"
integrity sha512-HjSDRw6gZE5JMggctHBcjVak08+KEVhSIiDzFnT9S9aegmp85S/bReBVTb4QTFaRNptJ9kuYaNhnbNEOkbKb/A==
Update dependency uuid to v3.3.3
2019-08-26 03:29:49 +03:00
Updated knex-migrator to v3.5.1 no issue - Renovate was being slow again
2021-02-23 18:56:22 +03:00
uuid@^7.0.1:
Update dependency @tryghost/members-api to v0.25.2
2020-08-11 16:11:27 +03:00
version "7.0.3"
resolved "https://registry.yarnpkg.com/uuid/-/uuid-7.0.3.tgz#c5c9f2c8cf25dc0a372c4df1441c41f5bd0c680b"
integrity sha512-DPSke0pXhTZgoF/d+WSt2QaKMCFSfx7QegxEWT+JOuHF5aWrKEn0G+ztjuJg/gG8/ItK+rbPCD/yNv8yyih6Cg==
Update Test & linting packages
2019-08-16 22:07:23 +03:00
v8-compile-cache@^2.0.3:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "2.3.0"
resolved "https://registry.yarnpkg.com/v8-compile-cache/-/v8-compile-cache-2.3.0.tgz#2de19618c66dc247dcfb6f99338035d8245a2cee"
integrity sha512-l8lCEmLcLYZh4nbunNZvQCJc5pv7+RCwa8q/LdUx8u7lsWvPDKmpodJAJNwkAhJC//dFY48KuIEmjtd4RViDrA==
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
v8-to-istanbul@^8.0.0:
version "8.0.0"
resolved "https://registry.yarnpkg.com/v8-to-istanbul/-/v8-to-istanbul-8.0.0.tgz#4229f2a99e367f3f018fa1d5c2b8ec684667c69c"
integrity sha512-LkmXi8UUNxnCC+JlH7/fsfsKr5AU110l+SYGJimWNkWhxbN5EyeOtm1MJ0hhvqMMOhGwBj1Fp70Yv9i+hX0QAg==
dependencies:
"@types/istanbul-lib-coverage" "^2.0.1"
convert-source-map "^1.6.0"
source-map "^0.7.3"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
v8flags@^3.1.3, v8flags@^3.2.0, v8flags@~3.2.0:
Update dependency knex to v0.21.2
2020-07-10 01:13:35 +03:00
version "3.2.0"
resolved "https://registry.yarnpkg.com/v8flags/-/v8flags-3.2.0.tgz#b243e3b4dfd731fa774e7492128109a0fe66d656"
integrity sha512-mH8etigqMfiGWdeXpaaqGfs6BndypxusHHcv2qSHyZkGEznCd/qAXCWWRzeowtL54147cktFOC4P5y+kl8d8Jg==
dependencies:
homedir-polyfill "^1.0.1"
Update dependency juice to v7
2020-07-21 21:11:38 +03:00
valid-data-url@^3.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "3.0.1"
resolved "https://registry.yarnpkg.com/valid-data-url/-/valid-data-url-3.0.1.tgz#826c1744e71b5632e847dd15dbd45b9fb38aa34f"
integrity sha512-jOWVmzVceKlVVdwjNSenT4PbGghU0SBIizAev8ofZVgivk/TVHXSbNL8LP6M3spZvkR9/QolkyJavGSX5Cs0UA==
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
Switched to eslint-plugin-node + fix eslint test perf refs: https://github.com/TryGhost/Ghost/commit/7bce05ab8 - I wrote a custom plugin for the no-cross-requires logic between our modules after not finding anything that could do it - Then, when searching for the next rule I wanted, I found eslint-plugin-ghost has no-restricted-requires - This rule is more flexible, so switching to it - NOTE: This update to eslint-plugin-ghost also fixes performance of linting our test files by pinning eslint-plugin-mocha to v7 as v8 has performance problems
2021-05-07 15:21:22 +03:00
validate-npm-package-license@^3.0.1:
version "3.0.4"
resolved "https://registry.yarnpkg.com/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz#fc91f6b9c7ba15c857f4cb2c5defeec39d4f410a"
integrity sha512-DpKm2Ui/xN7/HQKCtpZxoRWBhZ9Z0kqtygG8XCgNQ8ZlDnxuQmWhj566j8fN4Cu3/JmbhsDo7fcAJq4s9h27Ew==
dependencies:
spdx-correct "^3.0.0"
spdx-expression-parse "^3.0.0"
Update dependency gscan to v3.5.4
2020-05-01 13:15:50 +03:00
validator@13.0.0:
version "13.0.0"
resolved "https://registry.yarnpkg.com/validator/-/validator-13.0.0.tgz#0fb6c6bb5218ea23d368a8347e6d0f5a70e3bcab"
integrity sha512-anYx5fURbgF04lQV18nEQWZ/3wHGnxiKdG4aL8J+jEDsm98n/sU/bey+tYk6tnGJzm7ioh5FoqrAiQ6m03IgaA==
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 12:12:03 +03:00
Bumped validator to same version as admin - validator has seen a lot of change, this one bump is safe - after this we need to go through and make API updates as isURL has changed quite significantly!
