TryGhost/Ghost
1
0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2024-12-01 05:50:35 +03:00
Code Issues Projects Releases Wiki Activity
4ee2be4b19
Ghost/yarn.lock

9794 lines
397 KiB
Plaintext
Raw Normal View History

✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
# yarn lockfile v1
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
"@babel/code-frame@^7.0.0":
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "7.5.5"
resolved "https://registry.yarnpkg.com/@babel/code-frame/-/code-frame-7.5.5.tgz#bc0782f6d69f7b7d49531219699b988f669a8f9d"
integrity sha512-27d4lZoomVyo51VegxI20xZPuSHusqbQag/ztrBC7wegWoQ1nLREPVSKSW8byhTlzTKyNE4ifaTA6lCp7JjpFw==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
"@babel/highlight" "^7.0.0"
"@babel/highlight@^7.0.0":
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "7.5.0"
resolved "https://registry.yarnpkg.com/@babel/highlight/-/highlight-7.5.0.tgz#56d11312bd9248fa619591d02472be6e8cb32540"
integrity sha512-7dV4eu9gBxoM0dAnj/BCFDW9LFU0zvTrkq0ugM7pnHEgguOEeOz1so2ZghEdzviYzQEED0r4EAgpsBChKy1TRQ==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
chalk "^2.0.0"
esutils "^2.0.2"
js-tokens "^4.0.0"
Update dependency knex-migrator to v3.4.3
2020-04-08 09:43:10 +03:00
"@babel/polyfill@^7.4.4":
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "7.6.0"
resolved "https://registry.yarnpkg.com/@babel/polyfill/-/polyfill-7.6.0.tgz#6d89203f8b6cd323e8d946e47774ea35dc0619cc"
integrity sha512-q5BZJI0n/B10VaQQvln1IlDK3BTBJFbADx7tv+oXDPIDZuTo37H5Adb9jhlXm/fEN4Y7/64qD9mnrJJG7rmaTw==
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
dependencies:
core-js "^2.6.5"
regenerator-runtime "^0.13.2"
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
"@ember-data/rfc395-data@^0.0.4":
version "0.0.4"
resolved "https://registry.yarnpkg.com/@ember-data/rfc395-data/-/rfc395-data-0.0.4.tgz#ecb86efdf5d7733a76ff14ea651a1b0ed1f8a843"
integrity sha512-tGRdvgC9/QMQSuSuJV45xoyhI0Pzjm7A9o/MVVA3HakXIImJbbzx/k/6dO9CUEQXIyS2y0fW6C1XaYOG7rY0FQ==
Update dependency csv-parser to v2.3.1
2019-09-30 03:35:43 +03:00
"@hapi/address@^2.1.2":
version "2.1.2"
resolved "https://registry.yarnpkg.com/@hapi/address/-/address-2.1.2.tgz#1c794cd6dbf2354d1eb1ef10e0303f573e1c7222"
integrity sha512-O4QDrx+JoGKZc6aN64L04vqa7e41tIiLU+OvKdcYaEMP97UttL0f9GIi9/0A4WAMx0uBd6SidDIhktZhgOcN8Q==
"@hapi/formula@^1.2.0":
version "1.2.0"
resolved "https://registry.yarnpkg.com/@hapi/formula/-/formula-1.2.0.tgz#994649c7fea1a90b91a0a1e6d983523f680e10cd"
integrity sha512-UFbtbGPjstz0eWHb+ga/GM3Z9EzqKXFWIbSOFURU0A/Gku0Bky4bCk9/h//K2Xr3IrCfjFNhMm4jyZ5dbCewGA==
"@hapi/hoek@8.x.x", "@hapi/hoek@^8.2.4":
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "8.3.0"
resolved "https://registry.yarnpkg.com/@hapi/hoek/-/hoek-8.3.0.tgz#2b9db1cd00f3891005c77b3a8d608b88a6d0aa4d"
integrity sha512-C0QL9bmgUXTSuf8nDeGrpMjtJG7tPUr8wG6/wxPbP62tGwCwQtdMSJYfESowmY4P3Hn593f+8OzNY5bckcu/LQ==
Update dependency csv-parser to v2.3.1
2019-09-30 03:35:43 +03:00
"@hapi/joi@^16.1.4":
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "16.1.7"
resolved "https://registry.yarnpkg.com/@hapi/joi/-/joi-16.1.7.tgz#360857223a87bb1f5f67691537964c1b4908ed93"
integrity sha512-anaIgnZhNooG3LJLrTFzgGALTiO97zRA1UkvQHm9KxxoSiIzCozB3RCNCpDnfhTJD72QlrHA8nwGmNgpFFCIeg==
Update dependency csv-parser to v2.3.1
2019-09-30 03:35:43 +03:00
dependencies:
"@hapi/address" "^2.1.2"
"@hapi/formula" "^1.2.0"
"@hapi/hoek" "^8.2.4"
"@hapi/pinpoint" "^1.0.2"
"@hapi/topo" "^3.1.3"
"@hapi/pinpoint@^1.0.2":
version "1.0.2"
resolved "https://registry.yarnpkg.com/@hapi/pinpoint/-/pinpoint-1.0.2.tgz#025b7a36dbbf4d35bf1acd071c26b20ef41e0d13"
integrity sha512-dtXC/WkZBfC5vxscazuiJ6iq4j9oNx1SHknmIr8hofarpKUZKmlUVYVIhNVzIEgK5Wrc4GMHL5lZtt1uS2flmQ==
"@hapi/topo@^3.1.3":
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "3.1.5"
resolved "https://registry.yarnpkg.com/@hapi/topo/-/topo-3.1.5.tgz#3baea17e456530edad69a75c3fc7cde97dd6d331"
integrity sha512-bi9m1jrui9LlvtVdLaHv0DqeOoe+I8dep+nEcTgW6XxJHL3xArQcilYz3tIp0cRC4gWlsVtABK7vNKg4jzEmAA==
Update dependency csv-parser to v2.3.1
2019-09-30 03:35:43 +03:00
dependencies:
"@hapi/hoek" "8.x.x"
Update dependency @lodder/grunt-postcss to v2.0.2
2020-04-15 17:15:23 +03:00
"@lodder/grunt-postcss@2.0.2":
version "2.0.2"
resolved "https://registry.yarnpkg.com/@lodder/grunt-postcss/-/grunt-postcss-2.0.2.tgz#2815e178c154fc0d5597e9a1894a7f996966aab8"
integrity sha512-zWPI9w+6bUyVn2R3yDJhYfy19WJFNUeq4ZU4OPGdqxGkPOvkNMRLUorF9iuQXG2gKdUd3zQf78I2gnuspDDRVw==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
dependencies:
Update dependency @lodder/grunt-postcss to v2.0.2
2020-04-15 17:15:23 +03:00
diff "^4.0.2"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
kleur "^3.0.3"
maxmin "^2.1.0"
Update dependency @lodder/grunt-postcss to v2.0.2
2020-04-15 17:15:23 +03:00
postcss "^7.0.27"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
"@metascraper/helpers@^5.11.9":
version "5.11.9"
resolved "https://registry.yarnpkg.com/@metascraper/helpers/-/helpers-5.11.9.tgz#40113c271cacad99f3c75bd410156c83f41d0e5f"
integrity sha512-M5rVnrOdNVcygBTMbvfIyeik5TItdm/5Og9jN6KtSlK1e2N8bsuTrvUR7S0pQa288v1IKJRlUSUhYGv0rASgog==
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
dependencies:
audio-extensions "0.0.0"
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
chrono-node "~1.4.5"
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
condense-whitespace "~2.0.0"
entities "~2.0.0"
file-extension "~4.0.5"
has-values "~2.0.1"
image-extensions "~1.1.0"
is-relative-url "~3.0.0"
is-uri "~1.2.0"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
iso-639-3 "~2.0.0"
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
isostring "0.0.1"
lodash "~4.17.15"
memoize-one "~5.1.1"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
mime-types "~2.1.26"
normalize-url "~5.0.0"
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
smartquotes "~2.3.1"
Update metascraper to v5.11.8
2020-04-06 03:17:00 +03:00
title "~3.4.2"
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
truncate "~2.1.0"
url-regex "~5.0.0"
video-extensions "~1.1.0"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
"@nexes/mongo-knex@0.3.0":
version "0.3.0"
resolved "https://registry.yarnpkg.com/@nexes/mongo-knex/-/mongo-knex-0.3.0.tgz#e0078f8ddf7fcd4d907fe5cf2390644218753cf0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-LgPWH4mR+IWYh1/Y/ob22kVMYVBY2k/evE/QdXYifQcEOd2G0NRggRB7SQX8kLQ024FcjtIMfRXC3UjzFamUcw==
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
debug "^4.1.0"
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
lodash "^4.17.10"
Installed @nexes/nql@0.3.0
2019-08-01 12:58:38 +03:00
"@nexes/mongo-utils@0.2.1":
version "0.2.1"
resolved "https://registry.yarnpkg.com/@nexes/mongo-utils/-/mongo-utils-0.2.1.tgz#746d004fc17741b50e945d76e9ab53496ffab15b"
integrity sha512-g/8IpnxldGbog3yTwZg1tD+6zRLbGmYDkotZiDg3O5eLxQxNXZzoP0lmv4DDfPU1Bc8sh9JlSjt+xPrOoXlIXw==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
dependencies:
bluebird "^3.5.3"
ghost-ignition "^2.9.6"
lodash "^4.17.11"
✨Added advanced filtering to Dynamic Routing (#9757) refs #9601, refs #9742 - Upgraded NQL to 0.1.0 - The new version of NQL supports aliases e.g. `tag: tags.slug`, which makes it possible to define `filter=tag:support` - Furthermore, this allows us to support advanced filtering like tag:[a,b] - In dynamic routing, we use mingo via NQL which has a slightly different feature set to GQL in the API: - AND NOT, OR and other advanced logic combos DO work on joined tables - Counts are not yet supported - The Dynamic Routing beta docs should describe that API filtering and Dynamic Routing filtering is different
2018-08-03 14:15:16 +03:00
"@nexes/nql-lang@0.0.1":
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
version "0.0.1"
✨Added advanced filtering to Dynamic Routing (#9757) refs #9601, refs #9742 - Upgraded NQL to 0.1.0 - The new version of NQL supports aliases e.g. `tag: tags.slug`, which makes it possible to define `filter=tag:support` - Furthermore, this allows us to support advanced filtering like tag:[a,b] - In dynamic routing, we use mingo via NQL which has a slightly different feature set to GQL in the API: - AND NOT, OR and other advanced logic combos DO work on joined tables - Counts are not yet supported - The Dynamic Routing beta docs should describe that API filtering and Dynamic Routing filtering is different
2018-08-03 14:15:16 +03:00
resolved "https://registry.yarnpkg.com/@nexes/nql-lang/-/nql-lang-0.0.1.tgz#a13c023873f9bc11b9e4e284449c6cfbeccc8011"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-oTwCOHP5vBG55OKERJxs++zMgBE=
✨Added advanced filtering to Dynamic Routing (#9757) refs #9601, refs #9742 - Upgraded NQL to 0.1.0 - The new version of NQL supports aliases e.g. `tag: tags.slug`, which makes it possible to define `filter=tag:support` - Furthermore, this allows us to support advanced filtering like tag:[a,b] - In dynamic routing, we use mingo via NQL which has a slightly different feature set to GQL in the API: - AND NOT, OR and other advanced logic combos DO work on joined tables - Counts are not yet supported - The Dynamic Routing beta docs should describe that API filtering and Dynamic Routing filtering is different
2018-08-03 14:15:16 +03:00
Installed @nexes/nql@0.3.0
2019-08-01 12:58:38 +03:00
"@nexes/nql@0.3.0":
version "0.3.0"
resolved "https://registry.yarnpkg.com/@nexes/nql/-/nql-0.3.0.tgz#12a0506b3e112561503091a9aad8cdca9784d80d"
integrity sha512-Y5DxRwoZKyk/HsX4ZDrIjcqeaR9le+x/Sfbw08/GlPiITnO4ukoqua9Cs0LgJ/cuvlo6DDDW4g+z/1y9+U0ZCA==
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
"@nexes/mongo-knex" "0.3.0"
Installed @nexes/nql@0.3.0
2019-08-01 12:58:38 +03:00
"@nexes/mongo-utils" "0.2.1"
✨Added advanced filtering to Dynamic Routing (#9757) refs #9601, refs #9742 - Upgraded NQL to 0.1.0 - The new version of NQL supports aliases e.g. `tag: tags.slug`, which makes it possible to define `filter=tag:support` - Furthermore, this allows us to support advanced filtering like tag:[a,b] - In dynamic routing, we use mingo via NQL which has a slightly different feature set to GQL in the API: - AND NOT, OR and other advanced logic combos DO work on joined tables - Counts are not yet supported - The Dynamic Routing beta docs should describe that API filtering and Dynamic Routing filtering is different
2018-08-03 14:15:16 +03:00
"@nexes/nql-lang" "0.0.1"
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
mingo "2.2.2"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
"@segment/loosely-validate-event@^2.0.0":
version "2.0.0"
resolved "https://registry.yarnpkg.com/@segment/loosely-validate-event/-/loosely-validate-event-2.0.0.tgz#87dfc979e5b4e7b82c5f1d8b722dfd5d77644681"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-ZMCSfztDBqwotkl848ODgVcAmN4OItEWDCkshcKz0/W6gGSQayuuCtWV/MlodFivAZD793d6UgANd6wCXUfrIw==
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
dependencies:
component-type "^1.2.1"
join-component "^1.1.0"
Update dependency @sentry/node to v5.15.4
2020-03-27 16:49:59 +03:00
"@sentry/apm@5.15.4":
version "5.15.4"
resolved "https://registry.yarnpkg.com/@sentry/apm/-/apm-5.15.4.tgz#59af766d2bb4c9d98eda5ddba7a32a79ecc807a2"
integrity sha512-gcW225Jls1ShyBXMWN6zZyuVJwBOIQ63sI+URI2NSFsdpBpdpZ8yennIm+oMlSfb25Nzt9SId7TRSjPhlSbTZQ==
dependencies:
"@sentry/browser" "5.15.4"
"@sentry/hub" "5.15.4"
"@sentry/minimal" "5.15.4"
"@sentry/types" "5.15.4"
"@sentry/utils" "5.15.4"
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
tslib "^1.9.3"
Update dependency @sentry/node to v5.15.4
2020-03-27 16:49:59 +03:00
"@sentry/browser@5.15.4":
version "5.15.4"
resolved "https://registry.yarnpkg.com/@sentry/browser/-/browser-5.15.4.tgz#5a7e7bad088556665ed8e69bceb0e18784e4f6c7"
integrity sha512-l/auT1HtZM3KxjCGQHYO/K51ygnlcuOrM+7Ga8gUUbU9ZXDYw6jRi0+Af9aqXKmdDw1naNxr7OCSy6NBrLWVZw==
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
dependencies:
Update dependency @sentry/node to v5.15.4
2020-03-27 16:49:59 +03:00
"@sentry/core" "5.15.4"
"@sentry/types" "5.15.4"
"@sentry/utils" "5.15.4"
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
tslib "^1.9.3"
Update dependency @sentry/node to v5.15.4
2020-03-27 16:49:59 +03:00
"@sentry/core@5.15.4":
version "5.15.4"
resolved "https://registry.yarnpkg.com/@sentry/core/-/core-5.15.4.tgz#08b617e093a636168be5aebad141d1f744217085"
integrity sha512-9KP4NM4SqfV5NixpvAymC7Nvp36Zj4dU2fowmxiq7OIbzTxGXDhwuN/t0Uh8xiqlkpkQqSECZ1OjSFXrBldetQ==
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
dependencies:
Update dependency @sentry/node to v5.15.4
2020-03-27 16:49:59 +03:00
"@sentry/hub" "5.15.4"
"@sentry/minimal" "5.15.4"
"@sentry/types" "5.15.4"
"@sentry/utils" "5.15.4"
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
tslib "^1.9.3"
Update dependency @sentry/node to v5.15.4
2020-03-27 16:49:59 +03:00
"@sentry/hub@5.15.4":
version "5.15.4"
resolved "https://registry.yarnpkg.com/@sentry/hub/-/hub-5.15.4.tgz#cb64473725a60eec63b0be58ed1143eaaf894bee"
integrity sha512-1XJ1SVqadkbUT4zLS0TVIVl99si7oHizLmghR8LMFl5wOkGEgehHSoOydQkIAX2C7sJmaF5TZ47ORBHgkqclUg==
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
dependencies:
Update dependency @sentry/node to v5.15.4
2020-03-27 16:49:59 +03:00
"@sentry/types" "5.15.4"
"@sentry/utils" "5.15.4"
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
tslib "^1.9.3"
Update dependency @sentry/node to v5.15.4
2020-03-27 16:49:59 +03:00
"@sentry/minimal@5.15.4":
version "5.15.4"
resolved "https://registry.yarnpkg.com/@sentry/minimal/-/minimal-5.15.4.tgz#113f01fefb86b7830994c3dfa7ad4889ba7b2003"
integrity sha512-GL4GZ3drS9ge+wmxkHBAMEwulaE7DMvAEfKQPDAjg2p3MfcCMhAYfuY4jJByAC9rg9OwBGGehz7UmhWMFjE0tw==
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
dependencies:
Update dependency @sentry/node to v5.15.4
2020-03-27 16:49:59 +03:00
"@sentry/hub" "5.15.4"
"@sentry/types" "5.15.4"
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
tslib "^1.9.3"
Update dependency @sentry/node to v5.15.4
2020-03-27 16:49:59 +03:00
"@sentry/node@5.15.4":
version "5.15.4"
resolved "https://registry.yarnpkg.com/@sentry/node/-/node-5.15.4.tgz#e7bc3962d321a12b633743200165ca5f1757cb68"
integrity sha512-OfdhNEvOJZ55ZkCUcVgctjaZkOw7rmLzO5VyDTSgevA4uLsPaTNXSAeK2GSQBXc5J0KdRpNz4sSIyuxOS4Z7Vg==
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
dependencies:
Update dependency @sentry/node to v5.15.4
2020-03-27 16:49:59 +03:00
"@sentry/apm" "5.15.4"
"@sentry/core" "5.15.4"
"@sentry/hub" "5.15.4"
"@sentry/types" "5.15.4"
"@sentry/utils" "5.15.4"
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
cookie "^0.3.1"
https-proxy-agent "^4.0.0"
lru_map "^0.3.3"
tslib "^1.9.3"
Update dependency @sentry/node to v5.15.4
2020-03-27 16:49:59 +03:00
"@sentry/types@5.15.4":
version "5.15.4"
resolved "https://registry.yarnpkg.com/@sentry/types/-/types-5.15.4.tgz#37f30e35b06e8e12ad1101f1beec3e9b88ca1aab"
integrity sha512-quPHPpeAuwID48HLPmqBiyXE3xEiZLZ5D3CEbU3c3YuvvAg8qmfOOTI6z4Z3Eedi7flvYpnx3n7N3dXIEz30Eg==
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
Update dependency @sentry/node to v5.15.4
2020-03-27 16:49:59 +03:00
"@sentry/utils@5.15.4":
version "5.15.4"
resolved "https://registry.yarnpkg.com/@sentry/utils/-/utils-5.15.4.tgz#02865ab3c9b745656cea0ab183767ec26c96f6e6"
integrity sha512-lO8SLBjrUDGADl0LOkd55R5oL510d/1SaI08/IBHZCxCUwI4TiYo5EPECq8mrj3XGfgCyq9osw33bymRlIDuSQ==
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
dependencies:
Update dependency @sentry/node to v5.15.4
2020-03-27 16:49:59 +03:00
"@sentry/types" "5.15.4"
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
tslib "^1.9.3"
Switched to extracted `@tryghost/mobiledoc-dom-renderer` package no issue - moved `mobiledoc.renderers.mobiledocHtmlRenderer` to `mobiledoc.mobiledocHtmlRenderer` so that it's easier for the getter to access the parent objects getters - removed all tests and dependencies that now live in @tryghost/mobiledoc-dom-renderer - kept the `mobiledocHtmlRenderer` test because that's testing that we've correctly wired up our cards and atoms and the output is what we expect
2020-04-08 20:21:15 +03:00
"@simple-dom/document@^1.4.0":
version "1.4.0"
resolved "https://registry.yarnpkg.com/@simple-dom/document/-/document-1.4.0.tgz#af60855f957f284d436983798ef1006cca1a1678"
integrity sha512-/RUeVH4kuD3rzo5/91+h4Z1meLSLP66eXqpVAw/4aZmYozkeqUkMprq0znL4psX/adEed5cBgiNJcfMz/eKZLg==
dependencies:
"@simple-dom/interface" "^1.4.0"
"@simple-dom/interface@^1.4.0":
version "1.4.0"
resolved "https://registry.yarnpkg.com/@simple-dom/interface/-/interface-1.4.0.tgz#e8feea579232017f89b0138e2726facda6fbb71f"
integrity sha512-l5qumKFWU0S+4ZzMaLXFU8tQZsicHEMEyAxI5kDFGhJsRqDwe0a7/iPA/GdxlGyDKseQQAgIz5kzU7eXTrlSpA==
"@simple-dom/parser@^1.4.0":
version "1.4.0"
resolved "https://registry.yarnpkg.com/@simple-dom/parser/-/parser-1.4.0.tgz#b1fee1a23f48a37d6bdd98f5242db0cab5b67abc"
integrity sha512-TNjDkOehueRIKr1df416qk9ELj+qWuVVJNIT25y1aZg3pQvxv4UPGrgaDFte7dsWBTbF3V8NYPNQ5FDUZQ8Wlg==
dependencies:
"@simple-dom/interface" "^1.4.0"
"@simple-dom/serializer@^1.4.0":
version "1.4.0"
resolved "https://registry.yarnpkg.com/@simple-dom/serializer/-/serializer-1.4.0.tgz#98470f357f418d72b1a1ec78d68191e60aefe215"
integrity sha512-mI1yRahsVs8atXLiQksineDsFEFqeG7RHwnnBTDOK6inbzl4tZQgjR+Z7edjgIJq5j5RhZvwPI6EuCji9B3eQw==
dependencies:
"@simple-dom/interface" "^1.4.0"
"@simple-dom/void-map@^1.4.0":
version "1.4.0"
resolved "https://registry.yarnpkg.com/@simple-dom/void-map/-/void-map-1.4.0.tgz#f15f07568fe1076740407266aa5e6eac249bc78c"
integrity sha512-VDhLEyVCbuhOBBgHol9ShzIv9O8UCzdXeH4FoXu2DOcu/nnvTjLTck+BgXsCLv5ynDiUdoqsREEVFnoyPpFKVw==
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
"@sindresorhus/is@^0.14.0":
version "0.14.0"
resolved "https://registry.yarnpkg.com/@sindresorhus/is/-/is-0.14.0.tgz#9fb3a3cf3132328151f353de4632e01e52102bea"
integrity sha512-9NET910DNaIPngYnLLPeg+Ogzqsi9uM4mSboU5y6p8S5DzMTVEsJZrawi+BoDNUVBa2DhJqQYUFvMDfgU062LQ==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
"@sindresorhus/is@^2.0.0":
version "2.1.0"
resolved "https://registry.yarnpkg.com/@sindresorhus/is/-/is-2.1.0.tgz#6ad4ca610f696098e92954ab431ff83bea0ce13f"
integrity sha512-lXKXfypKo644k4Da4yXkPCrwcvn6SlUW2X2zFbuflKHNjf0w9htru01bo26uMhleMXsDmnZ12eJLdrAZa9MANg==
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
"@sinonjs/commons@^1":
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "1.6.0"
resolved "https://registry.yarnpkg.com/@sinonjs/commons/-/commons-1.6.0.tgz#ec7670432ae9c8eb710400d112c201a362d83393"