2021-06-15 18:36:01 +03:00
validator@7.2.0:
version "7.2.0"
resolved "https://registry.yarnpkg.com/validator/-/validator-7.2.0.tgz#a63dcbaba51d4350bf8df20988e0d5a54d711791"
integrity sha512-c8NGTUYeBEcUIGeMppmNVKHE7wwfm3mYbNZxV+c5mlv9fDHI7Ad3p07qfNrn/CvpdkK2k61fOLRO2sTEhgQXmg==
Update dependency gscan to v3.4.0
2020-03-20 12:27:55 +03:00
Update dependency gscan to v3.5.4
2020-05-01 13:15:50 +03:00
validator@^12.0.0:
version "12.2.0"
resolved "https://registry.yarnpkg.com/validator/-/validator-12.2.0.tgz#660d47e96267033fd070096c3b1a6f2db4380a0a"
integrity sha512-jJfE/DW6tIK1Ek8nCfNFqt8Wb3nzMoAbocBF6/Icgg1ZFSBpObdnwVY2jQj6qUqzhx5jc71fpvBWyLGO7Xl+nQ==
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
vary@^1, vary@~1.1.2:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/vary/-/vary-1.1.2.tgz#2299f02c6ded30d4a5961b0b9f74524a18f634fc"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IpnwLG3tMNSllhsLn3RSShj2NPw=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
vendors@^1.0.3:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/vendors/-/vendors-1.0.4.tgz#e2b800a53e7a29b93506c3cf41100d16c4c4ad8e"
integrity sha512-/juG65kTL4Cy2su4P8HjtkTxk6VmJDiOPBufWniqQ6wknac6jNiXS9vU+hO3wgusiyqWlzTbVHi0dyJqRONg3w==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
verror@1.10.0:
version "1.10.0"
resolved "https://registry.yarnpkg.com/verror/-/verror-1.10.0.tgz#3a105ca17053af55d6e270c1f8288682e18da400"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-OhBcoXBTr1XW4nDB+CiGguGNpAA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
assert-plus "^1.0.0"
core-util-is "1.0.2"
extsprintf "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
vfile-location@^2.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "2.0.6"
resolved "https://registry.yarnpkg.com/vfile-location/-/vfile-location-2.0.6.tgz#8a274f39411b8719ea5728802e10d9e0dff1519e"
integrity sha512-sSFdyCP3G6Ka0CEmN83A2YCMKIieHx0EDaj5IDP4g1pa5ZJ4FJDvpO0WODLxo4LUX4oe52gmSCK7Jw4SBghqxA==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
vfile-message@^2.0.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "2.0.4"
resolved "https://registry.yarnpkg.com/vfile-message/-/vfile-message-2.0.4.tgz#5b43b88171d409eae58477d13f23dd41d52c371a"
integrity sha512-DjssxRGkMvifUOJre00juHoP9DPWuzjxKuMDrhNbk2TdaYYBNMStsNhEOt3idrtI12VQYM/1+iM0KOzXi4pxwQ==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
dependencies:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
"@types/unist" "^2.0.0"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
unist-util-stringify-position "^2.0.0"
vfile@^4.0.0:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "4.2.1"
resolved "https://registry.yarnpkg.com/vfile/-/vfile-4.2.1.tgz#03f1dce28fc625c625bc6514350fbdb00fa9e624"
integrity sha512-O6AE4OskCG5S1emQ/4gl8zK586RqA3srz3nfK/Viy0UPToBc5Trp9BVFb1u0CjsKrAWwnpr4ifM/KBXPWwJbCA==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
dependencies:
"@types/unist" "^2.0.0"
is-buffer "^2.0.0"
unist-util-stringify-position "^2.0.0"
vfile-message "^2.0.0"
Update metascraper to v5.22.1
2021-06-09 18:53:54 +03:00
video-extensions@~1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/video-extensions/-/video-extensions-1.2.0.tgz#62f449f403b853f02da40964cbf34143f7d96731"
integrity sha512-TriMl18BHEsh2KuuSA065tbu4SNAC9fge7k8uKoTTofTq89+Xsg4K1BGbmSVETwUZhqSjd9KwRCNwXAW/buXMg==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
w3c-hr-time@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/w3c-hr-time/-/w3c-hr-time-1.0.2.tgz#0a89cdf5cc15822df9c360543676963e0cc308cd"
integrity sha512-z8P5DvDNjKDoFIHK7q8r8lackT6l+jo/Ye3HOle7l9nICP9lf1Ci25fy9vHd0JOWewkIFzXIEig3TdKT7JQ5fQ==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
browser-process-hrtime "^1.0.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
w3c-xmlserializer@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/w3c-xmlserializer/-/w3c-xmlserializer-2.0.0.tgz#3e7104a05b75146cc60f564380b7f683acf1020a"
integrity sha512-4tzD0mF8iSiMiNs30BiLO3EpfGLZUT2MSX/G+o7ZywDzliWQ3OPtTZ0PTC3B3ca1UAf4cJMHB+2Bf56EriJuRA==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
xml-name-validator "^3.0.0"
Update dependency juice to v7
2020-07-21 21:11:38 +03:00
web-resource-inliner@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/web-resource-inliner/-/web-resource-inliner-5.0.0.tgz#ac30db8096931f20a7c1b3ade54ff444e2e20f7b"
integrity sha512-AIihwH+ZmdHfkJm7BjSXiEClVt4zUFqX4YlFAzjL13wLtDuUneSaFvDBTbdYRecs35SiU7iNKbMnN+++wVfb6A==
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
dependencies:
Update dependency juice to v7
2020-07-21 21:11:38 +03:00
ansi-colors "^4.1.1"
escape-goat "^3.0.0"
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
htmlparser2 "^4.0.0"
Update dependency juice to v7
2020-07-21 21:11:38 +03:00
mime "^2.4.6"
node-fetch "^2.6.0"
valid-data-url "^3.0.0"
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
webidl-conversions@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/webidl-conversions/-/webidl-conversions-5.0.0.tgz#ae59c8a00b121543a2acc65c0434f57b0fc11aff"
integrity sha512-VlZwKPCkYKxQgeSbH5EyngOmRp7Ww7I9rQLERETtf5ofd9pGeswWiOtogpEO850jziPRarreGxn5QIiTqpb2wA==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.7.1
2020-08-04 10:06:26 +03:00
webidl-conversions@^6.1.0:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "6.1.0"
resolved "https://registry.yarnpkg.com/webidl-conversions/-/webidl-conversions-6.1.0.tgz#9111b4d7ea80acd40f5270d666621afa78b69514"
integrity sha512-qBIvFLGiBpLjfwmYAaHPXsn+ho5xZnGvyGvsarywGNc8VyQJUMHJ8OBKGGrPER0okBeMDaan4mNBlgBROxuI8w==
Updated Ghost-SDK packages no issue
2020-04-03 12:43:35 +03:00
🔥 remove gulp (#8159) * remove gulpfile * remove gulp dependencies * Update README.md
2017-03-14 17:20:53 +03:00
websocket-driver@>=0.5.1:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "0.7.4"
resolved "https://registry.yarnpkg.com/websocket-driver/-/websocket-driver-0.7.4.tgz#89ad5295bbf64b480abcba31e4953aca706f5760"
integrity sha512-b17KeDIQVjvb0ssuSDF2cYXSg2iztliJ4B9WdsuB6J952qCPKmnVq4DyW5motImXHDC1cBT/1UezrJVsKw5zjg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
http-parser-js ">=0.5.1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
safe-buffer ">=5.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