integrity sha512-w4/WHG7C4WWFyE5geCieFJF6MZkbW4VAriol5KlmQXpAQdxvV0p26sqNZOW6Qyw6Y0l9K4g+cHvvczR2sEEpqg==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
type-detect "4.0.8"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
"@sinonjs/commons@^1.6.0", "@sinonjs/commons@^1.7.0":
version "1.7.1"
resolved "https://registry.yarnpkg.com/@sinonjs/commons/-/commons-1.7.1.tgz#da5fd19a5f71177a53778073978873964f49acf1"
integrity sha512-Debi3Baff1Qu1Unc3mjJ96MgpbwTn43S1+9yJ0llWygPwDNu2aaWBD6yc9y/Z8XDRNhx7U+u2UDg2OGQXkclUQ==
dependencies:
type-detect "4.0.8"
Update dependency sinon to v9.0.2
2020-04-08 14:48:38 +03:00
"@sinonjs/commons@^1.7.2":
version "1.7.2"
resolved "https://registry.yarnpkg.com/@sinonjs/commons/-/commons-1.7.2.tgz#505f55c74e0272b43f6c52d81946bed7058fc0e2"
integrity sha512-+DUO6pnp3udV/v2VfUWgaY5BIE1IfT7lLfeDzPVeMT1XKkaAp9LgSI9x5RtrFQoZ9Oi0PgXQQHPaoKu7dCjVxw==
dependencies:
type-detect "4.0.8"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
"@sinonjs/fake-timers@^6.0.0":
version "6.0.0"
resolved "https://registry.yarnpkg.com/@sinonjs/fake-timers/-/fake-timers-6.0.0.tgz#b64b0faadfdd01a6dcf0c4dcdb78438d86fa7dbf"
integrity sha512-atR1J/jRXvQAb47gfzSK8zavXy7BcpnYq21ALon0U99etu99vsir0trzIO3wpeLtW+LLVY6X7EkfVTbjGSH8Ww==
dependencies:
"@sinonjs/commons" "^1.7.0"
Update dependency sinon to v9.0.2
2020-04-08 14:48:38 +03:00
"@sinonjs/fake-timers@^6.0.1":
version "6.0.1"
resolved "https://registry.yarnpkg.com/@sinonjs/fake-timers/-/fake-timers-6.0.1.tgz#293674fccb3262ac782c7aadfdeca86b10c75c40"
integrity sha512-MZPUxrmFubI36XS1DI3qmI0YdN1gks62JtFZvxR67ljjSNCeK6U08Zx4msEWOXuofgqUt6zPHSi1H9fbjR/NRA==
dependencies:
"@sinonjs/commons" "^1.7.0"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
"@sinonjs/formatio@^5.0.0", "@sinonjs/formatio@^5.0.1":
version "5.0.1"
resolved "https://registry.yarnpkg.com/@sinonjs/formatio/-/formatio-5.0.1.tgz#f13e713cb3313b1ab965901b01b0828ea6b77089"
integrity sha512-KaiQ5pBf1MpS09MuA0kp6KBQt2JUOQycqVG1NZXvzeaXe5LGFqAKueIS0bw4w0P9r7KuBSVdUk5QjXsUdu2CxQ==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dependencies:
Lock file maintenance
2019-08-01 08:14:51 +03:00
"@sinonjs/commons" "^1"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
"@sinonjs/samsam" "^5.0.2"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
Update Test & linting packages
2020-03-21 02:17:28 +03:00
"@sinonjs/samsam@^5.0.2":
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
version "5.0.2"
resolved "https://registry.yarnpkg.com/@sinonjs/samsam/-/samsam-5.0.2.tgz#2c4772ec4a3a9b00971be32e843dc1be27a02c89"
integrity sha512-p3yrEVB5F/1wI+835n+X8llOGRgV8+jw5BHQ/cJoLBUXXZ5U8Tr5ApwPc4L4av/vjla48kVPoN0t6dykQm+Rvg==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
dependencies:
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
"@sinonjs/commons" "^1.6.0"
"@sinonjs/formatio" "^5.0.0"
lodash.get "^4.4.2"
type-detect "^4.0.8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
Update Test & linting packages
2020-03-21 02:17:28 +03:00
"@sinonjs/samsam@^5.0.3":
version "5.0.3"
resolved "https://registry.yarnpkg.com/@sinonjs/samsam/-/samsam-5.0.3.tgz#86f21bdb3d52480faf0892a480c9906aa5a52938"
integrity sha512-QucHkc2uMJ0pFGjJUDP3F9dq5dx8QIaqISl9QgwLOh6P9yv877uONPGXh/OH/0zmM3tW1JjuJltAZV2l7zU+uQ==
dependencies:
"@sinonjs/commons" "^1.6.0"
lodash.get "^4.4.2"
type-detect "^4.0.8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
"@sinonjs/text-encoding@^0.7.1":
version "0.7.1"
resolved "https://registry.yarnpkg.com/@sinonjs/text-encoding/-/text-encoding-0.7.1.tgz#8da5c6530915653f3a1f38fd5f101d8c3f8079c5"
integrity sha512-+iTbntw2IZPb/anVDbypzfQa+ay64MW0Zo8aJ8gZPWMMK6/OubMVb6lUPMagqjOPnmtauXnFCACVl3O7ogjeqQ==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
"@szmarczak/http-timer@^1.1.2":
version "1.1.2"
resolved "https://registry.yarnpkg.com/@szmarczak/http-timer/-/http-timer-1.1.2.tgz#b1665e2c461a2cd92f4c1bbf50d5454de0d4b421"
integrity sha512-XIB2XbzHTN6ieIjfIMV9hlVcfPU26s2vafYWQcZHWXHOxiaRZYEDKEwdl129Zyg50+foYV2jCgtrqSA6qNuNSA==
dependencies:
defer-to-connect "^1.0.1"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
"@szmarczak/http-timer@^4.0.0":
version "4.0.5"
resolved "https://registry.yarnpkg.com/@szmarczak/http-timer/-/http-timer-4.0.5.tgz#bfbd50211e9dfa51ba07da58a14cdfd333205152"
integrity sha512-PyRA9sm1Yayuj5OIoJ1hGt2YISX45w9WcFbh6ddT0Z/0yaFxOtGLInr4jUfU1EAFVs0Yfyfev4RNwBlUaHdlDQ==
dependencies:
defer-to-connect "^2.0.0"
Update dependency @tryghost/adapter-manager to v0.1.3
2020-04-16 16:44:40 +03:00
"@tryghost/adapter-manager@0.1.3":
version "0.1.3"
resolved "https://registry.yarnpkg.com/@tryghost/adapter-manager/-/adapter-manager-0.1.3.tgz#035ab063c1339fce6faf0587dcd3071353ff59ba"
integrity sha512-ag5nKtIpi62nvpV7yk7U/lFSSdOkulOu2r855rk/9jmQEf0cztXClpR7L8IVbIjTMgcL6l5ImMU1yce73n0H6Q==
Added adapter-manager service no-issue This services handles the registration and retrieval of adapters, it normalises the config to look like: { [adapterType]: { active: adapterName, [adapterName]: adapterConfig } }
2020-04-05 19:52:46 +03:00
dependencies:
Update dependency @tryghost/adapter-manager to v0.1.3
2020-04-16 16:44:40 +03:00
"@tryghost/errors" "^0.1.2"
Added adapter-manager service no-issue This services handles the registration and retrieval of adapters, it normalises the config to look like: { [adapterType]: { active: adapterName, [adapterName]: adapterConfig } }
2020-04-05 19:52:46 +03:00
Update dependency @tryghost/errors to v0.1.2
2020-04-16 18:26:26 +03:00
"@tryghost/errors@0.1.2", "@tryghost/errors@^0.1.2":
version "0.1.2"
resolved "https://registry.yarnpkg.com/@tryghost/errors/-/errors-0.1.2.tgz#aaf6c54923920825477f403839cb6551ad37b6d9"
integrity sha512-wwareSxmIprkNuFb+sFYBZ9vl8EEnIbV7an+35C3JBH0D1TUQ2LzaK6IFOowfc7JOQPxACeo+1Or8NHC1B/H0A==
Replaced image manipulation w/ @tryghost/image-transform (#11687) - moved image.manipulation lib to a new package called @tryghost/image-transform - new package has an updated API signature, so the method calls have changed but the underlying code is identical - removed the optional sharp dependency from Ghost, as this is now optionally required by the image-transform module
2020-03-25 20:33:03 +03:00
dependencies:
ghost-ignition "^4.1.0"
lodash "^4.17.15"
Update dependency @tryghost/helpers to v1.1.27
2020-04-13 19:21:25 +03:00
"@tryghost/helpers@1.1.27":
version "1.1.27"
resolved "https://registry.yarnpkg.com/@tryghost/helpers/-/helpers-1.1.27.tgz#4686e709971df432f08cf52db787f671ad182e3b"
integrity sha512-5DkGcbJHJopVk1S3zvEzPgy8WAHWysQHhUqVSL0dhfvUITcrQuwcqVERi72r/rT/gixqyb2lNBVIsSo1wevERA==
Updated to use count words/images helpers from SDK (#10686) refs #10618 - Added @tryghost/helpers dependency to use Ghost-SDK helpers - Updated countWords, countImages helpers and removed local copy
2019-04-16 05:30:01 +03:00
dependencies:
lodash-es "^4.17.11"
Update dependency @tryghost/html-to-mobiledoc to v0.7.0
2020-04-13 19:21:35 +03:00
"@tryghost/html-to-mobiledoc@0.7.0":
version "0.7.0"
resolved "https://registry.yarnpkg.com/@tryghost/html-to-mobiledoc/-/html-to-mobiledoc-0.7.0.tgz#318228591553bb9faca057096736caa78db38f8c"
integrity sha512-nS+xz791LlzVTzTX0zoBL630z1GN7fzlPWVZXIiNjcjjgsPqUGOVXTpnUi5WpOpo0x6JwQBe6H0PRSBhbnxcWA==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.7.0
2020-04-13 19:21:35 +03:00
"@tryghost/kg-parser-plugins" "0.10.0"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
"@tryghost/mobiledoc-kit" "^0.12.4-ghost.1"
Updated Ghost-SDK packages no issue
2020-04-03 12:43:35 +03:00
jsdom "16.2.2"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update dependency @tryghost/image-transform to v0.2.1
2020-04-16 21:17:13 +03:00
"@tryghost/image-transform@0.2.1":
version "0.2.1"
resolved "https://registry.yarnpkg.com/@tryghost/image-transform/-/image-transform-0.2.1.tgz#39a4faf730afeb47c7304c4b8aea5b3d71a1711c"
integrity sha512-Mdjqg34MMCWv2lXCYMRkCj/qdy/eLNWNucgJE0zcbMh0GnASe2ZhpTfusx80H0+xYNNH0vtpEFn/D9Vh3lG8pA==
Replaced image manipulation w/ @tryghost/image-transform (#11687) - moved image.manipulation lib to a new package called @tryghost/image-transform - new package has an updated API signature, so the method calls have changed but the underlying code is identical - removed the optional sharp dependency from Ghost, as this is now optionally required by the image-transform module
2020-03-25 20:33:03 +03:00
dependencies:
Update dependency @tryghost/image-transform to v0.2.1
2020-04-16 21:17:13 +03:00
"@tryghost/errors" "^0.1.2"
Replaced image manipulation w/ @tryghost/image-transform (#11687) - moved image.manipulation lib to a new package called @tryghost/image-transform - new package has an updated API signature, so the method calls have changed but the underlying code is identical - removed the optional sharp dependency from Ghost, as this is now optionally required by the image-transform module
2020-03-25 20:33:03 +03:00
bluebird "^3.7.2"
fs-extra "^9.0.0"
optionalDependencies:
sharp "^0.25.2"
Update dependency @tryghost/kg-card-factory to v1.0.2
2020-04-08 22:50:29 +03:00
"@tryghost/kg-card-factory@1.0.2":
version "1.0.2"
resolved "https://registry.yarnpkg.com/@tryghost/kg-card-factory/-/kg-card-factory-1.0.2.tgz#fd7ec000034090d95e8891de474dd71ed3431f14"
integrity sha512-inNg4C5C+Fa4rD7ze8/rz5qOBFrrmsnqKvp7xHe320oZIpMwUxJ/nGuzQyOY7LJl/oi4G6KDyHRSy6xFkHAtdQ==
Replaced mobiledoc cards with @tryghost/kg-default-cards no issue - moved card definitions to a new library `@tryghost/kg-default-cards` - moved `createCard` factory function to a new library `@tryghost/kg-card-factory`
2020-03-25 22:53:11 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.7
2020-04-10 23:16:30 +03:00
"@tryghost/kg-clean-basic-html@^0.1.8":
version "0.1.8"
resolved "https://registry.yarnpkg.com/@tryghost/kg-clean-basic-html/-/kg-clean-basic-html-0.1.8.tgz#487390463063fe56ff0cf4db7dc6137e70d13a02"
integrity sha512-xZiL3xvMwqjjeLxZwNhjOuZ1775Mf2yWZoGQQD50KjgqQjHqY2sct6ojpWhOaxxEJXcPxcD02p9hCkXQjsZ7ag==
✨ Added caption and language extraction for code blocks when converting HTML via API no issue - update @tryghost/html-to-mobiledoc to v0.3.0 - uses updated @tryghost/kg-parser-plugins that is now shared with Ghost-Admin
2019-05-03 13:55:38 +03:00
Switched to extracted `@tryghost/kg-default-atoms` package no issue - removed code that now lives in the external Koenig monorepo
2020-04-08 16:49:14 +03:00
"@tryghost/kg-default-atoms@1.0.0":
version "1.0.0"
resolved "https://registry.yarnpkg.com/@tryghost/kg-default-atoms/-/kg-default-atoms-1.0.0.tgz#d423a0f19a6989051bd6bbc9c8f104c88bd5c738"
integrity sha512-f6a8zIoL2w7aeZbeBj+0UPvFzE1Dd/zf3RGO+L4j/Kb4Z/yqOtoBWQun6I2H37XXoaqiiQc6Z3eW+L4iYSw1Ow==
Update dependency @tryghost/kg-default-cards to v1.1.0
2020-04-09 23:11:06 +03:00
"@tryghost/kg-default-cards@1.1.0":
version "1.1.0"
resolved "https://registry.yarnpkg.com/@tryghost/kg-default-cards/-/kg-default-cards-1.1.0.tgz#0a67380c801fe9bb8957284471c2dd40e2ace4c9"
integrity sha512-TrmEiku1t6Wn4dSSVoFM5+vGsBxU6A0dWtZBt+sbygLt0wVH85aLtJWkVe/bLmmkeypHTBFT7j4FBV/xFZExFA==
Replaced mobiledoc cards with @tryghost/kg-default-cards no issue - moved card definitions to a new library `@tryghost/kg-default-cards` - moved `createCard` factory function to a new library `@tryghost/kg-card-factory`
2020-03-25 22:53:11 +03:00
dependencies:
Update dependency @tryghost/kg-default-cards to v1.0.2
2020-04-09 00:16:46 +03:00
"@tryghost/kg-markdown-html-renderer" "^1.0.3"
Replaced mobiledoc cards with @tryghost/kg-default-cards no issue - moved card definitions to a new library `@tryghost/kg-default-cards` - moved `createCard` factory function to a new library `@tryghost/kg-card-factory`
2020-03-25 22:53:11 +03:00
"@tryghost/url-utils" "^0.6.14"
Update dependency @tryghost/kg-markdown-html-renderer to v1.0.3
2020-04-09 02:19:18 +03:00
"@tryghost/kg-markdown-html-renderer@1.0.3", "@tryghost/kg-markdown-html-renderer@^1.0.3":
Update dependency @tryghost/kg-default-cards to v1.0.2
2020-04-09 00:16:46 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/@tryghost/kg-markdown-html-renderer/-/kg-markdown-html-renderer-1.0.3.tgz#d70bab6af4c52dbb44a3565e26583a568ceb78ba"
integrity sha512-H/a9hvwCda1gUfjPchBQ7iFHkOb25E1JlAqg/UOK7SKI6zlWMEskdDj78jrfdC14+AP8MasrHKkfsyDaE/Pnbw==
dependencies:
markdown-it "^10.0.0"
markdown-it-footnote "^3.0.2"
markdown-it-lazy-headers "^0.1.3"
markdown-it-mark "^3.0.0"
Update dependency @tryghost/kg-markdown-html-renderer to v2.0.0 no issue - `version` integer parameter in the `render` method has been replaced with an `options` object parameter
2020-04-09 23:09:43 +03:00
"@tryghost/kg-mobiledoc-html-renderer@2.0.0":
version "2.0.0"
resolved "https://registry.yarnpkg.com/@tryghost/kg-mobiledoc-html-renderer/-/kg-mobiledoc-html-renderer-2.0.0.tgz#c7799110306b64858ba90c477bce117e13f59950"
integrity sha512-YH1VoCrPRf1Ze1CWH34FOP00e/KJ61Bf71E0SazDN92oIF2DXzBqpyycSNHin/+gOfik3wCqxJSFMbhDqGt8+A==
Switched to extracted `@tryghost/mobiledoc-dom-renderer` package no issue - moved `mobiledoc.renderers.mobiledocHtmlRenderer` to `mobiledoc.mobiledocHtmlRenderer` so that it's easier for the getter to access the parent objects getters - removed all tests and dependencies that now live in @tryghost/mobiledoc-dom-renderer - kept the `mobiledocHtmlRenderer` test because that's testing that we've correctly wired up our cards and atoms and the output is what we expect
2020-04-08 20:21:15 +03:00
dependencies:
mobiledoc-dom-renderer "^0.7.0"
simple-dom "^1.4.0"
Update dependency @tryghost/html-to-mobiledoc to v0.7.0
2020-04-13 19:21:35 +03:00
"@tryghost/kg-parser-plugins@0.10.0":
version "0.10.0"
resolved "https://registry.yarnpkg.com/@tryghost/kg-parser-plugins/-/kg-parser-plugins-0.10.0.tgz#436e0a86a7722a18163da08b24679957bfcdd917"
integrity sha512-baXfkuoUA6+xkyov0P/2MtHgdlRJFu0AxJDCFtzboLFuf3zAcZj1zEsT2wTZB1WazWAGQk5MQXGim5MKOx2RGQ==
✨ Added caption and language extraction for code blocks when converting HTML via API no issue - update @tryghost/html-to-mobiledoc to v0.3.0 - uses updated @tryghost/kg-parser-plugins that is now shared with Ghost-Admin
2019-05-03 13:55:38 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.7
2020-04-10 23:16:30 +03:00
"@tryghost/kg-clean-basic-html" "^0.1.8"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
✨Added labels for Members (#11538) no issue * Updated sendEmailWithMagicLink syntax * Updated label name selection from theme * Updated migration version for labels * Added labels to export/import of members * Added member labels sanitization for case-insensitive duplicates * Fixed tests * Fixed label serialization bug on import * Bumped @tryghost/members-api to 0.15.0 * Fixed lint * Cleanup
2020-02-14 12:33:10 +03:00
"@tryghost/magic-link@^0.4.1":
version "0.4.1"
resolved "https://registry.yarnpkg.com/@tryghost/magic-link/-/magic-link-0.4.1.tgz#2abdab02538f8b8adbe1940b4fd2479510480e26"
integrity sha512-KprbecOkSK0iB4Q0Eav9R5fYF+KO0YQRcOoXdw+Vd77bx36vU15PzOVqO1lg931s172KVWpEhQoh6t5n58QrkQ==
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
dependencies:
Updated members-api@0.4.1 members-ssr@0.3.0 no-issue These versions contain the necessary changes for magic link signin
2019-09-03 13:28:28 +03:00
bluebird "^3.5.5"
ghost-ignition "^3.1.0"
jsonwebtoken "^8.5.1"
lodash "^4.17.15"
✨ Added custom currency support for Memer's plans no issue - Multiple currencies for membe plans were supported under the hood but never had a clear interface to manage them. This change allows to reference currently used currency and it's symbol from the theme layer with following syntax: `{{@price.currency}}` and `{{@price.currency_symbol}}
2020-03-04 08:15:21 +03:00
"@tryghost/members-api@0.18.0":
version "0.18.0"
resolved "https://registry.yarnpkg.com/@tryghost/members-api/-/members-api-0.18.0.tgz#7a7bd1b36d793c65f3cb687ff52649c79c6c7114"
integrity sha512-aymN/i26GHCQI8TtoAyHejJjPrsl+PYSaFTvIq+O57F/Gg8uAH7EJCXKQYUoZKz/95VbpwE3o7QdRWpRMBjEDg==
Updated members-api@0.4.1 members-ssr@0.3.0 no-issue These versions contain the necessary changes for magic link signin
2019-09-03 13:28:28 +03:00
dependencies:
✨Added labels for Members (#11538) no issue * Updated sendEmailWithMagicLink syntax * Updated label name selection from theme * Updated migration version for labels * Added labels to export/import of members * Added member labels sanitization for case-insensitive duplicates * Fixed tests * Fixed label serialization bug on import * Bumped @tryghost/members-api to 0.15.0 * Fixed lint * Cleanup
2020-02-14 12:33:10 +03:00
"@tryghost/magic-link" "^0.4.1"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
bluebird "^3.5.4"
body-parser "^1.19.0"
Installed @tryghost/members-api@0.8.3 no-issue This improves logging for webhook signature validation
2019-10-30 13:24:04 +03:00
cookies "^0.8.0"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
express "^4.16.4"
ghost-ignition "^3.1.0"
✨ Added capture of geolocation during member signup/signin no issue - updated `@tryghost/members-api` which now includes geolocation lookup from IP address during member signup and signin when geolocation data doesn't already exist
2020-02-27 13:46:37 +03:00
got "^9.6.0"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
jsonwebtoken "^8.5.1"
lodash "^4.17.11"
node-jose "^1.1.3"
Refactored members service logging and errors (#10919) * Installed @tryghost/members-ssr@0.2.1 refs https://github.com/TryGhost/Members/issues/38 This updates allows for dynamic access of the membersApi, which will be used in future when replacing the membersApi instance with a newly configured one. * Set the membersApiInstance logger to use common.logging refs https://github.com/TryGhost/Members/issues/38 Passes the Ghost logger to the members api, so that we can keep an eye on errors produced by the api. * Refactored memberService use to always use getter refs https://github.com/TryGhost/Members/issues/38 This will allow us to switch out the membersApi and the consumers of it to have the updated reference by going through a getter. * Installed @tryghost/members-api@0.3.0 refs https://github.com/TryGhost/Members/issues/38 Adds support for setting the logger * Uninstalled stripe@7.0.0 refs https://github.com/TryGhost/Members/issues/38 The stripe module is now a dep of members-api, as it should be * Updated members service to reconfigure settings refs https://github.com/TryGhost/Members/issues/38 Previously we were unable to stop an invalidly configured members api instance, now that we create a new instance, we can wait for the ready or error event and only switch it out then.