websocket-extensions ">=0.1.1"
websocket-extensions@>=0.1.1:
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
version "0.1.4"
resolved "https://registry.yarnpkg.com/websocket-extensions/-/websocket-extensions-0.1.4.tgz#7f8473bc839dfd87608adb95d7eb075211578a42"
integrity sha512-OqedPIGOfsDlo31UNwYbCFMSaO9m9G/0faIHj5/dZFDMFqPTcx6UwqyOy3COEaEOg/9VsGIpdqn62W5KhoKSpg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
whatwg-encoding@^1.0.5:
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
version "1.0.5"
resolved "https://registry.yarnpkg.com/whatwg-encoding/-/whatwg-encoding-1.0.5.tgz#5abacf777c32166a51d085d6b4f3e7d27113ddb0"
integrity sha512-b5lim54JOPN9HtzvK9HFXvBma/rnfFeqsic0hSpjtDbVxR3dJKLc+KB4V6GgiGOvl7CY/KNh8rxSo9DKQrnUEw==
dependencies:
iconv-lite "0.4.24"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
whatwg-mimetype@^2.3.0:
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
version "2.3.0"
resolved "https://registry.yarnpkg.com/whatwg-mimetype/-/whatwg-mimetype-2.3.0.tgz#3d4b1e0312d2079879f826aff18dbeeca5960fbf"
integrity sha512-M4yMwr6mAnQz76TbJm914+gPpB/nCwvZbJU28cUD6dR004SAxDLOOSUaB1JDRqLtaOV/vi0IC5lEAGFgrjGv/g==
Lock file maintenance
2021-05-05 18:56:03 +03:00
whatwg-url@^8.0.0, whatwg-url@^8.5.0:
Lock file maintenance
2021-07-05 04:25:22 +03:00
version "8.7.0"
resolved "https://registry.yarnpkg.com/whatwg-url/-/whatwg-url-8.7.0.tgz#656a78e510ff8f3937bc0bcbe9f5c0ac35941b77"
integrity sha512-gAojqb/m9Q8a5IV96E3fHJM70AzCkgt4uXYX2O7EmuyOnLrViCQlsEBmF9UQIu3/aeAIp2U17rtbpZWNntQqdg==
Update dependency @tryghost/html-to-mobiledoc to v0.7.13
2021-04-15 04:49:31 +03:00
dependencies:
lodash "^4.7.0"
Lock file maintenance
2021-07-05 04:25:22 +03:00
tr46 "^2.1.0"
Update dependency @tryghost/html-to-mobiledoc to v0.7.13
2021-04-15 04:49:31 +03:00
webidl-conversions "^6.1.0"
Update metascraper to v5.24.2
2021-08-16 14:12:26 +03:00
whatwg-url@^9.0.0:
version "9.1.0"
resolved "https://registry.yarnpkg.com/whatwg-url/-/whatwg-url-9.1.0.tgz#1b112cf237d72cd64fa7882b9c3f6234a1c3050d"
integrity sha512-CQ0UcrPHyomtlOCot1TL77WyMIm/bCwrJ2D6AOKGwEczU9EpyoqAokfqrf/MioU9kHcMsmJZcg1egXix2KYEsA==
dependencies:
tr46 "^2.1.0"
webidl-conversions "^6.1.0"
Update dependency grunt to v1.4.0
2021-04-23 13:02:06 +03:00
which@1, which@^1.2.14, which@^1.2.9:
Update dependency sqlite3 to v5
2021-04-15 16:46:12 +03:00
version "1.3.1"
resolved "https://registry.yarnpkg.com/which/-/which-1.3.1.tgz#a45043d54f5805316da8d62f9f50918d3da70b0a"
integrity sha512-HxJdYWq1MTIQbJ3nw0cqssHoTNU267KlrDuGZ1WYlxDStUtKUhOaJmh112/TZmHxxUfuJqPXSOm7tDyas0OSIQ==
dependencies:
isexe "^2.0.0"
Update metascraper to v5.21.7
2021-05-05 17:25:29 +03:00
which@2.0.2, which@^2.0.1, which@^2.0.2, which@~2.0.2:
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
version "2.0.2"
resolved "https://registry.yarnpkg.com/which/-/which-2.0.2.tgz#7c6a8dd0a636a0327e10b59c9286eee93f3f51b1"
integrity sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==
dependencies:
isexe "^2.0.0"
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
whoops@~4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/whoops/-/whoops-4.1.0.tgz#f42e51514c7af19a9491a44cabf2712292c6a8e1"
integrity sha512-42soctqvFs9FaU1r4ZadCy2F6A9dUc4SN3ud+tbDEdmyZDTeYBgKKqtIdo6NiQlnZnJegWRCyKLk2edYH9DsHA==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
clean-stack "~2.2.0"
mimic-fn "~3.0.0"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update dependency mocha to v9.1.2
2021-09-27 06:11:58 +03:00
wide-align@^1.1.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/wide-align/-/wide-align-1.1.3.tgz#ae074e6bdc0c14a431e804e624549c633b000457"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-QGkOQc8XL6Bt5PwnsExKBPuMKBxnGxWWW3fU55Xt4feHozMUhdUMaBCk290qpm/wG5u/RSKzwdAC4i51YigihA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
string-width "^1.0.2 || 2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
with-callback@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/with-callback/-/with-callback-1.0.2.tgz#a09629b9a920028d721404fb435bdcff5c91bc21"
integrity sha1-oJYpuakgAo1yFAT7Q1vc/1yRvCE=
Update dependency eslint to v7
2020-05-26 13:21:21 +03:00
word-wrap@^1.2.3, word-wrap@~1.2.3:
Update Test & linting packages
2020-02-03 16:44:38 +03:00
version "1.2.3"
resolved "https://registry.yarnpkg.com/word-wrap/-/word-wrap-1.2.3.tgz#610636f6b1f703891bd34771ccb17fb93b47079c"
integrity sha512-Hz/mrNwitNRh/HUAtM/VT/5VH+ygD6DV7mYKZAtHOrbs8U7lvPS6xf7EJKMF0uW1KJCl0H701g3ZGus+muE5vQ==
Lock file maintenance (#11979) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-07-27 21:02:53 +03:00
wordwrap@^1.0.0:
Update dependency express-hbs to v2.3.3
2020-04-06 18:42:24 +03:00
version "1.0.0"
resolved "https://registry.yarnpkg.com/wordwrap/-/wordwrap-1.0.0.tgz#27584810891456a4171c8d0226441ade90cbcaeb"
integrity sha1-J1hIEIkUVqQXHI0CJkQa3pDLyus=
Update Test & linting packages
2021-07-05 03:37:17 +03:00
workerpool@6.1.5:
version "6.1.5"
resolved "https://registry.yarnpkg.com/workerpool/-/workerpool-6.1.5.tgz#0f7cf076b6215fd7e1da903ff6f22ddd1886b581"
integrity sha512-XdKkCK0Zqc6w3iTxLckiuJ81tiD/o5rBE/m+nXpRCB+/Sq4DqkfXZ/x0jW02DG1tGsfUGXbTJyZDP+eu67haSw==
Update dependency mocha to v9
2021-06-07 20:05:28 +03:00
Update dependency nconf to v0.11.0
2020-11-25 12:06:19 +03:00
wrap-ansi@^7.0.0:
version "7.0.0"
resolved "https://registry.yarnpkg.com/wrap-ansi/-/wrap-ansi-7.0.0.tgz#67e145cff510a6a6984bdf1152911d69d2eb9e43"
integrity sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==
dependencies:
ansi-styles "^4.0.0"
string-width "^4.1.0"
strip-ansi "^6.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
wrappy@1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/wrappy/-/wrappy-1.0.2.tgz#b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-tSQ9jz7BqjXxNkYFvA0QNuMKtp8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
write@1.0.3:
version "1.0.3"
resolved "https://registry.yarnpkg.com/write/-/write-1.0.3.tgz#0800e14523b923a387e415123c865616aae0f5c3"
integrity sha512-/lg70HAjtkUgWPVZhZcm+T4hkL8Zbtp1nFNOn3lRrxnlv50SRBv7cR7RqR+GMsd3hUXy9hWBo4CHTbFTcOYwig==
dependencies:
mkdirp "^0.5.1"
Lock file maintenance
2021-08-02 05:46:09 +03:00
ws@^7.4.6:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "7.5.5"