2019-07-18 10:37:11 +03:00
stripe "^7.4.0"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
Update dependency @tryghost/members-ssr to v0.7.4
2020-01-20 12:02:14 +03:00
"@tryghost/members-ssr@0.7.4":
version "0.7.4"
resolved "https://registry.yarnpkg.com/@tryghost/members-ssr/-/members-ssr-0.7.4.tgz#6e86ae1c37e06bd97c451bcf0410545a6750a813"
integrity sha512-7sJZqMD13YkS85eD3817xyHgudgteNxMJTTdtng9UvkQmLmDn5iNHGZ+b2Sf6k1DcGCVj87qutXMZEWgfNWweQ==
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
dependencies:
bluebird "^3.5.3"
concat-stream "^2.0.0"
Update dependency @tryghost/members-ssr to v0.7.2
2019-11-04 03:32:17 +03:00
cookies "^0.8.0"
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
ghost-ignition "^3.0.4"
jsonwebtoken "^8.5.1"
lodash "^4.17.11"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
"@tryghost/mobiledoc-kit@^0.12.4-ghost.1":
version "0.12.4-ghost.1"
resolved "https://registry.yarnpkg.com/@tryghost/mobiledoc-kit/-/mobiledoc-kit-0.12.4-ghost.1.tgz#32060242b4c7e787a9605ba856454c6a26141925"
integrity sha512-c4aheSWH2Y7x4uSkAx08gbtvuEgPGjlu6v+FeUdSJZ1blEd+knL3zTcUAfeSiM6rgLEHxlNWtt+KFwotdf6rTA==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
mobiledoc-dom-renderer "0.7.0"
mobiledoc-text-renderer "0.4.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update dependency @tryghost/mw-session-from-token to v0.1.1
2020-04-16 19:50:40 +03:00
"@tryghost/mw-session-from-token@0.1.1":
version "0.1.1"
resolved "https://registry.yarnpkg.com/@tryghost/mw-session-from-token/-/mw-session-from-token-0.1.1.tgz#c6dc0d1d8b8b26169490bad5b7264150e36938c0"
integrity sha512-0uRnZyX32ivK4r5EriI3BQJQh++RHDc15mtXC/inQyIHv3J5n3X+hQWeOcTsI+v1ftjbgU+Im5ZOe0YTpPu7Ig==
Added support for token session to /ghost (#11709) no-issue * Added default for getting origin of request This function is used to attach the origin of the request to the session, and later check that requests using the session are coming from the same origin. This protects us against CSRF attacks as requests in the browser MUST originate from the same origin on which the user logged in. Previously, when we could not determine the origin we would return null, as a "safety" net. This updates the function to use a secure and sensible default - which is the origin of the Ghost-Admin application, and if that's not set - the origin of the Ghost application. This will make dealing with magic links simpler as you can not always guaruntee the existence of these headers when visiting via a hyperlink * Removed init fns and getters from session service This simplifies the code here, making it easier to read and maintain * Moved express-session initialisation to own file This is complex enough that it deserves its own module * Added createSessionFromToken to session service * Wired up the createSessionFromToken middleware
2020-04-06 12:49:14 +03:00
Update dependency gscan to v3.4.1
2020-04-06 20:10:36 +03:00
"@tryghost/pretty-cli@1.2.4":
version "1.2.4"
resolved "https://registry.yarnpkg.com/@tryghost/pretty-cli/-/pretty-cli-1.2.4.tgz#c66d6ec5b805218bcaa0071fbc8e61416ce64747"
integrity sha512-zRcfYbJ2mu9gfWAgcYxKPXbolR+gznlZv5gPWB6S4/HJ499CX51GAeGSiPw8Z939Kt+KjoneZClHkXJTSq2FxQ==
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
dependencies:
Update dependency gscan to v3.4.1
2020-04-06 20:10:36 +03:00
chalk "^3.0.0"
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
sywac "^1.2.1"
Update dependency @tryghost/session-service to v0.1.1
2020-04-16 23:15:01 +03:00
"@tryghost/session-service@0.1.1":
version "0.1.1"
resolved "https://registry.yarnpkg.com/@tryghost/session-service/-/session-service-0.1.1.tgz#520ba12494e761777a3303a04299e7dfb284affc"
integrity sha512-yBLk+UOrl0hC5RX2rD+l4WfHtrAENSsndEHP6ye+Qx8KkrPA5SbhTwz4mCUg8cO6RXtP774l0GrYj1AWmfA5rg==
Refactored session service (#11701) * Refactored SessionStore to use @tryghost/errors no-issue * Updated tests to test exposed API no-issue This will make refactoring easier, as we only have the "public" contract to maintain * Refactored session functionality to SessionService no-issue This splits the session logic away from the HTTP responding logic, which will allows us to decouple session creation/modification from the API. Eventually this can be used to create sessions based on magiclink style tokens. * Instantiated and exported the new SessionService no-issue * Refactored session middleware to take session service no-issue This removes duplication of code and makes the middleware more explicit that it's just a wrapper around the session service. * Updated to use external @tryghost/session-service no-issue
2020-04-02 17:27:31 +03:00
dependencies:
Update dependency @tryghost/session-service to v0.1.1
2020-04-16 23:15:01 +03:00
"@tryghost/errors" "^0.1.2"
Refactored session service (#11701) * Refactored SessionStore to use @tryghost/errors no-issue * Updated tests to test exposed API no-issue This will make refactoring easier, as we only have the "public" contract to maintain * Refactored session functionality to SessionService no-issue This splits the session logic away from the HTTP responding logic, which will allows us to decouple session creation/modification from the API. Eventually this can be used to create sessions based on magiclink style tokens. * Instantiated and exported the new SessionService no-issue * Refactored session middleware to take session service no-issue This removes duplication of code and makes the middleware more explicit that it's just a wrapper around the session service. * Updated to use external @tryghost/session-service no-issue
2020-04-02 17:27:31 +03:00
Update dependency @tryghost/social-urls to v0.1.9
2020-04-11 01:18:37 +03:00
"@tryghost/social-urls@0.1.9":
version "0.1.9"
resolved "https://registry.yarnpkg.com/@tryghost/social-urls/-/social-urls-0.1.9.tgz#40e6f7b2bd3a037c93e6027ae1add6c4425675ba"
integrity sha512-mlaFhecMWvQYpeN/hCS8s2p1+hQmf0WcpYykB3mwoLf6lsypShQzheMvACeTX+S8hEwOZxFQSR8XYyMKRxQ+IA==
Migrated to use @tryghost/social-urls package refs #10618 - /lib/social/urls was extracted into SDK to move more modules out of the core and reduce coupling of the theme layer
2019-06-06 18:01:03 +03:00
dependencies:
Update dependency @tryghost/social-urls to v0.1.5
2019-12-16 23:27:50 +03:00
bluebird "3.7.2"
Update dependency @tryghost/social-urls to v0.1.6
2020-03-16 09:14:49 +03:00
ghost-ignition "4.1.0"
Update dependency @tryghost/social-urls to v0.1.5
2019-12-16 23:27:50 +03:00
lodash "4.17.15"
Migrated to use @tryghost/social-urls package refs #10618 - /lib/social/urls was extracted into SDK to move more modules out of the core and reduce coupling of the theme layer
2019-06-06 18:01:03 +03:00
Update dependency @tryghost/string to v0.1.9
2020-04-13 03:18:05 +03:00
"@tryghost/string@0.1.9":
version "0.1.9"
resolved "https://registry.yarnpkg.com/@tryghost/string/-/string-0.1.9.tgz#e7519acf328840f1c549715685edabdb938d10ba"
integrity sha512-6asm+vTJuXLPFTil+Zh3X6AH6RBLghjc4HRXR8plJ1SF4rleg40qvTGzloTA+4eMbVzHYvVSpOQRwFkvejMlOw==
Updated to use slugify method from SDK for safe string refs #10618 - Updated lib safe string security method
2019-05-07 07:48:28 +03:00
dependencies:
unidecode "^0.1.8"
Update dependency @tryghost/url-utils to v0.6.18
2020-04-13 06:17:21 +03:00
"@tryghost/url-utils@0.6.18":
version "0.6.18"
resolved "https://registry.yarnpkg.com/@tryghost/url-utils/-/url-utils-0.6.18.tgz#e1c8ab1cbb4f97b2f04a12f6c55b7f41ccf5ca84"
integrity sha512-nYx6qs8gaz1b6Rd9ntv9mQ35EvwR74YnHok1EF22Udm+VfMtQXTaOHviAQqPy4OuEizZqyqj5i8cHEwfH55CKg==
Update dependency @tryghost/url-utils to v0.6.15
2020-03-27 07:24:17 +03:00
dependencies:
cheerio "0.22.0"
moment "2.24.0"
moment-timezone "0.5.28"
🐛 Fixed "Incorrectly eaten value" error if markdown footnote has trailing newline whitespace no issue - update `url-utils` dependency which contains a fixed version of remark footnote parsing
2020-03-29 22:24:25 +03:00
remark "^11.0.2"
remark-footnotes "^1.0.0"
Update dependency @tryghost/url-utils to v0.6.15
2020-03-27 07:24:17 +03:00
unist-util-visit "^2.0.0"
"@tryghost/url-utils@^0.6.14":
Update dependency @tryghost/url-utils to v0.6.14
2020-03-16 09:15:00 +03:00
version "0.6.14"
resolved "https://registry.yarnpkg.com/@tryghost/url-utils/-/url-utils-0.6.14.tgz#aa1ef94531530635cba0cb6d75933bda1a557719"
integrity sha512-GpEN2ZJXqESsp5lUEDEBNPm0HQholhF3pfPlOUx/r/B6YHXBHCH7blgXwDAoo+/I7mKMDCVNf+AA/FXdCrVgJQ==
Migrated to use url-utils from Ghost-SDK (#10787) closes #10773 - The refactoring is a substitute for `urlService.utils` used previously throughout the codebase and now extracted into the separate module in Ghost-SDK - Added url-utils stubbing utility for test suites - Some tests had to be refactored to avoid double mocks (when url's are being reset inside of rested 'describe' groups)
2019-06-18 16:13:55 +03:00
dependencies:
cheerio "0.22.0"
moment "2.24.0"
Update dependency @tryghost/url-utils to v0.6.14
2020-03-16 09:15:00 +03:00
moment-timezone "0.5.28"
🐛 Fixed "unsaved changes" modal displaying when post has been saved refs https://github.com/TryGhost/Ghost/issues/10477 The unsaved changes modal is displaying even when the post has been saved if images have been uploaded because the server is transforming absolute image urls to relative during input of the `mobiledoc` field but not transforming them back to absolute during output. The editor then thinks it's out of sync and shows the warning when trying to leave. - `@tryghost/url-utils` has been updated with new methods for transforming URLs in mobiledoc content - moves absolute->relative transformation from the API input serializers into the Post model - transforms URLs in more fields for a more comprehensive transformation and fewer issues when re-configuring a site's domain - previously there could be problems with internal links between posts not being transformed so you could change the url config to newdomain.com but links in post content would still be pointing to olddomain.com - updates the API post output serializers to transform all modified fields - drops the `?absolute_urls=true` param switch from the `canary` API post output serializer so that all URLs are output as absolute - we're transforming more urls to relative when saving so this is necessary to ensure the unsaved changes modal is not triggered - the query param isn't documented and will disappear in v3
2019-10-07 22:23:45 +03:00
remark "^11.0.1"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
unist-util-visit "^2.0.0"
Migrated to use url-utils from Ghost-SDK (#10787) closes #10773 - The refactoring is a substitute for `urlService.utils` used previously throughout the codebase and now extracted into the separate module in Ghost-SDK - Added url-utils stubbing utility for test suites - Some tests had to be refactored to avoid double mocks (when url's are being reset inside of rested 'describe' groups)
2019-06-18 16:13:55 +03:00
Update dependency @tryghost/vhost-middleware to v1.0.2
2020-03-21 00:12:05 +03:00
"@tryghost/vhost-middleware@1.0.2":
version "1.0.2"
resolved "https://registry.yarnpkg.com/@tryghost/vhost-middleware/-/vhost-middleware-1.0.2.tgz#9fd34ddbb453771c4ecb1a1e2bea786396d09181"
integrity sha512-ZUS9N4UFPCylKf0sv/c78E5Rfjf2V6OrUp6105d9k+XZ0tPXEl5mEoptQXi5hSp79hHIZfoLC65HC8HHVkVVqA==
🐛 Fixed 404s when using a proxy setup (#11269) no issue When using certain proxy setups that result in `host` and `x-forwarded-host` being different, it became impossible to access Ghost because all routes showed generic 404 pages. - `vhost` module that we are using to separate front-end and admin urls does not use express' `req.hostname` so it does not pick up the `x-forwarded-host` url that express' `'trust proxy'` config gives us - switched to the forked `@tryghost/vhost-middleware` package which has a one-line change to use `req.hostname || req.host` - added `'trust proxy'` config to the admin express app and switched to using `req.hostname` in our redirect code to avoid infinite redirect loops
2019-10-28 14:22:05 +03:00
dependencies:
bluebird "^3.7.1"
Update dependency @tryghost/vhost-middleware to v1.0.2
2020-03-21 00:12:05 +03:00
ghost-ignition "^4.0.0"
🐛 Fixed 404s when using a proxy setup (#11269) no issue When using certain proxy setups that result in `host` and `x-forwarded-host` being different, it became impossible to access Ghost because all routes showed generic 404 pages. - `vhost` module that we are using to separate front-end and admin urls does not use express' `req.hostname` so it does not pick up the `x-forwarded-host` url that express' `'trust proxy'` config gives us - switched to the forked `@tryghost/vhost-middleware` package which has a one-line change to use `req.hostname || req.host` - added `'trust proxy'` config to the admin express app and switched to using `req.hostname` in our redirect code to avoid infinite redirect loops
2019-10-28 14:22:05 +03:00
lodash "^4.17.15"
Update dependency gscan to v3.5.1
2020-04-10 15:23:43 +03:00
"@tryghost/zip@1.0.0", "@tryghost/zip@^1.0.0":
Update dependency @tryghost/zip to v1
2020-04-08 14:57:26 +03:00
version "1.0.0"
resolved "https://registry.yarnpkg.com/@tryghost/zip/-/zip-1.0.0.tgz#4f13e6626e963a263cc60c16f9a13ab5f3956884"
integrity sha512-6QW7NAZzWRdjRIgG7S+gJzLVn6UkGVMmFVv4Np6AEoMhcc8aU75QvRNZK+SDWvipqmX7xijB5te9HsCONuNkdA==
Replaced zip tools with @tryghost/zip - Moved zipFolder to a new package - also exposing extract-zip from the new package - new package has the API pre-promisified - also uses @tryghost/extract-zip instead of extract-zip, which has bugfixes
2020-03-20 23:36:05 +03:00
dependencies:
archiver "^3.1.1"
bluebird "^3.7.2"
Update dependency @tryghost/zip to v1
2020-04-08 14:57:26 +03:00
extract-zip "^2.0.0"
Replaced zip tools with @tryghost/zip - Moved zipFolder to a new package - also exposing extract-zip from the new package - new package has the API pre-promisified - also uses @tryghost/extract-zip instead of extract-zip, which has bugfixes
2020-03-20 23:36:05 +03:00
fs-extra "^9.0.0"
Update dependency knex-migrator to v3.4.3
2020-04-08 09:43:10 +03:00
"@types/bluebird@^3.5.27":
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
version "3.5.27"
resolved "https://registry.yarnpkg.com/@types/bluebird/-/bluebird-3.5.27.tgz#61eb4d75dc6bfbce51cf49ee9bbebe941b2cb5d0"
integrity sha512-6BmYWSBea18+tSjjSC3QIyV93ZKAeNWGM7R6aYt1ryTZXrlHF+QLV0G2yV0viEGVyRkyQsWfMoJ0k/YghBX5sQ==
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
"@types/body-parser@*":
version "1.19.0"
resolved "https://registry.yarnpkg.com/@types/body-parser/-/body-parser-1.19.0.tgz#0685b3c47eb3006ffed117cdd55164b61f80538f"
integrity sha512-W98JrE0j2K78swW4ukqMleo8R7h/pFETjM2DQ90MF6XK2i4LO4W3gQ71Lt4w3bfm2EvVSyWHplECvB5sK22yFQ==
dependencies:
"@types/connect" "*"
"@types/node" "*"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
"@types/cacheable-request@^6.0.1":
version "6.0.1"
resolved "https://registry.yarnpkg.com/@types/cacheable-request/-/cacheable-request-6.0.1.tgz#5d22f3dded1fd3a84c0bbeb5039a7419c2c91976"
integrity sha512-ykFq2zmBGOCbpIXtoVbz4SKY5QriWPh3AjyU4G74RYbtt5yOc5OfaY75ftjg7mikMOla1CTGpX3lLbuJh8DTrQ==
dependencies:
"@types/http-cache-semantics" "*"
"@types/keyv" "*"
"@types/node" "*"
"@types/responselike" "*"
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
"@types/color-name@^1.1.1":
version "1.1.1"
resolved "https://registry.yarnpkg.com/@types/color-name/-/color-name-1.1.1.tgz#1c1261bbeaa10a8055bbc5d8ab84b7b2afc846a0"
integrity sha512-rr+OQyAjxze7GgWrSaJwydHStIhHq2lvY3BOC2Mj7KnzI7XK0Uw1TOOdI9lDoajEbSWLiYgoo4f1R51erQfhPQ==
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
"@types/connect@*":
version "3.4.33"
resolved "https://registry.yarnpkg.com/@types/connect/-/connect-3.4.33.tgz#31610c901eca573b8713c3330abc6e6b9f588546"
integrity sha512-2+FrkXY4zllzTNfJth7jOqEHC+enpLeGslEhpnTAkg21GkRrWV4SsAtqchtT4YS9/nODBU2/ZfsBY2X4J/dX7A==
dependencies:
"@types/node" "*"
"@types/express-jwt@0.0.42":
version "0.0.42"
resolved "https://registry.yarnpkg.com/@types/express-jwt/-/express-jwt-0.0.42.tgz#4f04e1fadf9d18725950dc041808a4a4adf7f5ae"
integrity sha512-WszgUddvM1t5dPpJ3LhWNH8kfNN8GPIBrAGxgIYXVCEGx6Bx4A036aAuf/r5WH9DIEdlmp7gHOYvSM6U87B0ag==
dependencies:
"@types/express" "*"
"@types/express-unless" "*"
"@types/express-serve-static-core@*":
version "4.17.2"
resolved "https://registry.yarnpkg.com/@types/express-serve-static-core/-/express-serve-static-core-4.17.2.tgz#f6f41fa35d42e79dbf6610eccbb2637e6008a0cf"
integrity sha512-El9yMpctM6tORDAiBwZVLMcxoTMcqqRO9dVyYcn7ycLWbvR8klrDn8CAOwRfZujZtWD7yS/mshTdz43jMOejbg==
dependencies:
"@types/node" "*"
"@types/range-parser" "*"
"@types/express-unless@*":
version "0.5.1"
resolved "https://registry.yarnpkg.com/@types/express-unless/-/express-unless-0.5.1.tgz#4f440b905e42bbf53382b8207bc337dc5ff9fd1f"
integrity sha512-5fuvg7C69lemNgl0+v+CUxDYWVPSfXHhJPst4yTLcqi4zKJpORCxnDrnnilk3k0DTq/WrAUdvXFs01+vUqUZHw==
dependencies:
"@types/express" "*"
"@types/express@*":
version "4.17.2"
resolved "https://registry.yarnpkg.com/@types/express/-/express-4.17.2.tgz#a0fb7a23d8855bac31bc01d5a58cadd9b2173e6c"
integrity sha512-5mHFNyavtLoJmnusB8OKJ5bshSzw+qkMIBAobLrIM48HJvunFva9mOa6aBwh64lBFyNwBbs0xiEFuj4eU/NjCA==
dependencies:
"@types/body-parser" "*"
"@types/express-serve-static-core" "*"
"@types/serve-static" "*"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
"@types/http-cache-semantics@*":
version "4.0.0"
resolved "https://registry.yarnpkg.com/@types/http-cache-semantics/-/http-cache-semantics-4.0.0.tgz#9140779736aa2655635ee756e2467d787cfe8a2a"
integrity sha512-c3Xy026kOF7QOTn00hbIllV1dLR9hG9NkSrLQgCVs8NF6sBU+VGWjD3wLPhmh1TYAc7ugCFsvHYMN4VcBN1U1A==
"@types/keyv@*":
version "3.1.1"
resolved "https://registry.yarnpkg.com/@types/keyv/-/keyv-3.1.1.tgz#e45a45324fca9dab716ab1230ee249c9fb52cfa7"
integrity sha512-MPtoySlAZQ37VoLaPcTHCu1RWJ4llDkULYZIzOYxlhxBqYPB0RsRlmMU0R6tahtFe27mIdkHV+551ZWV4PLmVw==
dependencies:
"@types/node" "*"
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
"@types/mime@*":
version "2.0.1"
resolved "https://registry.yarnpkg.com/@types/mime/-/mime-2.0.1.tgz#dc488842312a7f075149312905b5e3c0b054c79d"
integrity sha512-FwI9gX75FgVBJ7ywgnq/P7tw+/o1GUbtP0KzbtusLigAOgIgNISRK0ZPl4qertvXSIE8YbsVJueQ90cDt9YYyw==