resolved "https://registry.yarnpkg.com/ws/-/ws-7.5.5.tgz#8b4bc4af518cfabd0473ae4f99144287b33eb881"
integrity sha512-BAkMFcAzl8as1G/hArkxOxq3G7pjUqQ3gzYbLL0/5zNkph70e+lCoxBGnm6AW1+/aiNeV4fnKqZ8m4GZewmH2w==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update metascraper to v5.24.2
2021-08-16 14:12:26 +03:00
ws@^8.0.0:
Lock file maintenance
2021-09-20 03:12:18 +03:00
version "8.2.2"
resolved "https://registry.yarnpkg.com/ws/-/ws-8.2.2.tgz#ca684330c6dd6076a737250ed81ac1606cb0a63e"
integrity sha512-Q6B6H2oc8QY3llc3cB8kVmQ6pnJWVQbP7Q5algTcIxx7YEpc0oU4NBVHlztA7Ekzfhw2r0rPducMUiCGWKQRzw==
Update metascraper to v5.24.2
2021-08-16 14:12:26 +03:00
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
xml-name-validator@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/xml-name-validator/-/xml-name-validator-3.0.0.tgz#6ae73e06de4d8c6e47f9fb181f78d648ad457c6a"
integrity sha512-A5CUptxDsvxKJEU3yO6DuWBSJz/qizqzJKOMIfUJHETbBw/sFaDxgd6fxm1ewUaM0jZ444Fc5vC5ROYurg/4Pw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
xml@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/xml/-/xml-1.0.1.tgz#78ba72020029c5bc87b8a81a3cfcd74b4a2fc1e5"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-eLpyAgApxbyHuKgaPPzXS0ovweU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
xmlchars@^2.2.0:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "2.2.0"
resolved "https://registry.yarnpkg.com/xmlchars/-/xmlchars-2.2.0.tgz#060fe1bcb7f9c76fe2a17db86a9bc3ab894210cb"
integrity sha512-JZnDKK8B0RCDw84FNdDAIpZK+JuJw+s7Lz8nksI7SIuU3UXJJslUthsi+uWBUYOwPFwW7W7PRLRfUKpxjtjFCw==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
xregexp@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/xregexp/-/xregexp-2.0.0.tgz#52a63e56ca0b84a7f3a5f3d61872f126ad7a5943"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-UqY+VsoLhKfzpfPWGHLxJq16WUM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Revemod stray gulp dependency refs https://github.com/TryGhost/Ghost/commit/44a6e399dd137ac4a741619efec2a0f7f70c903f - The change seems unintentionall and prevents from clean revert of gscan commit
2021-06-17 15:11:50 +03:00
xtend@^4.0.0, xtend@^4.0.1:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "4.0.2"
resolved "https://registry.yarnpkg.com/xtend/-/xtend-4.0.2.tgz#bb72779f5fa465186b1f438f674fa347fdb5db54"
integrity sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency nconf to v0.11.0
2020-11-25 12:06:19 +03:00
y18n@^5.0.5:
Lock file maintenance
2021-05-05 18:56:03 +03:00
version "5.0.8"
resolved "https://registry.yarnpkg.com/y18n/-/y18n-5.0.8.tgz#7f4934d0f7ca8c56f95314939ddcd2dd91ce1d55"
integrity sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==
Update dependency nconf to v0.11.0
2020-11-25 12:06:19 +03:00
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
yallist@^2.0.0, yallist@^2.1.2:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/yallist/-/yallist-2.1.2.tgz#1c11f9218f076089a47dd512f93c6699a6a81d52"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-HBH5IY8HYImkfdUS+TxmmaaoHVI=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Lock file maintenance