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
"@types/node@*":
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "12.7.11"
resolved "https://registry.yarnpkg.com/@types/node/-/node-12.7.11.tgz#be879b52031cfb5d295b047f5462d8ef1a716446"
integrity sha512-Otxmr2rrZLKRYIybtdG/sgeO+tHY20GxeDjcGmUnmmlCWyEnv2a2x1ZXBo3BTec4OiTXMQCiazB8NMBf0iRlFw==
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
"@types/q@^1.5.1":
version "1.5.2"
resolved "https://registry.yarnpkg.com/@types/q/-/q-1.5.2.tgz#690a1475b84f2a884fd07cd797c00f5f31356ea8"
integrity sha512-ce5d3q03Ex0sy4R14722Rmt6MT07Ua+k4FwDfdcToYJcMKNtRVQvJ6JCAPdAmAnbRb6CsX6aYb9m96NGod9uTw==
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
"@types/range-parser@*":
version "1.2.3"
resolved "https://registry.yarnpkg.com/@types/range-parser/-/range-parser-1.2.3.tgz#7ee330ba7caafb98090bece86a5ee44115904c2c"
integrity sha512-ewFXqrQHlFsgc09MK5jP5iR7vumV/BYayNC6PgJO2LPe8vrnNFyjQjSppfEngITi0qvfKtzFvgKymGheFM9UOA==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
"@types/responselike@*":
version "1.0.0"
resolved "https://registry.yarnpkg.com/@types/responselike/-/responselike-1.0.0.tgz#251f4fe7d154d2bad125abe1b429b23afd262e29"
integrity sha512-85Y2BjiufFzaMIlvJDvTTB8Fxl2xfLo4HgmHzVBz08w4wDePCTjYw66PdrolO0kzli3yam/YCgRufyo1DdQVTA==
dependencies:
"@types/node" "*"
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
"@types/serve-static@*":
version "1.13.3"
resolved "https://registry.yarnpkg.com/@types/serve-static/-/serve-static-1.13.3.tgz#eb7e1c41c4468272557e897e9171ded5e2ded9d1"
integrity sha512-oprSwp094zOglVrXdlo/4bAHtKTAxX6VT8FOZlBKrmyLbNvE1zxZyJ6yikMVtHIvwP45+ZQGJn+FdXGKTozq0g==
dependencies:
"@types/express-serve-static-core" "*"
"@types/mime" "*"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
"@types/unist@^2.0.0", "@types/unist@^2.0.2", "@types/unist@^2.0.3":
version "2.0.3"
resolved "https://registry.yarnpkg.com/@types/unist/-/unist-2.0.3.tgz#9c088679876f374eb5983f150d4787aa6fb32d7e"
integrity sha512-FvUupuM3rlRsRtCN+fDudtmytGO6iHJuuRKS1Ss0pG5z8oX0diNEw94UEL7hgDbpN94rgaK5R7sWm6RrSkZuAQ==
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
Update dependency @tryghost/zip to v1
2020-04-08 14:57:26 +03:00
"@types/yauzl@^2.9.1":
version "2.9.1"
resolved "https://registry.yarnpkg.com/@types/yauzl/-/yauzl-2.9.1.tgz#d10f69f9f522eef3cf98e30afb684a1e1ec923af"
integrity sha512-A1b8SU4D10uoPjwb0lnHmmu8wZhR9d+9o2PKBQT2jU5YPTKsxac6M2qGAdY7VcL+dHHhARVUDmeg0rOrcd9EjA==
dependencies:
"@types/node" "*"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
abab@^2.0.3:
version "2.0.3"
resolved "https://registry.yarnpkg.com/abab/-/abab-2.0.3.tgz#623e2075e02eb2d3f2475e49f99c91846467907a"
integrity sha512-tsFzPpcttalNjFBCFMqsKYQcWxxen1pgJR56by//QwvJc4/OUS3kPOOttx2tSIfjsylB0pYu7f5D3K1RCxUnUg==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
abbrev@1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/abbrev/-/abbrev-1.1.1.tgz#f8f2c887ad10bf67f634f005b6987fed3179aac8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-nne9/IiQ/hzIhY6pdDnbBtz7DjPTKrY00P/zvPSm5pOFkl6xuGrGnXn/VtTNNfNtAfZ9/1RtehkszU9qcTii0Q==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
accepts@~1.3.5, accepts@~1.3.7:
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
version "1.3.7"
resolved "https://registry.yarnpkg.com/accepts/-/accepts-1.3.7.tgz#531bc726517a3b2b41f850021c6cc15eaab507cd"
integrity sha512-Il80Qs2WjYlJIBNzNkK6KYqlVMTbZLXgHx2oT0pU/fjRHyEp+PEfEPY0R3WCwAGVOtauxh1hOxNgIf5bv7dQpA==
dependencies:
mime-types "~2.1.24"
negotiator "0.6.2"
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
acorn-globals@^6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/acorn-globals/-/acorn-globals-6.0.0.tgz#46cdd39f0f8ff08a876619b55f5ac8a6dc770b45"
integrity sha512-ZQl7LOWaF5ePqqcX4hLuv/bLXYQNfNWw2c0/yX/TsPRKamzHcTGQnlCjHT3TsmkOUVEPS3crCxiPfdzE/Trlhg==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
acorn "^7.1.1"
acorn-walk "^7.1.1"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update Test & linting packages
2020-02-03 16:44:38 +03:00
acorn-jsx@^5.1.0:
version "5.1.0"
resolved "https://registry.yarnpkg.com/acorn-jsx/-/acorn-jsx-5.1.0.tgz#294adb71b57398b0680015f0a38c563ee1db5384"
integrity sha512-tMUqwBWfLFbJbizRmEcWSLw6HnFzfdJs2sOJEOwwtVPMoH/0Ay+E703oZz78VSXZiiDcZrQ5XKjPIUQixhmgVw==
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
acorn-walk@^7.1.1:
version "7.1.1"
resolved "https://registry.yarnpkg.com/acorn-walk/-/acorn-walk-7.1.1.tgz#345f0dffad5c735e7373d2fec9a1023e6a44b83e"
integrity sha512-wdlPY2tm/9XBr7QkKlq0WQVgiuGTX6YWPyRyBviSoScBuLfTVQhvwg6wJ369GJ/1nPfTLMfnrFIfjqVg6d+jQQ==
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
Update Test & linting packages
2020-02-03 16:44:38 +03:00
acorn@^7.1.0:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "7.1.0"
resolved "https://registry.yarnpkg.com/acorn/-/acorn-7.1.0.tgz#949d36f2c292535da602283586c2477c57eb2d6c"
integrity sha512-kL5CuoXA/dgxlBbVrflsflzQ3PAas7RYZB52NOm/6839iVYJgKMJ3cQJD+t2i5+qFa8h3MDpEOJiS64E8JLnSQ==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
acorn@^7.1.1:
version "7.1.1"
resolved "https://registry.yarnpkg.com/acorn/-/acorn-7.1.1.tgz#e35668de0b402f359de515c5482a1ab9f89a69bf"
integrity sha512-add7dgA5ppRPxCFJoAGfMDi7PIBXq1RtGo7BhbLaxwrXPOmw8gq48Y9ozT01hUKy9byMjlR20EJhu5zlkErEkg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
addressparser@~0.3.2:
version "0.3.2"
resolved "https://registry.yarnpkg.com/addressparser/-/addressparser-0.3.2.tgz#59873f35e8fcf6c7361c10239261d76e15348bb2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WYc/Nej89sc2HBAjkmHXbhU0i7I=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
agent-base@4, agent-base@^4.2.0, agent-base@^4.3.0:
version "4.3.0"
resolved "https://registry.yarnpkg.com/agent-base/-/agent-base-4.3.0.tgz#8165f01c436009bccad0b1d122f05ed770efc6ee"
integrity sha512-salcGninV0nPrwpGNn4VTXBb1SOuXQBiqbrNXoeizJsHrsL6ERFM2Ne3JUSBWRE6aeNJI2ROP/WEEIDUiDe3cg==
dependencies:
es6-promisify "^5.0.0"
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
agent-base@5:
version "5.1.1"
resolved "https://registry.yarnpkg.com/agent-base/-/agent-base-5.1.1.tgz#e8fb3f242959db44d63be665db7a8e739537a32c"
integrity sha512-TMeqbNl2fMW0nMjTEPOwe3J/PRFP4vqeoNuQMG0HlMrtm5QxKqdvAkZ1pRBQ/ulIyDD5Yq0nJ7YbdD8ey0TO3g==
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
agent-base@~4.2.1:
version "4.2.1"
resolved "https://registry.yarnpkg.com/agent-base/-/agent-base-4.2.1.tgz#d89e5999f797875674c07d87f260fc41e83e8ca9"
integrity sha512-JVwXMr9nHYTUXsBFKUqhJwvlcYU/blreOEUkhNR2eXZIvwd+c+o5V4MgDPKWnMS/56awN3TRzIP+KoPn+roQtg==
dependencies:
es6-promisify "^5.0.0"
Update dependency ajv to v6.12.0
2020-02-24 15:28:32 +03:00
ajv@6.12.0:
version "6.12.0"
resolved "https://registry.yarnpkg.com/ajv/-/ajv-6.12.0.tgz#06d60b96d87b8454a5adaba86e7854da629db4b7"
integrity sha512-D6gFiFA0RRLyUbvijN74DWAjXSFxWKaWP7mldxkVhyhAV3+SWA9HEJPHQ2c9soIeTFJqcSdFDGFgdqs1iUU2Hw==
Added JSON Schema validation for /posts endpoint (#10468) refs #10438 - Added validation helper based on JSON schema - Added schema validation for POST/PUT in /posts endpoints - Refactored existing authors validation test suite - Extended test coverage with a minimally required structure of post.add validator
2019-02-08 13:40:58 +03:00
dependencies:
Update dependency ajv to v6.11.0
2020-02-17 05:16:58 +03:00
fast-deep-equal "^3.1.1"
Added JSON Schema validation for /posts endpoint (#10468) refs #10438 - Added validation helper based on JSON schema - Added schema validation for POST/PUT in /posts endpoints - Refactored existing authors validation test suite - Extended test coverage with a minimally required structure of post.add validator
2019-02-08 13:40:58 +03:00
fast-json-stable-stringify "^2.0.0"
json-schema-traverse "^0.4.1"
uri-js "^4.2.2"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
ajv@^6.10.0, ajv@^6.10.2, ajv@^6.5.5:
Update dependency ajv to v6.11.0
2020-02-17 05:16:58 +03:00
version "6.10.2"
resolved "https://registry.yarnpkg.com/ajv/-/ajv-6.10.2.tgz#d3cea04d6b017b2894ad69040fec8b623eb4bd52"
integrity sha512-TXtUUEYHuaTEbLZWIKUr5pmBuhDLy+8KYtPYdcV8qC+pOZL+NKqYwvWSRrVXHn+ZmRRAu8vJTAznH7Oag6RVRw==
dependencies:
fast-deep-equal "^2.0.1"
fast-json-stable-stringify "^2.0.0"
json-schema-traverse "^0.4.1"
uri-js "^4.2.2"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
alphanum-sort@^1.0.0:
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/alphanum-sort/-/alphanum-sort-1.0.2.tgz#97a1119649b211ad33691d9f9f486a8ec9fbe0a3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-l6ERlkmyEa0zaR2fn0hqjsn74KM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
amperize@0.6.1:
version "0.6.1"
resolved "https://registry.yarnpkg.com/amperize/-/amperize-0.6.1.tgz#b90079db6d66d4dd33e6584ef88c4df493ed7e03"
integrity sha512-g36E/XJ5N98VyKh4opL894rlrBejh7aS6emet0HpLKg9IHfbXM3vDMBgwsTQO9M/kY+NZ9mpQU3SW9w8FDM6gw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
async "^3.0.1"
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
domutils "^2.0.0"
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 12:12:03 +03:00
emits "^3.0.0"
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
htmlparser2 "^4.0.0"
image-size "^0.8.1"
Update dependency amperize to v0.6.0
2019-07-29 03:29:51 +03:00
lodash "^4.17.11"
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
probe-image-size "^5.0.0"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
request "^2.83.0"
request-promise "^4.2.4"
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
uuid "^7.0.1"
validator "^12.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency analytics-node to v3.4.0-beta.1
2019-12-17 00:06:35 +03:00
analytics-node@3.4.0-beta.1:
version "3.4.0-beta.1"
resolved "https://registry.yarnpkg.com/analytics-node/-/analytics-node-3.4.0-beta.1.tgz#f348d60fb25f15d481ad2c2bdef53c29384b4a5e"
integrity sha512-+0F/y4Asc5S2qhWcYss+iCob6TTXQktwbqlIk02gcZaRxpekCbnTbJu/rcaRooVHxqp9WSzUXiWCesJYPJETZQ==
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
dependencies:
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
"@segment/loosely-validate-event" "^2.0.0"
Update dependency analytics-node to v3.4.0-beta.1
2019-12-17 00:06:35 +03:00
axios "^0.18.1"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
axios-retry "^3.0.2"
lodash.isstring "^4.0.1"
md5 "^2.2.1"
ms "^2.0.0"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
remove-trailing-slash "^0.1.0"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
uuid "^3.2.1"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ansi-colors@3.2.3:
version "3.2.3"
resolved "https://registry.yarnpkg.com/ansi-colors/-/ansi-colors-3.2.3.tgz#57d35b8686e851e2cc04c403f1c00203976a1813"
integrity sha512-LEHHyuhlPY3TmuUYMh2oz89lTShfvgbmzaBcxve9t/9Wuy7Dwf4yoAKcND7KFT1HAQfqZ12qtc+DUrBMeKF9nw==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
ansi-escapes@^4.2.1:
version "4.3.0"
resolved "https://registry.yarnpkg.com/ansi-escapes/-/ansi-escapes-4.3.0.tgz#a4ce2b33d6b214b7950d8595c212f12ac9cc569d"
integrity sha512-EiYhwo0v255HUL6eDyuLrXEkTi7WwVCLAw+SeOQ7M7qdun1z1pum4DEm/nuqIVbPvi9RPPc9k9LbyBv6H0DwVg==
dependencies:
type-fest "^0.8.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ansi-regex@^2.0.0:
version "2.1.1"
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-2.1.1.tgz#c3b33ab5ee360d86e0e628f0468ae7ef27d654df"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-w7M6te42DYbg5ijwRorn7yfWVN8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
ansi-regex@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-3.0.0.tgz#ed0317c322064f79466c02966bddb605ab37d998"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-7QMXwyIGT3lGbAKWa922Bas32Zg=
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ansi-regex@^4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-4.1.0.tgz#8b9f8f08cf1acb843756a839ca8c7e3168c51997"
integrity sha512-1apePfXM1UOSqw0o9IiFAovVz9M5S1Dg+4TrDwfMewQ6p/rmMueb7tWZjQ1rx4Loy1ArBggoqGpfqqdI4rondg==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
ansi-regex@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-5.0.0.tgz#388539f55179bf39339c81af30a654d69f87cb75"
integrity sha512-bY6fj56OUQ0hU1KjFNDQuJFezqKdrAyFdIevADiqrWHwSlbmBNMHp5ak2f40Pm8JTFyM2mqxkG6ngkHO11f/lg==
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
ansi-styles@^2.2.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.2.1"
resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-2.2.1.tgz#b432dd3358b634cf75e1e4664368240533c1ddbe"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-tDLdM1i2NM914eRmQ2gkBTPB3b4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
ansi-styles@^3.1.0, ansi-styles@^3.2.0, ansi-styles@^3.2.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "3.2.1"
resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-3.2.1.tgz#41fbb20243e50b12be0f04b8dedbf07520ce841d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-VT0ZI6kZRdTh8YyJw3SMbYm/u+NqfsAxEpWO0Pf9sq8/e94WxxOpPKx9FR1FlyCtOVDNOQ+8ntlqFxiRc+r5qA==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
color-convert "^1.9.0"
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
ansi-styles@^4.1.0:
version "4.2.0"
resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-4.2.0.tgz#5681f0dcf7ae5880a7841d8831c4724ed9cc0172"
integrity sha512-7kFQgnEaMdRtwf6uSfUnVr9gSGC7faurn+J/Mv90/W+iTtN0405/nLdopfMWwchyxhbGYl6TC4Sccn9TUkGAgg==
dependencies:
"@types/color-name" "^1.1.1"
color-convert "^2.0.1"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
anymatch@~3.1.1:
version "3.1.1"
resolved "https://registry.yarnpkg.com/anymatch/-/anymatch-3.1.1.tgz#c55ecf02185e2469259399310c173ce31233b142"
integrity sha512-mM8522psRCqzV+6LhomX5wgp25YVibjh8Wj23I5RPkPppSVSjyKD2A2mBJmWGa+KN7f2D6LNh9jkBCeyLktzjg==
dependencies:
normalize-path "^3.0.0"
picomatch "^2.0.4"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
append-field@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/append-field/-/append-field-1.0.0.tgz#1e3440e915f0b1203d23748e78edd7b9b5b43e56"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-HjRA6RXwsSA9I3SOeO3XubW0PlY=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
aproba@^1.0.3:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/aproba/-/aproba-1.2.0.tgz#6802e6264efd18c790a1b0d517f0f2627bf2c94a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Y9J6ZjXtoYh8RnXVCMOU/ttDmk1aBjunq9vO0ta5x85WDQiQfUF9sIPBITdbiiIVcBo03Hi3jMxigBtsddlXRw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
arch@^2.1.0:
version "2.1.1"
resolved "https://registry.yarnpkg.com/arch/-/arch-2.1.1.tgz#8f5c2731aa35a30929221bb0640eed65175ec84e"
integrity sha512-BLM56aPo9vLLFVa8+/+pJLnrZ7QGGTVHWsCwieAWT9o9K8UeGaQbzZbGoabWLOo2ksBCztoXdqBZBplqLDDCSg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
archiver-utils@^1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/archiver-utils/-/archiver-utils-1.3.0.tgz#e50b4c09c70bf3d680e32ff1b7994e9f9d895174"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-5QtMCccL89aA4y/xt5lOn52JUXQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
glob "^7.0.0"
graceful-fs "^4.1.0"
lazystream "^1.0.0"
lodash "^4.8.0"
normalize-path "^2.0.0"
readable-stream "^2.0.0"
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
archiver-utils@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/archiver-utils/-/archiver-utils-2.1.0.tgz#e8a460e94b693c3e3da182a098ca6285ba9249e2"
integrity sha512-bEL/yUb/fNNiNTuUz979Z0Yg5L+LzLxGJz8x79lYmR54fmTIb6ob/hNQgkQnIUDWIFjZVQwl9Xs356I6BAMHfw==
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
dependencies:
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
glob "^7.1.4"
graceful-fs "^4.2.0"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
lazystream "^1.0.0"
lodash.defaults "^4.2.0"
lodash.difference "^4.5.0"
lodash.flatten "^4.4.0"
lodash.isplainobject "^4.0.6"
lodash.union "^4.6.0"
normalize-path "^3.0.0"
readable-stream "^2.0.0"
archiver@^1.3.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.3.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/archiver/-/archiver-1.3.0.tgz#4f2194d6d8f99df3f531e6881f14f15d55faaf22"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-TyGU1tj5nfP1MeaIHxTxXVX6ryI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
archiver-utils "^1.3.0"
async "^2.0.0"
buffer-crc32 "^0.2.1"
glob "^7.0.0"
lodash "^4.8.0"
readable-stream "^2.0.0"
tar-stream "^1.5.0"
walkdir "^0.0.11"
zip-stream "^1.1.0"
Replaced zip tools with @tryghost/zip - Moved zipFolder to a new package - also exposing extract-zip from the new package - new package has the API pre-promisified - also uses @tryghost/extract-zip instead of extract-zip, which has bugfixes
2020-03-20 23:36:05 +03:00
archiver@^3.1.1:
version "3.1.1"
resolved "https://registry.yarnpkg.com/archiver/-/archiver-3.1.1.tgz#9db7819d4daf60aec10fe86b16cb9258ced66ea0"
integrity sha512-5Hxxcig7gw5Jod/8Gq0OneVgLYET+oNHcxgWItq4TbhOzRLKNAFUb9edAftiMKXvXfCB0vbGrJdZDNq0dWMsxg==
dependencies:
archiver-utils "^2.1.0"
async "^2.6.3"
buffer-crc32 "^0.2.1"
glob "^7.1.4"
readable-stream "^3.4.0"
tar-stream "^2.1.0"
zip-stream "^2.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
are-we-there-yet@~1.1.2:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.1.5"
resolved "https://registry.yarnpkg.com/are-we-there-yet/-/are-we-there-yet-1.1.5.tgz#4b35c2944f062a8bfcda66410760350fe9ddfc21"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-5hYdAkZlcG8tOLujVDTgCT+uPX0VnpAH28gWsLfzpXYm7wP6mp5Q/gYyR7YQ0cKVJcXJnl3j2kpBan13PtQf6w==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
delegates "^1.0.0"
🙀 Image field naming & new img_url helper (#8364) * 🙀 change database schema for images - rename user/post/tag images - contains all the required changes from the schema change * Refactor helper/meta data - rename cover to cover_image - also rename default settings to match the pattern - rename image to profile_image for user - rename image to feature_image for tags/posts * {{image}} >>> {{img_url}} - rename - change the functionality - attr is required - e.g. {{img_url feature_image}} * gscan 1.0.0 - update yarn.lock * Update casper reference: 1.0-changes - see https://github.com/TryGhost/Casper/commit/5487b4da8d2ad7c6a6d003a3a0ee1a860e0de34d
2017-04-24 20:21:47 +03:00
readable-stream "^2.0.6"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
arg@1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/arg/-/arg-1.0.0.tgz#444d885a4e25b121640b55155ef7cd03975d6050"
integrity sha512-Wk7TEzl1KqvTGs/uyhmHO/3XLd3t1UeU4IstvPXVzGPM522cTjqjNZ99esCkcL52sjqjo8e8CTBcWhkxvGzoAw==
Update Build Tool
2019-07-02 03:34:50 +03:00
argparse@^1.0.7:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.0.10"
resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.10.tgz#bcd6791ea5ae09725e17e5ad988134cd40b3d911"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
sprintf-js "~1.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
arr-diff@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/arr-diff/-/arr-diff-4.0.0.tgz#d6461074febfec71e7e15235761a329a5dc7c520"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-1kYQdP6/7HHn4VI1dhoyml3HxSA=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
arr-flatten@^1.1.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/arr-flatten/-/arr-flatten-1.1.0.tgz#36048bbff4e7b47e136644316c99669ea5ae91f1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-L3hKV5R/p5o81R7O02IGnwpDmkp6E982XhtbuwSe3O4qOtMMMtodicASA1Cny2U+aCXcNpml+m4dPsvsJ3jatg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
arr-union@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/arr-union/-/arr-union-3.1.0.tgz#e39b09aea9def866a8f206e288af63919bae39c4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-45sJrqne+Gao8gbiiK9jkZuuOcQ=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
array-each@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/array-each/-/array-each-1.0.1.tgz#a794af0c05ab1752846ee753a1f211a05ba0c44f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-p5SvDAWrF1KEbudTofIRoFugxE8=
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
array-find-index@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/array-find-index/-/array-find-index-1.0.2.tgz#df010aa1287e164bbda6f9723b0a96a1ec4187a1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-3wEKoSh+Fku9pvlyOwqWoexBh6E=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
array-flatten@1.1.1:
version "1.1.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/array-flatten/-/array-flatten-1.1.1.tgz#9a5f699051b1e7073328f2a008968b64ea2955d2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ml9pkFGx5wczKPKgCJaLZOopVdI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
array-slice@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/array-slice/-/array-slice-1.1.0.tgz#e368ea15f89bc7069f7ffb89aec3a6c7d4ac22d4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-B1qMD3RBP7O8o0H2KbrXDyB0IccejMF15+87Lvlor12ONPRHP6gTjXMNkt/d3ZuOGbAe66hFmaCfECI24Ufp6w==
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
array-unique@^0.3.2:
version "0.3.2"
resolved "https://registry.yarnpkg.com/array-unique/-/array-unique-0.3.2.tgz#a894b75d4bc4f6cd679ef3244a9fd8f46ae2d428"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-qJS3XUvE9s1nnvMkSp/Y9Gri1Cg=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
asn1@~0.2.3:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "0.2.4"
resolved "https://registry.yarnpkg.com/asn1/-/asn1-0.2.4.tgz#8d2475dfab553bb33e77b54e59e880bb8ce23136"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-jxwzQpLQjSmWXgwaCZE9Nz+glAG01yF1QnWgbhGwHI5A6FRIEY6IVqtHhIepHqI7/kyEyQEagBC5mBEFlIYvdg==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dependencies:
safer-buffer "~2.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
assert-plus@1.0.0, assert-plus@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/assert-plus/-/assert-plus-1.0.0.tgz#f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8S4PPF13sLHN2RRpQuTpbB5N1SU=
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
assign-symbols@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/assign-symbols/-/assign-symbols-1.0.0.tgz#59667f41fadd4f20ccbc2bb96b8d4f7f78ec0367"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WWZ/QfrdTyDMvCu5a41Pf3jsA2c=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
ast-types@0.x.x:
version "0.13.2"
resolved "https://registry.yarnpkg.com/ast-types/-/ast-types-0.13.2.tgz#df39b677a911a83f3a049644fb74fdded23cea48"
integrity sha512-uWMHxJxtfj/1oZClOxDEV1sQ1HCDkA4MG8Gr69KKeBjEVH0R84WlejZ0y2DcwyBlpAEMltmVYkVgqfLFb2oyiA==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
astral-regex@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/astral-regex/-/astral-regex-1.0.0.tgz#6c8c3fb827dd43ee3918f27b82782ab7658a6fd9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-+Ryf6g3BKoRc7jfp7ad8tM4TtMiaWvbF/1/sQcZPkkS7ag3D5nMBCe2UfOTONtAkaG0tO0ij3C5Lwmf1EiyjHg==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Removed coverage tasks from Gruntfile refs #9441
2019-04-08 17:12:48 +03:00
async@^1.4.0, async@^1.5.0, async@~1.5.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.5.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/async/-/async-1.5.2.tgz#ec6a61ae56480c0c3cb241c95618e20892f9672a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-7GphrlZIDAw8skHJVhjiCJL5Zyo=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
async@^2.0.0, async@^2.1.2, async@^2.6.0, async@^2.6.1, async@^2.6.3:
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
version "2.6.3"
resolved "https://registry.yarnpkg.com/async/-/async-2.6.3.tgz#d72625e2344a3656e3a3ad4fa749fa83299d82ff"
integrity sha512-zflvls11DCy+dQWzTW2dzuilv8Z5X/pjfmZOWba6TNIVDm+2UDaJmXSOXlasHKfNBs8oo3M0aT50fDEWfKZjXg==
dependencies:
lodash "^4.17.14"
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
async@^3.0.1, async@^3.1.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/async/-/async-3.1.0.tgz#42b3b12ae1b74927b5217d8c0016baaf62463772"
integrity sha512-4vx/aaY6j/j3Lw3fbCHNWP0pPaTCew3F6F3hYyl/tHs/ndmV1q7NW9T5yuJ2XAGwdQrP+6Wu20x06U4APo/iQQ==
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
asynckit@^0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/asynckit/-/asynckit-0.4.0.tgz#c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-x57Zf380y48robyXkLzDZkdLS3k=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency fs-extra to v9
2020-03-19 18:40:31 +03:00
at-least-node@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/at-least-node/-/at-least-node-1.0.0.tgz#602cd4b46e844ad4effc92a8011a3c46e0238dc2"
integrity sha512-+q/t7Ekv1EDY2l6Gda6LLiX14rU9TV20Wa3ofeQmwPFZbOMo9DXrLbOjFaaclkXKWidIaopwAObQDqwWtGUjqg==
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
atob@^2.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/atob/-/atob-2.1.2.tgz#6d9517eb9e030d2436666651e86bd9f6f13533c9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Wm6ukoaOGJi/73p/cl2GvLjTI5JM1k/O14isD73YML8StrH/7/lRFgmg8nICZgD3bZZvjwCGxtMOD3wWNAu8cg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
audio-extensions@0.0.0:
version "0.0.0"
resolved "https://registry.yarnpkg.com/audio-extensions/-/audio-extensions-0.0.0.tgz#d0eefe077fb9eb625898eed9985890548cf1f8d2"
integrity sha1-0O7+B3+562JYmO7ZmFiQVIzx+NI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
aws-sdk-apis@3.x:
version "3.1.10"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/aws-sdk-apis/-/aws-sdk-apis-3.1.10.tgz#4eed97f590a16cf080fd1b8d8cfdf2472de8ab0e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Tu2X9ZChbPCA/RuNjP3yRy3oqw4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
aws-sdk@2.0.5:
version "2.0.5"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/aws-sdk/-/aws-sdk-2.0.5.tgz#f3ebb1898d0632b7b6672e8d77728cbbb69f98c6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8+uxiY0GMre2Zy6Nd3KMu7afmMY=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
aws-sdk-apis "3.x"
xml2js "0.2.6"
xmlbuilder "0.4.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
aws-sign2@~0.7.0:
version "0.7.0"
resolved "https://registry.yarnpkg.com/aws-sign2/-/aws-sign2-0.7.0.tgz#b46e890934a9591f2d2f6f86d7e6a9f1b3fe76a8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-tG6JCTSpWR8tL2+G1+ap8bP+dqg=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
aws4@^1.8.0:
version "1.8.0"
resolved "https://registry.yarnpkg.com/aws4/-/aws4-1.8.0.tgz#f0e003d9ca9e7f59c7a508945d7b2ef9a04a542f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-ReZxvNHIOv88FlT7rxcXIIC0fPt4KZqZbOlivyWtXLt8ESx84zd3kMC6iK5jVeS2qt+g7ftS7ye4fi06X5rtRQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
axios-retry@^3.0.2:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "3.1.2"
resolved "https://registry.yarnpkg.com/axios-retry/-/axios-retry-3.1.2.tgz#4f4dcbefb0b434e22b72bd5e28a027d77b8a3458"
integrity sha512-+X0mtJ3S0mmia1kTVi1eA3DAC+oWnT2A29g3CpkzcBPMT6vJm+hn/WiV9wPt/KXLHVmg5zev9mWqkPx7bHMovg==
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
dependencies:
is-retry-allowed "^1.1.0"
Update dependency analytics-node to v3.4.0-beta.1
2019-12-17 00:06:35 +03:00
axios@^0.18.1:
version "0.18.1"
resolved "https://registry.yarnpkg.com/axios/-/axios-0.18.1.tgz#ff3f0de2e7b5d180e757ad98000f1081b87bcea3"
integrity sha512-0BfJq4NSfQXd+SkFdrvFbG7addhYSBA2mQwISr46pD6E5iqkWg02RAs8vyTT/j0RTnoYmeXauBuSv1qKwR179g==
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
dependencies:
Update dependency analytics-node to v3.4.0-beta.1
2019-12-17 00:06:35 +03:00
follow-redirects "1.5.10"
is-buffer "^2.0.2"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
Update dependency jwks-rsa to v1.8.0
2020-04-13 21:47:44 +03:00
axios@^0.19.2:
version "0.19.2"
resolved "https://registry.yarnpkg.com/axios/-/axios-0.19.2.tgz#3ea36c5d8818d0d5f8a8a97a6d36b86cdc00cb27"
integrity sha512-fjgm5MvRHLhx+osE2xoekY70AhARk3a6hkN+3Io1jc00jtquGvxYlKlsFUhmUET0V5te6CcZI7lcv2Ym61mjHA==
dependencies:
follow-redirects "1.5.10"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
bail@^1.0.0:
version "1.0.4"
resolved "https://registry.yarnpkg.com/bail/-/bail-1.0.4.tgz#7181b66d508aa3055d3f6c13f0a0c720641dde9b"
integrity sha512-S8vuDB4w6YpRhICUDET3guPlQpaJl7od94tpZ0Fvnyp+MKW/HyDTcRDck+29C9g+d/qQHnddRH3+94kZdrW0Ww==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
balanced-match@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/balanced-match/-/balanced-match-1.0.0.tgz#89b4d199ab2bee49de164ea02b89ce462d71b767"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ibTRmasr7kneFk6gK4nORi1xt2c=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
base64-js@^1.0.2:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "1.3.1"
resolved "https://registry.yarnpkg.com/base64-js/-/base64-js-1.3.1.tgz#58ece8cb75dd07e71ed08c736abc5fac4dbf8df1"
integrity sha512-mLQ4i2QO1ytvGWFWmcngKO//JXAQueZvwEKtjgQFM4jIK0kU+ytMfplL8j+n5mspOfjHwoAg+9yhb7BwAHm36g==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
Update dependency node-jose to v1.1.3
2019-07-02 03:37:57 +03:00
base64url@^3.0.1:
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
version "3.0.1"
resolved "https://registry.yarnpkg.com/base64url/-/base64url-3.0.1.tgz#6399d572e2bc3f90a9a8b22d5dbb0a32d33f788d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-ir1UPr3dkwexU7FdV8qBBbNDRUhMmIekYMFZfi+C/sLNnRESKPl23nB9b2pltqfOQNnGzsDdId90AEtG5tCx4A==
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
base@^0.11.1:
version "0.11.2"
resolved "https://registry.yarnpkg.com/base/-/base-0.11.2.tgz#7bde5ced145b6d551a90db87f83c558b4eb48a8f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-5T6P4xPgpp0YDFvSWwEZ4NoE3aM4QBQXDzmVbraCkFj8zHM+mba8SyqB5DbZWyR7mYHo6Y7BdQo3MoA4m0TeQg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
cache-base "^1.0.1"
class-utils "^0.3.5"
component-emitter "^1.2.1"
define-property "^1.0.0"
isobject "^3.0.1"
mixin-deep "^1.2.0"
pascalcase "^0.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
bcrypt-pbkdf@^1.0.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz#a4301d389b6a43f9b67ff3ca11a3f6637e360e9e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-pDAdOJtqQ/m2f/PKEaP2Y342Dp4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
tweetnacl "^0.14.3"
Update bcryptjs to version 2.4.3 🚀 (#7949) * chore(package): update bcryptjs to version 2.4.3 https://greenkeeper.io/ * chore: yarn.lock
2017-02-08 20:54:16 +03:00
bcryptjs@2.4.3:
version "2.4.3"
resolved "https://registry.yarnpkg.com/bcryptjs/-/bcryptjs-2.4.3.tgz#9ab5627b93e60621ff7cdac5da9733027df1d0cb"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-mrVie5PmBiH/fNrF2pczAn3x0Ms=
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
Update dependency mysql to v2.18.1
2020-02-19 14:11:32 +03:00
bignumber.js@9.0.0:
version "9.0.0"
resolved "https://registry.yarnpkg.com/bignumber.js/-/bignumber.js-9.0.0.tgz#805880f84a329b5eac6e7cb6f8274b6d82bdf075"
integrity sha512-t/OYhhJ2SD+YGBQcjY8GzzDHEk9f3nerxjtfa6tlMXfe7frs/WozhvCNoGvpM0P3bNf3Gq5ZRMlGr5f3r4/N8A==
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
binary-extensions@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/binary-extensions/-/binary-extensions-2.0.0.tgz#23c0df14f6a88077f5f986c0d167ec03c3d5537c"
integrity sha512-Phlt0plgpIIBOGTT/ehfFnbNlfsDEiqmzE2KRXoX1bLIlir4X/MR+zSyBEkL05ffWgnRSf/DXv+WrUAVr93/ow==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
bl@^1.0.0, bl@^1.0.1:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
version "1.2.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/bl/-/bl-1.2.2.tgz#a160911717103c07410cef63ef51b397c025af9c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-e8tQYnZodmebYDWGH7KMRvtzKXaJHx3BbilrgZCfvyLUYdKpK1t5PSPmpkny/SgiTSCnjfLW7v5rlONXVFkQEA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
readable-stream "^2.3.5"
safe-buffer "^5.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
bl@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/bl/-/bl-3.0.0.tgz#3611ec00579fd18561754360b21e9f784500ff88"
integrity sha512-EUAyP5UHU5hxF8BPT0LKW8gjYLhq1DQIcneOX/pL/m2Alo+OYDQAJlHq+yseMP50Os2nHXOSic6Ss3vSQeyf4A==
dependencies:
readable-stream "^3.0.1"
Update dependency knex to v0.20.13
2020-04-01 20:10:27 +03:00
bluebird@3.7.2, bluebird@^3.4.3, bluebird@^3.7.2:
Update dependency bluebird to v3.7.2
2019-12-02 03:24:08 +03:00
version "3.7.2"
resolved "https://registry.yarnpkg.com/bluebird/-/bluebird-3.7.2.tgz#9f229c15be272454ffa973ace0dbee79a1b0c36f"
integrity sha512-XpNj6GDQzdfW+r2Wnn7xiSAd7TM3jzkxGXBGTtWKuSXv1xUV+azxAm8jdWZN06QTQk+2N2XB9jRDkvbmQmcRtg==
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
bluebird@^3.4.1, bluebird@^3.4.6, bluebird@^3.5.0, bluebird@^3.5.3, bluebird@^3.5.4, bluebird@^3.5.5:
Update dependency metascraper-author to v5.7.14
2019-10-28 10:31:38 +03:00
version "3.7.0"
resolved "https://registry.yarnpkg.com/bluebird/-/bluebird-3.7.0.tgz#56a6a886e03f6ae577cffedeb524f8f2450293cf"
integrity sha512-aBQ1FxIa7kSWCcmKHlcHFlT2jt6J/l4FzC7KcPELkOJOsPOb/bccdhmIrKDfXhwFrmc7vDoDrrepFvGqjyXGJg==
Update dependency @tryghost/social-urls to v0.1.5
2019-12-16 23:27:50 +03:00
bluebird@^3.7.1:
version "3.7.1"
resolved "https://registry.yarnpkg.com/bluebird/-/bluebird-3.7.1.tgz#df70e302b471d7473489acf26a93d63b53f874de"
integrity sha512-DdmyoGCleJnkbp3nkbxTLJ18rjDsE4yCggEwKNXkeV123sPNfOCYeDoeuOY+F2FrSjO1YXcTU+dsy96KMy+gcg==
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
body-parser@1.19.0, body-parser@^1.19.0:
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
version "1.19.0"
resolved "https://registry.yarnpkg.com/body-parser/-/body-parser-1.19.0.tgz#96b2709e57c9c4e09a6fd66a8fd979844f69f08a"
integrity sha512-dhEPs72UPbDnAQJ9ZKMNTP6ptJaionhP5cBb541nXPlW60Jepo9RV/a4fX4XWW9CuFNK22krhrj1+rgzifNCsw==
dependencies:
bytes "3.1.0"
content-type "~1.0.4"
debug "2.6.9"
depd "~1.1.2"
http-errors "1.7.2"
iconv-lite "0.4.24"
on-finished "~2.3.0"
qs "6.7.0"
raw-body "2.4.0"
type-is "~1.6.17"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
body@^5.1.0:
version "5.1.0"
resolved "https://registry.yarnpkg.com/body/-/body-5.1.0.tgz#e4ba0ce410a46936323367609ecb4e6553125069"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-5LoM5BCkaTYyM2dgnstOZVMSUGk=
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
dependencies:
continuable-cache "^0.3.1"
error "^7.0.0"
raw-body "~1.1.0"
safe-json-parse "~1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency bookshelf-relations to v1.3.2
2020-04-08 11:16:23 +03:00
bookshelf-relations@1.3.2:
version "1.3.2"
resolved "https://registry.yarnpkg.com/bookshelf-relations/-/bookshelf-relations-1.3.2.tgz#bceb0ab3b172b01a48a81eed16cd68446975515a"
integrity sha512-LrsWiO3kKfYCTGWxCVzFuEi/hIfukRz6n3KIcQqCFaAO/PmYxFtxarMGeVKDpL/hm1BudksrK7S9vXmkfgv8eQ==
Add bookshelf-relations (#9252) no issue - added https://github.com/TryGhost/bookshelf-relations as dependency - remove existing tag handling --- * Important: Ensure we trigger parent initialize function - otherwise the plugin is unable to listen on model events - important: event order for listeners is Ghost -> Plugin - Ghost should be able to listen on the events as first instance - e.g. be able to modify/validate relationships * Fix tag validation - we detect lower/update case slugs for tags manually - this can't be taken over from the plugin obviously - ensure we update the target model e.g. this.set('tags', ...) * override base fn: `permittedAttributes` - ensure we call the base - put relations on top - each relation is allowed to be passed - the plugin will auto-unset any relations to it does not reach the database * Ensure we run add/edit/delete within a transaction - updating nested relationships requires sql queries - all sql statements have to run in a single transaction to ensure we rollback everything if an error occurs - use es6
2017-11-21 16:28:05 +03:00
dependencies:
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
bluebird "3.7.2"
ghost-ignition "4.1.0"
Update dependency bookshelf-relations to v1.1.2
2019-09-02 03:32:16 +03:00
lodash "4.17.15"
Add bookshelf-relations (#9252) no issue - added https://github.com/TryGhost/bookshelf-relations as dependency - remove existing tag handling --- * Important: Ensure we trigger parent initialize function - otherwise the plugin is unable to listen on model events - important: event order for listeners is Ghost -> Plugin - Ghost should be able to listen on the events as first instance - e.g. be able to modify/validate relationships * Fix tag validation - we detect lower/update case slugs for tags manually - this can't be taken over from the plugin obviously - ensure we update the target model e.g. this.set('tags', ...) * override base fn: `permittedAttributes` - ensure we call the base - put relations on top - each relation is allowed to be passed - the plugin will auto-unset any relations to it does not reach the database * Ensure we run add/edit/delete within a transaction - updating nested relationships requires sql queries - all sql statements have to run in a single transaction to ensure we rollback everything if an error occurs - use es6