2021-08-16 04:04:05 +03:00
yallist@^3.0.0, yallist@^3.0.2, yallist@^3.1.1:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "3.1.1"
resolved "https://registry.yarnpkg.com/yallist/-/yallist-3.1.1.tgz#dbb7daf9bfd8bac9ab45ebf602b8cbad0d5d08fd"
integrity sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency sharp to v0.23.2
2019-11-04 03:34:39 +03:00
yallist@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/yallist/-/yallist-4.0.0.tgz#9bb92790d9c0effec63be73519e11a35019a3a72"
integrity sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==
Update CSS preprocessors
2021-07-21 19:35:14 +03:00
yaml@^1.10.2:
Update dependency cssnano to v5
2021-04-15 16:39:16 +03:00
version "1.10.2"
resolved "https://registry.yarnpkg.com/yaml/-/yaml-1.10.2.tgz#2301c5ffbf12b467de8da2333a459e29e7920e4b"
integrity sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==
Lock file maintenance
2021-05-05 18:56:03 +03:00
yargs-parser@20.2.4:
Update dependency nconf to v0.11.0
2020-11-25 12:06:19 +03:00
version "20.2.4"
resolved "https://registry.yarnpkg.com/yargs-parser/-/yargs-parser-20.2.4.tgz#b42890f14566796f85ae8e3a25290d205f154a54"
integrity sha512-WOkpgNhPTlE73h4VFAFsOnomJVaovO8VqLDzy5saChRBFQFBoMYirowyW+Q9HB4HFF4Z7VZTiG3iSzJJA29yRA==
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
yargs-parser@^20.2.2, yargs-parser@^20.2.7:
Lock file maintenance
2021-07-05 04:25:22 +03:00
version "20.2.9"
resolved "https://registry.yarnpkg.com/yargs-parser/-/yargs-parser-20.2.9.tgz#2eb7dc3b0289718fc295f362753845c41a0c94ee"
integrity sha512-y11nGElTIV+CT3Zv9t7VKl+Q3hTQoT9a1Qzezhhl6Rp21gJ/IVTW7Z3y9EWXhuUBC2Shnf+DX0antecpAwSP8w==
Lock file maintenance
2021-05-05 18:56:03 +03:00
Update dependency mocha to v8.2.0
2020-10-17 00:23:19 +03:00
yargs-unparser@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/yargs-unparser/-/yargs-unparser-2.0.0.tgz#f131f9226911ae5d9ad38c432fe809366c2325eb"
integrity sha512-7pRTIA9Qc1caZ0bZ6RYRGbHJthJWuakf+WmHK0rVeLkNrrGhfoabBNdue6kdINI6r4if7ocq9aD/n7xwKOdzOA==
Update dependency mocha to v8.1.0
2020-07-30 23:37:56 +03:00
dependencies:
Update dependency mocha to v8.2.0
2020-10-17 00:23:19 +03:00
camelcase "^6.0.0"
decamelize "^4.0.0"
flat "^5.0.2"
is-plain-obj "^2.1.0"
Update dependency mocha to v8.1.0
2020-07-30 23:37:56 +03:00
Added c8 coverage to unit tests no issue - coverage allows us to see how much of our code we're hitting in tests and it's time we started to get visibility on this in Ghost - we can then make informed decisions on which well-tested internal libraries can be pulled out into their own packages - this commit: - adds the c8 dev dependency to Ghost - prepends the `test:unit` command with c8 with the `text-summary` reporter - adds a `coverage:unit` command to get the `text` report - you can do `yarn coverage:unit --reporter html` to get a HTML report etc - uses this new test coverage reporter command in CI tests
2021-08-20 13:06:50 +03:00
yargs@16.2.0, yargs@^16.1.1, yargs@^16.2.0:
Update dependency mocha to v8.3.0
2021-02-11 22:44:24 +03:00
version "16.2.0"
resolved "https://registry.yarnpkg.com/yargs/-/yargs-16.2.0.tgz#1c82bf0f6b6a66eafce7ef30e376f49a12477f66"