2017-11-21 16:28:05 +03:00
Update dependency bookshelf to v0.15.2 (#10982) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-03-30 12:42:25 +03:00
bookshelf@0.15.2:
version "0.15.2"
resolved "https://registry.yarnpkg.com/bookshelf/-/bookshelf-0.15.2.tgz#aca42468ab6da7a514dc834dc1305d9eb2d9176b"
integrity sha512-pFttZ3vq0ZdPi4jGGTdHdnkjU3Yu/D5Pm1kHL1E46pjDgMghWlVgjuCWAUUb3AnRam3Qy8l4fQgTxEPOHxPzHg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bluebird "^3.4.3"
create-error "~0.3.1"
inflection "^1.5.1"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 23:53:11 +03:00
lodash "^4.17.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
boolbase@^1.0.0, boolbase@~1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.0"
resolved "https://registry.yarnpkg.com/boolbase/-/boolbase-1.0.0.tgz#68dff5fbe60c51eb37725ea9e3ed310dcc1e776e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-aN/1++YMUes3cl6p4+0xDcwed24=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
brace-expansion@^1.1.7:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.1.11"
resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-1.1.11.tgz#3c7fcbf529d87226f3d2f52b966ff5271eb441dd"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
balanced-match "^1.0.0"
concat-map "0.0.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
braces@^2.3.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "2.3.2"
resolved "https://registry.yarnpkg.com/braces/-/braces-2.3.2.tgz#5979fd3f14cd531565e5fa2df1abfff1dfaee729"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-aNdbnj9P8PjdXU4ybaWLK2IF3jc/EoDYbC7AazW6to3TRsfXxscC9UXOB5iDiEQrkyIbWp2SLQda4+QAa7nc3w==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
arr-flatten "^1.1.0"
array-unique "^0.3.2"
extend-shallow "^2.0.1"
fill-range "^4.0.0"
isobject "^3.0.1"
repeat-element "^1.1.2"
snapdragon "^0.8.1"
snapdragon-node "^2.0.1"
split-string "^3.0.2"
to-regex "^3.0.1"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
braces@~3.0.2:
version "3.0.2"
resolved "https://registry.yarnpkg.com/braces/-/braces-3.0.2.tgz#3454e1a462ee8d599e236df336cd9ea4f8afe107"
integrity sha512-b8um+L1RzM3WDSzvhm6gIz1yfTbBt6YTlcEKAvsmqCZZFw46z626lVj9j1yEPW33H5H+lBQpZMP1k8l+78Ha0A==
dependencies:
fill-range "^7.0.1"
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
browser-process-hrtime@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/browser-process-hrtime/-/browser-process-hrtime-1.0.0.tgz#3c9b4b7d782c8121e56f10106d84c0d0ffc94626"
integrity sha512-9o5UecI3GhkpM6DrXr69PblIuWxPKk9Y0jHBRhdocZ2y7YECBFCsHm79Pr3OyR2AvjhDkabFJaDJMYRazHgsow==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
browser-stdout@1.3.1:
version "1.3.1"
resolved "https://registry.yarnpkg.com/browser-stdout/-/browser-stdout-1.3.1.tgz#baa559ee14ced73452229bad7326467c61fabd60"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-qhAVI1+Av2X7qelOfAIYwXONood6XlZE/fXaBSmW/T5SzLAmCgzi+eiWE7fUvbHaeNBQH13UftjpXxsfLkMpgw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency node-jose to v1.1.4
2020-03-26 22:17:47 +03:00
browserify-zlib@^0.2.0:
version "0.2.0"
resolved "https://registry.yarnpkg.com/browserify-zlib/-/browserify-zlib-0.2.0.tgz#2869459d9aa3be245fe8fe2ca1f46e2e7f54d73f"
integrity sha512-Z942RysHXmJrhqk88FmKBVq/v5tqmSkDz7p54G/MGyjMnCFFnC79XWNbg+Vta8W6Wb2qtSZTSxIGkJrRpCFEiA==
dependencies:
pako "~1.0.5"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
browserslist@^4.0.0:
version "4.11.1"
resolved "https://registry.yarnpkg.com/browserslist/-/browserslist-4.11.1.tgz#92f855ee88d6e050e7e7311d987992014f1a1f1b"
integrity sha512-DCTr3kDrKEYNw6Jb9HFxVLQNaue8z+0ZfRBRjmCunKDEXEBajKDj2Y+Uelg+Pi29OnvaSGwjOsnRyNEkXzHg5g==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
caniuse-lite "^1.0.30001038"
electron-to-chromium "^1.3.390"
node-releases "^1.1.53"
pkg-up "^2.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
brute-knex@4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/brute-knex/-/brute-knex-4.0.0.tgz#bb23549017565983e5ed7858214d8d15b690c3bb"
integrity sha512-mMpMvCJjWasupvbcYVPIb6QSWT67U8zKzp+nG6NRsQUeXJHE2fS76EG5r+NSzoQO7xKZ7kONnNkylnivZ9ASmA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
express-brute "^1.0.1"
knex "^0.17"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency bson-objectid to v1.3.0
2019-07-02 13:03:37 +03:00
bson-objectid@1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/bson-objectid/-/bson-objectid-1.3.0.tgz#f0f4c7c949fece975f12790510d75d7fe39fb456"
integrity sha512-YcB+lRJEEEIcHNLKyhmHujW7OCVE3+xr9IpEhlprBZnXgF3hqeePeexIsAaOtu1SbkgZRlJVUxvYZ3ngUOyIew==
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
buffer-alloc-unsafe@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/buffer-alloc-unsafe/-/buffer-alloc-unsafe-1.1.0.tgz#bd7dc26ae2972d0eda253be061dba992349c19f0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-TEM2iMIEQdJ2yjPJoSIsldnleVaAk1oW3DBVUykyOLsEsFmEc9kn+SFFPz+gl54KQNxlDnAwCXosOS9Okx2xAg==
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
buffer-alloc@^1.1.0, buffer-alloc@^1.2.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/buffer-alloc/-/buffer-alloc-1.2.0.tgz#890dd90d923a873e08e10e5fd51a57e5b7cce0ec"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-CFsHQgjtW1UChdXgbyJGtnm+O/uLQeZdtbDo8mfUgYXCHSM1wgrVxXm6bSyrUuErEb+4sYVGCzASBRot7zyrow==
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
buffer-alloc-unsafe "^1.1.0"
buffer-fill "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency @tryghost/zip to v1
2020-04-08 14:57:26 +03:00
buffer-crc32@^0.2.1, buffer-crc32@^0.2.13, buffer-crc32@~0.2.3:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.2.13"
resolved "https://registry.yarnpkg.com/buffer-crc32/-/buffer-crc32-0.2.13.tgz#0d333e3f00eac50aa1454abd30ef8c2a5d9a7242"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-DTM+PwDqxQqhRUq9MO+MKl2ackI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
buffer-equal-constant-time@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz#f8e71132f7ffe6e01a5c9697a4c6f3e48d5cc819"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-+OcRMvf/5uAaXJaXpMbz5I1cyBk=
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
buffer-fill@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/buffer-fill/-/buffer-fill-1.0.0.tgz#f8f78b76789888ef39f205cd637f68e702122b2c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-+PeLdniYiO858gXNY39o5wISKyw=
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
buffer-from@^1.0.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/buffer-from/-/buffer-from-1.1.1.tgz#32713bc028f75c02fdb710d7c7bcec1f2c6070ef"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-MQcXEUbCKtEo7bhqEs6560Hyd4XaovZlO/k9V3hjVUF/zwW7KBVdSK4gIt/bzwS9MbR5qob+F5jusZsb0YQK2A==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
buffer@^5.1.0:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "5.4.3"
resolved "https://registry.yarnpkg.com/buffer/-/buffer-5.4.3.tgz#3fbc9c69eb713d323e3fc1a895eee0710c072115"
integrity sha512-zvj65TkFeIt3i6aj5bIvJDzjjQQGs4o/sNoezg1F1kYap9Nu2jcUdpwzRSJTHMMzG0H7bZkn4rNQpImhuxWX2A==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dependencies:
base64-js "^1.0.2"
ieee754 "^1.1.4"
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
Update dependency node-jose to v1.1.4
2020-03-26 22:17:47 +03:00
buffer@^5.5.0:
version "5.5.0"
resolved "https://registry.yarnpkg.com/buffer/-/buffer-5.5.0.tgz#9c3caa3d623c33dd1c7ef584b89b88bf9c9bc1ce"
integrity sha512-9FTEDjLjwoAkEwyMGDjYJQN2gfRgOKBKRfiglhvibGbpeeU/pQn1bJxQqm32OD/AIeEuHxU9roxXxg34Byp/Ww==
dependencies:
base64-js "^1.0.2"
ieee754 "^1.1.4"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
bunyan-loggly@^1.3.1:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "1.4.1"
resolved "https://registry.yarnpkg.com/bunyan-loggly/-/bunyan-loggly-1.4.1.tgz#b6c806fb34bfcde2ce0d98878cf3534620b969e7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-D2NGeqz94bWWa8gTgEXLtSNGuKprpAhUroGv2gFJeJ1cwhGEkwQJBgshrNUfW/zMuaI5rKCmxMo0G47ob4BemQ==
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
dependencies:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
json-stringify-safe "^5.0.1"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
node-loggly-bulk "^2.2.4"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
bunyan@1.8.12:
version "1.8.12"
resolved "https://registry.yarnpkg.com/bunyan/-/bunyan-1.8.12.tgz#f150f0f6748abdd72aeae84f04403be2ef113797"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8VDw9nSKvdcq6uhPBEA74u8RN5c=
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
optionalDependencies:
dtrace-provider "~0.8"
moment "^2.10.6"
mv "~2"
safe-json-stringify "~1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
busboy@^0.2.11:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "0.2.14"
resolved "https://registry.yarnpkg.com/busboy/-/busboy-0.2.14.tgz#6c2a622efcf47c57bbbe1e2a9c37ad36c7925453"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-bCpiLvz0fFe7vh4qnDetNseSVFM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
dicer "0.2.5"
readable-stream "1.1.x"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
bytes@1:
version "1.0.0"
resolved "https://registry.yarnpkg.com/bytes/-/bytes-1.0.0.tgz#3569ede8ba34315fab99c3e92cb04c7220de1fa8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-NWnt6Lo0MV+rmcPpLLBMciDeH6g=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
bytes@3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/bytes/-/bytes-3.0.0.tgz#d32815404d689699f85a4ea4fa8755dd13a96048"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-0ygVQE1olpn4Wk6k+odV3ROpYEg=
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
bytes@3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/bytes/-/bytes-3.1.0.tgz#f6cf7933a360e0588fa9fde85651cdc7f805d1f6"
integrity sha512-zauLjrfCG+xvoyaqLoV8bLVXXNGC4JqlxFCutSDWA6fJrTo2ZuvLYTqZ7aHBLZSMOopbzwv8f+wZcVzfVTI2Dg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
cache-base@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/cache-base/-/cache-base-1.0.1.tgz#0a7f46416831c8b662ee36fe4e7c59d76f666ab2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-AKcdTnFSWATd5/GCPRxr2ChwIJ85CeyrEyjRHlKxQ56d4XJMGym0uAiKn0xbLOGOl3+yRpOTi484dVCEc5AUzQ==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
collection-visit "^1.0.0"
component-emitter "^1.2.1"
get-value "^2.0.6"
has-value "^1.0.0"
isobject "^3.0.1"
set-value "^2.0.0"
to-object-path "^0.3.0"
union-value "^1.0.0"
unset-value "^1.0.0"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
cacheable-lookup@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/cacheable-lookup/-/cacheable-lookup-2.0.0.tgz#33b1e56f17507f5cf9bb46075112d65473fb7713"
integrity sha512-s2piO6LvA7xnL1AR03wuEdSx3BZT3tIJpZ56/lcJwzO/6DTJZlTs7X3lrvPxk6d1PlDe6PrVe2TjlUIZNFglAQ==
dependencies:
keyv "^4.0.0"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
cacheable-request@^6.0.0:
version "6.1.0"
resolved "https://registry.yarnpkg.com/cacheable-request/-/cacheable-request-6.1.0.tgz#20ffb8bd162ba4be11e9567d823db651052ca912"
integrity sha512-Oj3cAGPCqOZX7Rz64Uny2GYAZNliQSqfbePrgAQ1wKAihYmCUnraBtJtKcGR4xz7wF+LoJC+ssFZvv5BgF9Igg==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
clone-response "^1.0.2"
get-stream "^5.1.0"
http-cache-semantics "^4.0.0"
keyv "^3.0.0"
lowercase-keys "^2.0.0"
normalize-url "^4.1.0"
responselike "^1.0.2"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
cacheable-request@^7.0.1:
version "7.0.1"
resolved "https://registry.yarnpkg.com/cacheable-request/-/cacheable-request-7.0.1.tgz#062031c2856232782ed694a257fa35da93942a58"
integrity sha512-lt0mJ6YAnsrBErpTMWeu5kl/tg9xMAWjavYTN6VQXM1A/teBITuNcccXsCxF0tDQQJf9DfAaX5O4e0zp0KlfZw==
dependencies:
clone-response "^1.0.2"
get-stream "^5.1.0"
http-cache-semantics "^4.0.0"
keyv "^4.0.0"
lowercase-keys "^2.0.0"
normalize-url "^4.1.0"
responselike "^2.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
caller-callsite@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/caller-callsite/-/caller-callsite-2.0.0.tgz#847e0fce0a223750a9a027c54b33731ad3154134"
integrity sha1-hH4PzgoiN1CpoCfFSzNzGtMVQTQ=
dependencies:
callsites "^2.0.0"
caller-path@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/caller-path/-/caller-path-2.0.0.tgz#468f83044e369ab2010fac5f06ceee15bb2cb1f4"
integrity sha1-Ro+DBE42mrIBD6xfBs7uFbsssfQ=
dependencies:
caller-callsite "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
caller@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/caller/-/caller-1.0.1.tgz#b851860f70e195db3d277395aa1a7e23ea30ecf5"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-uFGGD3Dhlds9J3OVqhp+I+ow7PU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
callsites@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/callsites/-/callsites-2.0.0.tgz#06eb84f00eea413da86affefacbffb36093b3c50"
integrity sha1-BuuE8A7qQT2oav/vrL/7Ngk7PFA=
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
callsites@^3.0.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/callsites/-/callsites-3.1.0.tgz#b3630abd8943432f54b3f0519238e33cd7df2f73"
integrity sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
camelcase-keys@^2.0.0:
version "2.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/camelcase-keys/-/camelcase-keys-2.1.0.tgz#308beeaffdf28119051efa1d932213c91b8f92e7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-MIvur/3ygRkFHvodkyITyRuPkuc=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
camelcase "^2.0.0"
map-obj "^1.0.0"
camelcase@^2.0.0, camelcase@^2.0.1:
version "2.1.1"
resolved "https://registry.yarnpkg.com/camelcase/-/camelcase-2.1.1.tgz#7c1d16d679a1bbe59ca02cacecfb011e201f5a1f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-fB0W1nmhu+WcoCys7PsBHiAfWh8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
camelcase@^5.0.0:
version "5.3.1"
resolved "https://registry.yarnpkg.com/camelcase/-/camelcase-5.3.1.tgz#e3c9b31569e106811df242f715725a1f4c494320"
integrity sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
caniuse-api@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/caniuse-api/-/caniuse-api-3.0.0.tgz#5e4d90e2274961d46291997df599e3ed008ee4c0"
integrity sha512-bsTwuIg/BZZK/vreVTYYbSWoe2F+71P7K5QGEX+pT250DZbfU1MQ5prOKpPR+LL6uWKK3KMwMCAS74QB3Um1uw==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
browserslist "^4.0.0"
caniuse-lite "^1.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
lodash.memoize "^4.1.2"
lodash.uniq "^4.5.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
caniuse-lite@^1.0.0, caniuse-lite@^1.0.30001038:
version "1.0.30001038"
resolved "https://registry.yarnpkg.com/caniuse-lite/-/caniuse-lite-1.0.30001038.tgz#44da3cbca2ab6cb6aa83d1be5d324e17f141caff"
integrity sha512-zii9quPo96XfOiRD4TrfYGs+QsGZpb2cGiMAzPjtf/hpFgB6zCPZgJb7I1+EATeMw/o+lG8FyRAnI+CWStHcaQ==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
caseless@~0.12.0:
version "0.12.0"
resolved "https://registry.yarnpkg.com/caseless/-/caseless-0.12.0.tgz#1b681c21ff84033c826543090689420d187151dc"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-G2gcIf+EAzyCZUMJBolCDRhxUdw=
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
ccount@^1.0.0:
version "1.0.4"
resolved "https://registry.yarnpkg.com/ccount/-/ccount-1.0.4.tgz#9cf2de494ca84060a2a8d2854edd6dfb0445f386"
integrity sha512-fpZ81yYfzentuieinmGnphk0pLkOTMm6MZdVqwd77ROvhko6iujLNGrHH5E7utq3ygWklwfmwuG+A7P+NpqT6w==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
chalk@2.3.0:
version "2.3.0"
resolved "https://registry.yarnpkg.com/chalk/-/chalk-2.3.0.tgz#b5ea48efc9c1793dccc9b4767c93914d3f2d52ba"
integrity sha512-Az5zJR2CBujap2rqXGaJKaPHyJ0IrUimvYNX+ncCy8PJP4ltOGTrHUIo097ZaL2zMeKYpiCdqDvS6zdrTFok3Q==
dependencies:
ansi-styles "^3.1.0"
escape-string-regexp "^1.0.5"
supports-color "^4.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
chalk@^1.0.0, chalk@^1.1.1:
Bumped chalk from version 1.1.3 to 2.4.2 refs #9389 - i was not able to find a breaking change, which affects us - https://github.com/chalk/chalk/releases/tag/v2.0.0
2019-01-21 16:21:13 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/chalk/-/chalk-1.1.3.tgz#a8115c55e4a702fe4d150abd3872822a7e09fc98"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-qBFcVeSnAv5NFQq9OHKCKn4J/Jg=
Bumped chalk from version 1.1.3 to 2.4.2 refs #9389 - i was not able to find a breaking change, which affects us - https://github.com/chalk/chalk/releases/tag/v2.0.0
2019-01-21 16:21:13 +03:00
dependencies:
ansi-styles "^2.2.1"
escape-string-regexp "^1.0.2"
has-ansi "^2.0.0"
strip-ansi "^3.0.0"
supports-color "^2.0.0"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
chalk@^2.0.0, chalk@^2.1.0, chalk@^2.4.1, chalk@^2.4.2, chalk@~2.4.1:
Update dependency chalk to v3
2020-02-18 22:06:21 +03:00
version "2.4.2"
resolved "https://registry.yarnpkg.com/chalk/-/chalk-2.4.2.tgz#cd42541677a54333cf541a49108c1432b44c9424"
integrity sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ==
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
dependencies:
Update dependency chalk to v3
2020-02-18 22:06:21 +03:00
ansi-styles "^3.2.1"
escape-string-regexp "^1.0.5"
supports-color "^5.3.0"
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
Removed unused chalk dependency no issue - left over from removing the stable branch warning from the Gruntfile - it's not used anywhere else
2020-04-01 21:02:55 +03:00
chalk@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/chalk/-/chalk-3.0.0.tgz#3f73c2bf526591f574cc492c51e2456349f844e4"
integrity sha512-4D3B6Wf41KOYRFdszmDqMCGq5VV/uMAB273JILmO+3jAlh8X4qDtdtgCR3fxtbLEMzSx22QdhnDcJvu2u1fVwg==
dependencies:
ansi-styles "^4.1.0"
supports-color "^7.1.0"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
character-entities-html4@^1.0.0:
version "1.1.3"
resolved "https://registry.yarnpkg.com/character-entities-html4/-/character-entities-html4-1.1.3.tgz#5ce6e01618e47048ac22f34f7f39db5c6fd679ef"