integrity sha512-D1mvvtDG0L5ft/jGWkLpG1+m0eQxOfaBvTNELraWj22wSVUMWxZUvYgJYcKh6jGGIkJFhH4IZPQhR4TKpc8mBw==
dependencies:
cliui "^7.0.2"
escalade "^3.1.1"
get-caller-file "^2.0.5"
require-directory "^2.1.1"
string-width "^4.2.0"
y18n "^5.0.5"
yargs-parser "^20.2.2"
Update dependency @tryghost/zip to v1
2020-04-08 14:57:26 +03:00
yauzl@^2.10.0:
version "2.10.0"
resolved "https://registry.yarnpkg.com/yauzl/-/yauzl-2.10.0.tgz#c7eb17c93e112cb1086fa6d8e51fb0667b79a5f9"
integrity sha1-x+sXyT4RLLEIb6bY5R+wZnt5pfk=
dependencies:
buffer-crc32 "~0.2.3"
fd-slicer "~1.1.0"
Lock file maintenance
2021-05-05 18:56:03 +03:00
yocto-queue@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/yocto-queue/-/yocto-queue-0.1.0.tgz#0294eb3dee05028d31ee1a5fa2c556a6aaf10a1b"
integrity sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==
Added support for jobs defined as modules no issue - These changes should allow easy testing of scheduled jobs and provide an implementation example for future jobs within Ghost - Added experimental support to run jobs based on functions defined in modules - Extendeded testmode "schedule" endpoint with an optional job name parameter which picks up job from "jobs" folder - Adjusted scheduleJob method use and passed "schedule" as first parameter - Bumped job-manager version to allow for all new functionality
2020-11-10 07:29:35 +03:00
Update dependency @tryghost/job-manager to v0.8.3
2021-04-14 13:12:39 +03:00
yup@0.32.9:
version "0.32.9"
resolved "https://registry.yarnpkg.com/yup/-/yup-0.32.9.tgz#9367bec6b1b0e39211ecbca598702e106019d872"
integrity sha512-Ci1qN+i2H0XpY7syDQ0k5zKQ/DoxO0LzPg8PAR/X4Mpj6DqaeCoIYEEjDJwhArh3Fa7GWbQQVDZKeXYlSH4JMg==
Bumped job-manager version to 0.7.0 closes https://github.com/TryGhost/Ghost-Utils/issues/122
2021-01-06 07:47:57 +03:00
dependencies:
"@babel/runtime" "^7.10.5"
"@types/lodash" "^4.14.165"
lodash "^4.17.20"
Update dependency @tryghost/job-manager to v0.8.3
2021-04-14 13:12:39 +03:00
lodash-es "^4.17.15"
Bumped job-manager version to 0.7.0 closes https://github.com/TryGhost/Ghost-Utils/issues/122
2021-01-06 07:47:57 +03:00
nanoclone "^0.2.1"
property-expr "^2.0.4"
toposort "^2.0.2"
Update dependency @tryghost/zip to v1.1.0 closes #11794 - Update to use the latest version of zip, which has dotfile support
2020-05-08 18:46:15 +03:00
zip-stream@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/zip-stream/-/zip-stream-3.0.1.tgz#cb8db9d324a76c09f9b76b31a12a48638b0b9708"
integrity sha512-r+JdDipt93ttDjsOVPU5zaq5bAyY+3H19bDrThkvuVxC0xMQzU1PJcS6D+KrP3u96gH9XLomcHPb+2skoDjulQ==
dependencies:
archiver-utils "^2.1.0"
compress-commons "^3.0.0"
readable-stream "^3.6.0"
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 17:46:02 +03:00
zip-stream@^4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/zip-stream/-/zip-stream-4.1.0.tgz#51dd326571544e36aa3f756430b313576dc8fc79"
integrity sha512-zshzwQW7gG7hjpBlgeQP9RuyPGNxvJdzR8SUM3QhxCnLjWN2E7j3dOvpeDcQoETfHx0urRS7EtmVToql7YpU4A==
dependencies:
archiver-utils "^2.1.0"
compress-commons "^4.1.0"
readable-stream "^3.6.0"
Reference in New Issue Copy Permalink