integrity sha512-SwnyZ7jQBCRHELk9zf2CN5AnGEc2nA+uKMZLHvcqhpPprjkYhiLn0DywMHgN5ttFZuITMATbh68M6VIVKwJbcg==
character-entities-legacy@^1.0.0:
version "1.1.3"
resolved "https://registry.yarnpkg.com/character-entities-legacy/-/character-entities-legacy-1.1.3.tgz#3c729991d9293da0ede6dddcaf1f2ce1009ee8b4"
integrity sha512-YAxUpPoPwxYFsslbdKkhrGnXAtXoHNgYjlBM3WMXkWGTl5RsY3QmOyhwAgL8Nxm9l5LBThXGawxKPn68y6/fww==
character-entities@^1.0.0:
version "1.2.3"
resolved "https://registry.yarnpkg.com/character-entities/-/character-entities-1.2.3.tgz#bbed4a52fe7ef98cc713c6d80d9faa26916d54e6"
integrity sha512-yB4oYSAa9yLcGyTbB4ItFwHw43QHdH129IJ5R+WvxOkWlyFnR5FAaBNnUq4mcxsTVZGh28bHoeTHMKXH1wZf3w==
character-reference-invalid@^1.0.0:
version "1.1.3"
resolved "https://registry.yarnpkg.com/character-reference-invalid/-/character-reference-invalid-1.1.3.tgz#1647f4f726638d3ea4a750cf5d1975c1c7919a85"
integrity sha512-VOq6PRzQBam/8Jm6XBGk2fNEnHXAdGd6go0rtd4weAGECBamHDwwCQSOT12TACIYUZegUXnV6xBXqUssijtxIg==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
chardet@^0.7.0:
version "0.7.0"
resolved "https://registry.yarnpkg.com/chardet/-/chardet-0.7.0.tgz#90094849f0937f2eedc2425d0d28a9e5f0cbad9e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-mT8iDcrh03qDGRRmoA2hmBJnxpllMR+0/0qlzjqZES6NdiWDcZkCNAk4rPFZ9Q85r27unkiNNg8ZOiwZXBHwcA==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
charenc@~0.0.1:
version "0.0.2"
resolved "https://registry.yarnpkg.com/charenc/-/charenc-0.0.2.tgz#c0a1d2f3a7092e03774bfa83f14c0fc5790a8667"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-wKHS86cJLgN3S/qD8UwPxXkKhmc=
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
cheerio-advanced-selectors@~2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/cheerio-advanced-selectors/-/cheerio-advanced-selectors-2.0.1.tgz#fb5ec70a4599e8cec1cf669c6d9b90a3fa969c48"
integrity sha512-5wHR8bpiD5pdUtaS81A6hnJezzoDzL1TLWfK6bxnLkIgEKPV26BlOdMCcvuj3fTE7JSalsTUeNU7AOD/u6bYhw==
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
cheerio@0.22.0, cheerio@^0.22.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.22.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/cheerio/-/cheerio-0.22.0.tgz#a9baa860a3f9b595a6b81b1a86873121ed3a269e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-qbqoYKP5tZWmuBsahocxIe06Jp4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
css-select "~1.2.0"
dom-serializer "~0.1.0"
entities "~1.1.1"
htmlparser2 "^3.9.1"
lodash.assignin "^4.0.9"
lodash.bind "^4.1.4"
lodash.defaults "^4.0.1"
lodash.filter "^4.4.0"
lodash.flatten "^4.2.0"
lodash.foreach "^4.3.0"
lodash.map "^4.4.0"
lodash.merge "^4.4.0"
lodash.pick "^4.2.1"
lodash.reduce "^4.4.0"
lodash.reject "^4.4.0"
lodash.some "^4.4.0"
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
cheerio@~1.0.0-rc.3:
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
version "1.0.0-rc.3"
resolved "https://registry.yarnpkg.com/cheerio/-/cheerio-1.0.0-rc.3.tgz#094636d425b2e9c0f4eb91a46c05630c9a1a8bf6"
integrity sha512-0td5ijfUPuubwLUu0OBoe98gZj8C/AA+RW3v67GPlGOrvxWjZmBXiBCRU+I8VEiNyJzjth40POfHiz2RB3gImA==
dependencies:
css-select "~1.2.0"
dom-serializer "~0.1.1"
entities "~1.1.1"
htmlparser2 "^3.9.1"
lodash "^4.15.0"
parse5 "^3.0.1"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
chokidar@3.3.0:
version "3.3.0"
resolved "https://registry.yarnpkg.com/chokidar/-/chokidar-3.3.0.tgz#12c0714668c55800f659e262d4962a97faf554a6"
integrity sha512-dGmKLDdT3Gdl7fBUe8XK+gAtGmzy5Fn0XkkWQuYxGIgWVPPse2CxFA5mtrlD0TOHaHjEUqkWNyP1XdHoJES/4A==
dependencies:
anymatch "~3.1.1"
braces "~3.0.2"
glob-parent "~5.1.0"
is-binary-path "~2.1.0"
is-glob "~4.0.1"
normalize-path "~3.0.0"
readdirp "~3.2.0"
optionalDependencies:
fsevents "~2.1.1"
Replaced image manipulation w/ @tryghost/image-transform (#11687) - moved image.manipulation lib to a new package called @tryghost/image-transform - new package has an updated API signature, so the method calls have changed but the underlying code is identical - removed the optional sharp dependency from Ghost, as this is now optionally required by the image-transform module
2020-03-25 20:33:03 +03:00
chownr@^1.1.1:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/chownr/-/chownr-1.1.3.tgz#42d837d5239688d55f303003a508230fa6727142"
integrity sha512-i70fVHhmV3DtTl6nqvZOnIjbY0Pe4kAUjwHj8z0zAdgBtYrJyYwLKCCuRBQ5ppkyL0AkN7HKRnETdmdp1zqNXw==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Replaced image manipulation w/ @tryghost/image-transform (#11687) - moved image.manipulation lib to a new package called @tryghost/image-transform - new package has an updated API signature, so the method calls have changed but the underlying code is identical - removed the optional sharp dependency from Ghost, as this is now optionally required by the image-transform module
2020-03-25 20:33:03 +03:00
chownr@^1.1.3:
version "1.1.4"
resolved "https://registry.yarnpkg.com/chownr/-/chownr-1.1.4.tgz#6fc9d7b42d32a583596337666e7d08084da2cc6b"
integrity sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
chrono-node@~1.4.5:
version "1.4.5"
resolved "https://registry.yarnpkg.com/chrono-node/-/chrono-node-1.4.5.tgz#27270e03692b4582a9b10e250ef50f326fafcd9a"
integrity sha512-0QDtWS1TOS/DKj2C3dPmklaWWGjH9JbVDwP8Ipvl97cNoCyD5cnyTmZs3+wN0rrCl99h92Q2As/rYVZjtF+ZzQ==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
dayjs "^1.8.19"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
class-utils@^0.3.5:
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
version "0.3.6"
resolved "https://registry.yarnpkg.com/class-utils/-/class-utils-0.3.6.tgz#f93369ae8b9a7ce02fd41faad0ca83033190c463"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-qOhPa/Fj7s6TY8H8esGu5QNpMMQxz79h+urzrNYN6mn+9BnxlDGf5QZ+XeCDsxSjPqsSR56XOZOJmpeurnLMeg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
arr-union "^3.1.0"
define-property "^0.2.5"
isobject "^3.0.0"
static-extend "^0.1.1"
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
clean-stack@~2.2.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/clean-stack/-/clean-stack-2.2.0.tgz#ee8472dbb129e727b31e8a10a427dee9dfe4008b"
integrity sha512-4diC9HaTE+KRAMWhDhrGOECgWZxoevMc5TlkObMqNSsVU62PYzXZ/SMTjzyGAFF1YusgxGcSWTEXBhp0CPwQ1A==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update Test & linting packages
2020-02-03 16:44:38 +03:00
cli-cursor@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/cli-cursor/-/cli-cursor-3.1.0.tgz#264305a7ae490d1d03bf0c9ba7c925d1753af307"
integrity sha512-I/zHAwsKf9FqGoXM4WWRACob9+SNukZTd94DWF57E4toouRulbCxcUh6RKUEOQlYTHJnzkPMySvPNaaSLNfLZw==
dependencies:
restore-cursor "^3.1.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
cli-width@^2.0.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/cli-width/-/cli-width-2.2.0.tgz#ff19ede8a9a5e579324147b0c11f0fbcbabed639"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-/xnt6Kml5XkyQUewwR8PvLq+1jk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
clipboardy@1.2.2:
version "1.2.2"
resolved "https://registry.yarnpkg.com/clipboardy/-/clipboardy-1.2.2.tgz#2ce320b9ed9be1514f79878b53ff9765420903e2"
integrity sha512-16KrBOV7bHmHdxcQiCvfUFYVFyEah4FI8vYT1Fr7CGSA4G+xBWMEfUEQJS1hxeHGtI9ju1Bzs9uXSbj5HZKArw==
dependencies:
arch "^2.1.0"
execa "^0.8.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
cliui@^3.0.3:
version "3.2.0"
resolved "https://registry.yarnpkg.com/cliui/-/cliui-3.2.0.tgz#120601537a916d29940f934da3b48d585a39213d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-EgYBU3qRbSmUD5NNo7SNWFo5IT0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
string-width "^1.0.1"
strip-ansi "^3.0.1"
wrap-ansi "^2.0.0"
Update dependency mocha to v6 (#11171)
2019-09-30 11:31:11 +03:00
cliui@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/cliui/-/cliui-5.0.0.tgz#deefcfdb2e800784aa34f46fa08e06851c7bbbc5"
integrity sha512-PYeGSEmmHM6zvoef2w8TPzlrnNpXIjTipYK780YswmIP9vjxmd6Y2a3CB2Ks6/AU8NHjZugXvo8w3oWM2qnwXA==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
dependencies:
Update dependency mocha to v6 (#11171)
2019-09-30 11:31:11 +03:00
string-width "^3.1.0"
strip-ansi "^5.2.0"
wrap-ansi "^5.1.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
clone-response@^1.0.2:
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/clone-response/-/clone-response-1.0.2.tgz#d1dc973920314df67fbeb94223b4ee350239e96b"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
integrity sha1-0dyXOSAxTfZ/vrlCI7TuNQI56Ws=
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
mimic-response "^1.0.0"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
co@^4.6.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/co/-/co-4.6.0.tgz#6ea6bdf3d853ae54ccb8e47bfa0bf3f9031fb184"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-bqa989hTrlTMuOR7+gvz+QMfsYQ=
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
coa@^2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/coa/-/coa-2.0.2.tgz#43f6c21151b4ef2bf57187db0d73de229e3e7ec3"
integrity sha512-q5/jG+YQnSy4nRTV4F7lPepBJZ8qBNJJDBuJdoejDyLXgmL7IEo+Le2JDZudFTFt7mrCqIRaSjws4ygRCTCAXA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
"@types/q" "^1.5.1"
chalk "^2.4.1"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
q "^1.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
code-point-at@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/code-point-at/-/code-point-at-1.1.0.tgz#0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-DQcLTQQ6W+ozovGkDi7bPZpMz3c=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
coffeescript@~1.10.0:
version "1.10.0"
resolved "https://registry.yarnpkg.com/coffeescript/-/coffeescript-1.10.0.tgz#e7aa8301917ef621b35d8a39f348dcdd1db7e33e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-56qDAZF+9iGzXYo580jc3R234z4=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
collapse-white-space@^1.0.2:
version "1.0.5"
resolved "https://registry.yarnpkg.com/collapse-white-space/-/collapse-white-space-1.0.5.tgz#c2495b699ab1ed380d29a1091e01063e75dbbe3a"
integrity sha512-703bOOmytCYAX9cXYqoikYIx6twmFCXsnzRQheBcTG3nzKYBR4P/+wkYeH+Mvj7qUz8zZDtdyzbxfnEi/kYzRQ==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
collection-visit@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/collection-visit/-/collection-visit-1.0.0.tgz#4bc0373c164bc3291b4d368c829cf1a80a59dca0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-S8A3PBZLwykbTTaMgpzxqApZ3KA=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
map-visit "^1.0.0"
object-visit "^1.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
color-convert@^1.9.0, color-convert@^1.9.1:
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
version "1.9.3"
resolved "https://registry.yarnpkg.com/color-convert/-/color-convert-1.9.3.tgz#bb71850690e1f136567de629d2d5471deda4c1e8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-QfAUtd+vFdAtFQcC8CCyYt1fYWxSqAiK2cSD6zDB8N3cpsEBAvRxp9zOGg6G/SHHJYAT88/az/IuDGALsNVbGg==
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
dependencies:
color-name "1.1.3"
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
color-convert@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/color-convert/-/color-convert-2.0.1.tgz#72d3a68d598c9bdb3af2ad1e84f21d896abd4de3"
integrity sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==
dependencies:
color-name "~1.1.4"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
color-name@1.1.3:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/color-name/-/color-name-1.1.3.tgz#a7d0558bd89c42f795dd42328f740831ca53bc25"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-p9BVi9icQveV3UIyj3QIMcpTvCU=
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
color-name@^1.0.0, color-name@~1.1.4:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.4"
resolved "https://registry.yarnpkg.com/color-name/-/color-name-1.1.4.tgz#c2a09a87acbde69543de6f63fa3995c826c536a2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
color-string@^1.5.2:
version "1.5.3"
resolved "https://registry.yarnpkg.com/color-string/-/color-string-1.5.3.tgz#c9bbc5f01b58b5492f3d6857459cb6590ce204cc"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-dC2C5qeWoYkxki5UAXapdjqO672AM4vZuPGRQfO8b5HKuKGBbKWpITyDYN7TOFKvRW7kOgAn3746clDBMDJyQw==
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
dependencies:
color-name "^1.0.0"
simple-swizzle "^0.2.2"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
color@^3.0.0, color@^3.1.2:
Update dependency sharp to v0.22.1
2019-07-02 03:42:14 +03:00
version "3.1.2"
resolved "https://registry.yarnpkg.com/color/-/color-3.1.2.tgz#68148e7f85d41ad7649c5fa8c8106f098d229e10"
integrity sha512-vXTJhHebByxZn3lDvDJYw4lR5+uB3vuoHsuYA5AKuxRVn5wzzIfQKGLBmgdVRHKTJYeK5rvJcHnrd0Li49CFpg==
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
dependencies:
color-convert "^1.9.1"
color-string "^1.5.2"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
colorette@1.0.8:
version "1.0.8"
resolved "https://registry.yarnpkg.com/colorette/-/colorette-1.0.8.tgz#421ff11c80b7414027ebed922396bc1833d1903c"
integrity sha512-X6Ck90ReaF+EfKdVGB7vdIQ3dr651BbIrBwY5YBKg13fjH+940sTtp7/Pkx33C6ntYfQcRumOs/aUQhaRPpbTQ==
Update dependency bookshelf to v0.15.2 (#10982) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-03-30 12:42:25 +03:00
colorette@1.1.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/colorette/-/colorette-1.1.0.tgz#1f943e5a357fac10b4e0f5aaef3b14cdc1af6ec7"
integrity sha512-6S062WDQUXi6hOfkO/sBPVwE5ASXY4G2+b4atvhJfSsuUUhIaUKlkjLe9692Ipyt5/a+IPF5aVTu3V5gvXq5cg==
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 23:53:11 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
colors@^1.1.2:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "1.4.0"
resolved "https://registry.yarnpkg.com/colors/-/colors-1.4.0.tgz#c50491479d4c1bdaed2c9ced32cf7c7dc2360f78"
integrity sha512-a+UqTh4kgZg/SlGvfbzDHpgRu7AAQOmmqRHJnxhRZICKFUT91brVhNNt58CMWU9PsBbv3PDCZUHbVxuDiH2mtA==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
colors@~1.1.2:
version "1.1.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/colors/-/colors-1.1.2.tgz#168a4701756b6a7f51a12ce0c97bfa28c084ed63"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-FopHAXVran9RoSzgyXv6KMCE7WM=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
combined-stream@^1.0.6, combined-stream@~1.0.6:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.0.8"
resolved "https://registry.yarnpkg.com/combined-stream/-/combined-stream-1.0.8.tgz#c3d45a8b34fd730631a110a8a2520682b31d5a7f"
integrity sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
delayed-stream "~1.0.0"
Merge branch 'master' into v3
2019-10-08 15:58:08 +03:00
commander@2.20.0:
Update Build Tool
2019-07-02 03:34:50 +03:00
version "2.20.0"
resolved "https://registry.yarnpkg.com/commander/-/commander-2.20.0.tgz#d58bb2b5c1ee8f87b0d340027e9e94e222c5a422"
integrity sha512-7j2y+40w61zy6YC2iRNpUe/NwhNyoXrYpHMrSunaMG64nRnaf96zO/KMQR4OyN/UnE5KLyEBnKHd4aG3rskjpQ==
Update dependency knex-migrator to v3.4.4
2020-04-14 18:21:50 +03:00
commander@2.20.3, commander@^2.15.1:
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
version "2.20.3"
resolved "https://registry.yarnpkg.com/commander/-/commander-2.20.3.tgz#fd485e84c03eb4881c20722ba48035e8531aeb33"
integrity sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
commander@^2.19.0, commander@^2.20.0:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "2.20.1"
resolved "https://registry.yarnpkg.com/commander/-/commander-2.20.1.tgz#3863ce3ca92d0831dcf2a102f5fb4b5926afd0f9"
integrity sha512-cCuLsMhJeWQ/ZpsFTbE765kvVfoeSddc4nU3up4fV+fDBcfUXnbITJ+JzhkdjzOqhURjZgujxaioam4RM9yGUg==
Update Build Tool
2019-07-02 03:34:50 +03:00
Update dependency knex to v0.20.13
2020-04-01 20:10:27 +03:00
commander@^4.1.1:
version "4.1.1"
resolved "https://registry.yarnpkg.com/commander/-/commander-4.1.1.tgz#9fd602bd936294e9e9ef46a3f4d6964044b18068"
integrity sha512-NOKm8xhkzAjzFx8B2v5OAHT+u5pRQc2UCa2Vq9jYL/31o2wi9mxBA7LIFs3sV5VSC49z6pEhfbMULvShKj26WA==
Update dependency knex to v0.19.4
2019-09-16 03:28:30 +03:00
Bumped gscan version to 2.6.0 no issue - Updated valid theme fixture to be inline with warning that was added when using {{each}} helper instead of {{foreach}}
2019-05-08 17:56:22 +03:00
common-tags@^1.8.0:
version "1.8.0"
resolved "https://registry.yarnpkg.com/common-tags/-/common-tags-1.8.0.tgz#8e3153e542d4a39e9b10554434afaaf98956a937"
integrity sha512-6P6g0uetGpW/sdyUy/iQQCbFF0kWVMSIVSyYz7Zgjcgh8mgw8PQzDNZeyZ5DQ2gM7LBoZPHmnjz8rUthkBG5tw==
Update dependency knex-migrator to v3.4.4
2020-04-14 18:21:50 +03:00
compare-ver@2.0.2:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "2.0.2"
resolved "https://registry.yarnpkg.com/compare-ver/-/compare-ver-2.0.2.tgz#8ecb8eb9dbf23ff2d87c56e74cbbb2cb7ffd9d7a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-jsuOudvyP/LYfFbnTLuyy3/9nXo=
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
component-emitter@^1.2.0, component-emitter@^1.2.1:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/component-emitter/-/component-emitter-1.3.0.tgz#16e4070fba8ae29b679f2215853ee181ab2eabc0"
integrity sha512-Rd3se6QB+sO1TwqZjscQrurpEPIfO0/yYnSin6Q/rD3mOutHvUrCAhJub3r90uNb+SESBuE0QYoB90YdfatsRg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
component-type@^1.2.1:
version "1.2.1"
resolved "https://registry.yarnpkg.com/component-type/-/component-type-1.2.1.tgz#8a47901700238e4fc32269771230226f24b415a9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ikeQFwAjjk/DIml3EjAibyS0Fak=
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
compress-commons@^1.2.0:
version "1.2.2"
resolved "https://registry.yarnpkg.com/compress-commons/-/compress-commons-1.2.2.tgz#524a9f10903f3a813389b0225d27c48bb751890f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-UkqfEJA/OoEzibAiXSfEi7dRiQ8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
buffer-crc32 "^0.2.1"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
crc32-stream "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
normalize-path "^2.0.0"
readable-stream "^2.0.0"
Update dependency archiver to v3.1.1 (#10981)
2019-08-06 11:16:08 +03:00
compress-commons@^2.1.1:
version "2.1.1"
resolved "https://registry.yarnpkg.com/compress-commons/-/compress-commons-2.1.1.tgz#9410d9a534cf8435e3fbbb7c6ce48de2dc2f0610"
integrity sha512-eVw6n7CnEMFzc3duyFVrQEuY1BlHR3rYsSztyG32ibGMW722i3C6IizEGMFmfMU+A+fALvBIwxN3czffTcdA+Q==
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
dependencies:
buffer-crc32 "^0.2.13"
Update dependency archiver to v3.1.1 (#10981)
2019-08-06 11:16:08 +03:00
crc32-stream "^3.0.1"
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
normalize-path "^3.0.0"
readable-stream "^2.3.6"
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
compressible@~2.0.16:
version "2.0.17"
resolved "https://registry.yarnpkg.com/compressible/-/compressible-2.0.17.tgz#6e8c108a16ad58384a977f3a482ca20bff2f38c1"
integrity sha512-BGHeLCK1GV7j1bSmQQAi26X+GgWcTjLr/0tzSvMCl3LH1w1IJ4PFSPoV5316b30cneTziC+B1a+3OjoSUcQYmw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
mime-db ">= 1.40.0 < 2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
compression@1.7.4:
version "1.7.4"
resolved "https://registry.yarnpkg.com/compression/-/compression-1.7.4.tgz#95523eff170ca57c29a0ca41e6fe131f41e5bb8f"
integrity sha512-jaSIDzP9pZVS4ZfQ+TzvtiWhdpFhE2RDHz8QJkpX9SIpLq88VueF5jJw6t+6CUQcAoA6t+x89MLrWAqpfDE8iQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
accepts "~1.3.5"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
bytes "3.0.0"
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
compressible "~2.0.16"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
debug "2.6.9"
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
on-headers "~1.0.2"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
safe-buffer "5.1.2"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
vary "~1.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
concat-map@0.0.1:
version "0.0.1"
resolved "https://registry.yarnpkg.com/concat-map/-/concat-map-0.0.1.tgz#d8a96bd77fd68df7793a73036a3ba0d5405d477b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-2Klr13/Wjfd5OnMDajug1UBdR3s=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Replaced zip tools with @tryghost/zip - Moved zipFolder to a new package - also exposing extract-zip from the new package - new package has the API pre-promisified - also uses @tryghost/extract-zip instead of extract-zip, which has bugfixes
2020-03-20 23:36:05 +03:00
concat-stream@^1.5.2:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
version "1.6.2"
resolved "https://registry.yarnpkg.com/concat-stream/-/concat-stream-1.6.2.tgz#904bdf194cd3122fc675c77fc4ac3d4ff0fd1a34"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-27HBghJxjiZtIk3Ycvn/4kbJk/1uZuJFfuPEns6LaEvpvG1f0hTea8lilrouyo9mVc2GWdcEZ8OLoGmSADlrCw==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
buffer-from "^1.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
inherits "^2.0.3"
readable-stream "^2.2.2"
typedarray "^0.0.6"
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
concat-stream@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/concat-stream/-/concat-stream-2.0.0.tgz#414cf5af790a48c60ab9be4527d56d5e41133cb1"
integrity sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==
dependencies:
buffer-from "^1.0.0"
inherits "^2.0.3"
readable-stream "^3.0.2"
typedarray "^0.0.6"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
condense-whitespace@~2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/condense-whitespace/-/condense-whitespace-2.0.0.tgz#94e9644938f66aa7be4b8849f8f0b3cec97d6b3a"
integrity sha512-Ath9o58/0rxZXbyoy3zZgrVMoIemi30sukG/btuMKCLyqfQt3dNOWc9N3EHEMa2Q3i0tXQPDJluYFLwy7pJuQw==
Update dependency gscan to v3.4.1
2020-04-06 20:10:36 +03:00
config-chain@^1.1.12:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.12"
resolved "https://registry.yarnpkg.com/config-chain/-/config-chain-1.1.12.tgz#0fde8d091200eb5e808caf25fe618c02f48e4efa"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-a1eOIcu8+7lUInge4Rpf/n4Krkf3Dd9lqhljRzII1/Zno/kRtUWnznPO3jOKBmTEktkt3fkxisUcivoj0ebzoA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
ini "^1.3.4"
proto-list "~1.2.1"
Update dependency connect-slashes to v1.4.0
2019-07-02 13:03:51 +03:00
connect-slashes@1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/connect-slashes/-/connect-slashes-1.4.0.tgz#fe884e9d130e9bd0a40d8ee502c1dfa269f94373"
integrity sha512-BJRbgSczzlsRwyF64DxGNIizBTxUf7f/tAsDzq2Nq8eLrm2160vVfm/4vQcjrT4qVFu6qDCqPK+vDaEWJsnSzA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
console-control-strings@^1.0.0, console-control-strings@~1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/console-control-strings/-/console-control-strings-1.1.0.tgz#3d7cf4464db6446ea644bf4b39507f9851008e8e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-PXz0Rk22RG6mRL9LOVB/mFEAjo4=
Update express to version 4.14.1 🚀 (#7912) * chore(package): update express to version 4.14.1 https://greenkeeper.io/ * chore: yarn.lock
2017-02-08 18:33:15 +03:00
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
content-disposition@0.5.3:
version "0.5.3"
resolved "https://registry.yarnpkg.com/content-disposition/-/content-disposition-0.5.3.tgz#e130caf7e7279087c5616c2007d0485698984fbd"
integrity sha512-ExO0774ikEObIAEV9kDo50o+79VCUdEB6n6lzKgGwupcVeRlhrj3qGAfwq8G6uBJjkqLrhT0qEYFcWng8z1z0g==
dependencies:
safe-buffer "5.1.2"
Remove unused dev dependency should-http
2020-04-01 15:30:38 +03:00
content-type@~1.0.4:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/content-type/-/content-type-1.0.4.tgz#e138cc75e040c727b1966fe5e5f8c9aee256fe3b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-hIP3EEPs8tB9AT1L+NUqtwOAps4mk2Zob89MWXMHjHWg9milF/j4osnnQLXBCBFBk/tvIG/tUc9mOUJiPBhPXA==
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
continuable-cache@^0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/continuable-cache/-/continuable-cache-0.3.1.tgz#bd727a7faed77e71ff3985ac93351a912733ad0f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-vXJ6f67XfnH/OYWskzUakSczrQ8=
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
Update dependency cookie-session to v1.4.0 (#11510) Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-01-17 09:10:48 +03:00
cookie-session@1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/cookie-session/-/cookie-session-1.4.0.tgz#c325aea685ceb9c8e4fd00b0313a46d547747380"
integrity sha512-0hhwD+BUIwMXQraiZP/J7VP2YFzqo6g4WqZlWHtEHQ22t0MeZZrNBSCxC1zcaLAs8ApT3BzAKizx9gW/AP9vNA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency cookie-session to v1.4.0 (#11510) Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-01-17 09:10:48 +03:00
cookies "0.8.0"
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
debug "2.6.9"
Update dependency cookie-session to v1.3.3
2019-07-02 03:36:27 +03:00
on-headers "~1.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
cookie-signature@1.0.6:
version "1.0.6"
resolved "https://registry.yarnpkg.com/cookie-signature/-/cookie-signature-1.0.6.tgz#e303a882b342cc3ee8ca513a79999734dab3ae2c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-4wOogrNCzD7oylE6eZmXNNqzriw=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
cookie@0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/cookie/-/cookie-0.4.0.tgz#beb437e7022b3b6d49019d088665303ebe9c14ba"
integrity sha512-+Hp8fLp57wnUSt0tY0tHEXh4voZRDnoIrZPqlo3DPiI4y9lwg/jqx+1Om94/W6ZaPDOUbnjOt/99w66zk+l1Xg==
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
cookie@^0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/cookie/-/cookie-0.3.1.tgz#e7e0a1f9ef43b4c8ba925c5c5a96e806d16873bb"
integrity sha1-5+Ch+e9DtMi6klxcWpboBtFoc7s=
Removed superagent dependency (#10535) no issue - Migrated default scheduling adapter to use Got via the request proxy - SchedulingDefault is the only module that was using superagent so removed it as a dependency
2019-03-04 10:59:38 +03:00
cookiejar@^2.1.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/cookiejar/-/cookiejar-2.1.2.tgz#dd8a235530752f988f9a0844f3fc589e3111125c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Mw+adcfzPxcPeI+0WlvRrr/3lGVO0bD75SxX6811cxSh1Wbxx7xZBGK1eVtDf6si8rg2lhnUjsVLMFMfbRIuwA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency cookie-session to v1.4.0 (#11510) Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-01-17 09:10:48 +03:00
cookies@0.8.0, cookies@^0.8.0:
Installed @tryghost/members-api@0.8.3 no-issue This improves logging for webhook signature validation
2019-10-30 13:24:04 +03:00
version "0.8.0"
resolved "https://registry.yarnpkg.com/cookies/-/cookies-0.8.0.tgz#1293ce4b391740a8406e3c9870e828c4b54f3f90"
integrity sha512-8aPsApQfebXnuI+537McwYsDtjVxGm8gTIzQI3FDW6t5t/DAhERxtnbEPN/8RX+uZthoz4eCOgloXaE5cYyNow==
dependencies:
depd "~2.0.0"
keygrip "~1.1.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
copy-descriptor@^0.1.0:
version "0.1.1"
resolved "https://registry.yarnpkg.com/copy-descriptor/-/copy-descriptor-0.1.1.tgz#676f6eb3c39997c2ee1ac3a924fd6124748f578d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Z29us8OZl8LuGsOpJP1hJHSPV40=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
core-js@^2.6.5:
version "2.6.9"
resolved "https://registry.yarnpkg.com/core-js/-/core-js-2.6.9.tgz#6b4b214620c834152e179323727fc19741b084f2"
integrity sha512-HOpZf6eXmnl7la+cUdMnLvUxKNqLUzJvgIziQ0DiF3JwSImNphIqdGqzj6hIKyX04MmV0poclQ7+wjWvxQyR2A==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
core-util-is@1.0.2, core-util-is@~1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/core-util-is/-/core-util-is-1.0.2.tgz#b5fd54220aa2bc5ab57aab7140c940754503c1a7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-tf1UIgqivFq1eqtxQMlAdUUDwac=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
cors@2.8.5:
version "2.8.5"
resolved "https://registry.yarnpkg.com/cors/-/cors-2.8.5.tgz#eac11da51592dd86b9f06f6e7ac293b3df875d29"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-KIHbLJqu73RGr/hnbrO9uBeixNGuvSQjul/jdFvS/KFSIH1hWVd1ng7zOHx+YrEfInLG7q4n6GHQ9cDtxv/P6g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update cors to version 2.8.3 🚀 (#8240) * chore(package): update cors to version 2.8.3 https://greenkeeper.io/ * chore: yarn.lock
2017-04-04 10:45:42 +03:00
object-assign "^4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
vary "^1"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
cosmiconfig@^5.0.0:
version "5.2.1"
resolved "https://registry.yarnpkg.com/cosmiconfig/-/cosmiconfig-5.2.1.tgz#040f726809c591e77a17c0a3626ca45b4f168b1a"
integrity sha512-H65gsXo1SKjf8zmrJ67eJk8aIRKV5ff2D4uKZIBZShbhGSpEmsQOPW/SKMKYhSTrqR7ufy6RP69rPogdaPh/kA==
dependencies:
import-fresh "^2.0.0"
is-directory "^0.3.1"
js-yaml "^3.13.1"
parse-json "^4.0.0"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
crc32-stream@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/crc32-stream/-/crc32-stream-2.0.0.tgz#e3cdd3b4df3168dd74e3de3fbbcb7b297fe908f4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-483TtN8xaN10494/u8t7KX/pCPQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
crc "^3.4.4"
readable-stream "^2.0.0"
Update dependency archiver to v3.1.1 (#10981)
2019-08-06 11:16:08 +03:00
crc32-stream@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/crc32-stream/-/crc32-stream-3.0.1.tgz#cae6eeed003b0e44d739d279de5ae63b171b4e85"
integrity sha512-mctvpXlbzsvK+6z8kJwSJ5crm7yBwrQMTybJzMw1O4lLGJqjlDCXY2Zw7KheiA6XBEcBmfLx1D88mjRGVJtY9w==
dependencies:
crc "^3.4.4"
readable-stream "^3.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
crc@^3.4.4:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.8.0"
resolved "https://registry.yarnpkg.com/crc/-/crc-3.8.0.tgz#ad60269c2c856f8c299e2c4cc0de4556914056c6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-iX3mfgcTMIq3ZKLIsVFAbv7+Mc10kxabAGQb8HvjA1o3T1PIYprbakQ65d3I+2HGHt6nSKkM9PYjgoJO2KcFBQ==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dependencies:
buffer "^5.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
create-error@~0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/create-error/-/create-error-0.3.1.tgz#69810245a629e654432bf04377360003a5351a23"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-aYECRaYp5lRDK/BDdzYAA6U1GiM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
cross-spawn@^5.0.1:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
version "5.1.0"
resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-5.1.0.tgz#e8bd0efee58fcff6f8f94510a0a554bbfa235449"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-6L0O/uWPz/b4+UUQoKVUu/ojVEk=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
lru-cache "^4.0.1"
shebang-command "^1.2.0"
which "^1.2.9"
Removed unused release-utils dependency no issue - this is no longer needed because we moved the main release code out
2020-04-03 16:25:28 +03:00
cross-spawn@^6.0.5:
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
version "6.0.5"
resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-6.0.5.tgz#4a5ec7c64dfae22c3a14124dbacdee846d80cbc4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-eTVLrBSt7fjbDygz805pMnstIs2VTBNkRm0qxZd+M7A5XDdxVRWO5MxGBXZhjY4cqLYLdtrGqRf8mBPmzwSpWQ==
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
dependencies:
nice-try "^1.0.4"
path-key "^2.0.1"
semver "^5.5.0"
shebang-command "^1.2.0"
which "^1.2.9"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
crypt@~0.0.1:
version "0.0.2"
resolved "https://registry.yarnpkg.com/crypt/-/crypt-0.0.2.tgz#88d7ff7ec0dfb86f713dc87bbb42d044d3e6c41b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-iNf/fsDfuG9xPch7u0LQRNPmxBs=
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
css-color-names@0.0.4, css-color-names@^0.0.4:
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
version "0.0.4"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/css-color-names/-/css-color-names-0.0.4.tgz#808adc2e79cf84738069b646cb20ec27beb629e0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-gIrcLnnPhHOAabZGyyDsJ762KeA=
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
css-declaration-sorter@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/css-declaration-sorter/-/css-declaration-sorter-4.0.1.tgz#c198940f63a76d7e36c1e71018b001721054cb22"
integrity sha512-BcxQSKTSEEQUftYpBVnsH4SF05NTuBokb19/sBt6asXGKZ/6VP7PLG1CBCkFDYOnhXhPh0jMhO6xZ71oYHXHBA==
dependencies:
postcss "^7.0.1"
timsort "^0.3.0"
css-select-base-adapter@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/css-select-base-adapter/-/css-select-base-adapter-0.1.1.tgz#3b2ff4972cc362ab88561507a95408a1432135d7"
integrity sha512-jQVeeRG70QI08vSTwf1jHxp74JoZsr2XSgETae8/xC8ovSnL2WF87GTLO86Sbwdt2lK4Umg4HnnwMO4YF3Ce7w==
css-select@^2.0.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/css-select/-/css-select-2.1.0.tgz#6a34653356635934a81baca68d0255432105dbef"
integrity sha512-Dqk7LQKpwLoH3VovzZnkzegqNSuAziQyNZUcrdDM401iY+R5NkGBXGmtO05/yaXQziALuPogeG0b7UAgjnTJTQ==
dependencies:
boolbase "^1.0.0"
css-what "^3.2.1"
domutils "^1.7.0"
nth-check "^1.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
css-select@~1.2.0:
version "1.2.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/css-select/-/css-select-1.2.0.tgz#2b3a110539c5355f1cd8d314623e870b121ec858"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-KzoRBTnFNV8c2NMUYj6HCxIeyFg=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
boolbase "~1.0.0"
css-what "2.1"
domutils "1.5.1"
nth-check "~1.0.1"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
css-tree@1.0.0-alpha.37:
version "1.0.0-alpha.37"
resolved "https://registry.yarnpkg.com/css-tree/-/css-tree-1.0.0-alpha.37.tgz#98bebd62c4c1d9f960ec340cf9f7522e30709a22"
integrity sha512-DMxWJg0rnz7UgxKT0Q1HU/L9BeJI0M6ksor0OgqOnF+aRCDWg/N2641HmVyU9KVIu0OVVWOb2IpC9A+BJRnejg==
dependencies:
mdn-data "2.0.4"
source-map "^0.6.1"
css-tree@1.0.0-alpha.39:
version "1.0.0-alpha.39"
resolved "https://registry.yarnpkg.com/css-tree/-/css-tree-1.0.0-alpha.39.tgz#2bff3ffe1bb3f776cf7eefd91ee5cba77a149eeb"
integrity sha512-7UvkEYgBAHRG9Nt980lYxjsTrCyHFN53ky3wVsDkiMdVqylqRt+Zc+jm5qw7/qyOvN2dHSYtX0e4MbCCExSvnA==
dependencies:
mdn-data "2.0.6"
source-map "^0.6.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
css-what@2.1:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "2.1.3"
resolved "https://registry.yarnpkg.com/css-what/-/css-what-2.1.3.tgz#a6d7604573365fe74686c3f311c56513d88285f2"
integrity sha512-a+EPoD+uZiNfh+5fxw2nO9QwFa6nJe2Or35fGY6Ipw1R3R4AGz1d1TEZrCegvw2YTmZ0jXirGYlzxxpYSHwpEg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
css-what@^3.2.1:
version "3.2.1"
resolved "https://registry.yarnpkg.com/css-what/-/css-what-3.2.1.tgz#f4a8f12421064621b456755e34a03a2c22df5da1"
integrity sha512-WwOrosiQTvyms+Ti5ZC5vGEK0Vod3FTt1ca+payZqvKuGJF+dq7bG63DstxtN0dpm6FxY27a/zS3Wten+gEtGw==
cssesc@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/cssesc/-/cssesc-3.0.0.tgz#37741919903b868565e1c09ea747445cd18983ee"
integrity sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==
cssnano-preset-default@^4.0.7:
version "4.0.7"
resolved "https://registry.yarnpkg.com/cssnano-preset-default/-/cssnano-preset-default-4.0.7.tgz#51ec662ccfca0f88b396dcd9679cdb931be17f76"
integrity sha512-x0YHHx2h6p0fCl1zY9L9roD7rnlltugGu7zXSKQx6k2rYw0Hi3IqxcoAGF7u9Q5w1nt7vK0ulxV8Lo+EvllGsA==
dependencies:
css-declaration-sorter "^4.0.1"
cssnano-util-raw-cache "^4.0.1"
postcss "^7.0.0"
postcss-calc "^7.0.1"
postcss-colormin "^4.0.3"
postcss-convert-values "^4.0.1"
postcss-discard-comments "^4.0.2"
postcss-discard-duplicates "^4.0.2"
postcss-discard-empty "^4.0.1"
postcss-discard-overridden "^4.0.1"
postcss-merge-longhand "^4.0.11"
postcss-merge-rules "^4.0.3"
postcss-minify-font-values "^4.0.2"
postcss-minify-gradients "^4.0.2"
postcss-minify-params "^4.0.2"
postcss-minify-selectors "^4.0.2"
postcss-normalize-charset "^4.0.1"
postcss-normalize-display-values "^4.0.2"
postcss-normalize-positions "^4.0.2"
postcss-normalize-repeat-style "^4.0.2"
postcss-normalize-string "^4.0.2"
postcss-normalize-timing-functions "^4.0.2"
postcss-normalize-unicode "^4.0.1"
postcss-normalize-url "^4.0.1"
postcss-normalize-whitespace "^4.0.2"
postcss-ordered-values "^4.1.2"
postcss-reduce-initial "^4.0.3"
postcss-reduce-transforms "^4.0.2"
postcss-svgo "^4.0.2"
postcss-unique-selectors "^4.0.1"
cssnano-util-get-arguments@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/cssnano-util-get-arguments/-/cssnano-util-get-arguments-4.0.0.tgz#ed3a08299f21d75741b20f3b81f194ed49cc150f"
integrity sha1-7ToIKZ8h11dBsg87gfGU7UnMFQ8=
cssnano-util-get-match@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/cssnano-util-get-match/-/cssnano-util-get-match-4.0.0.tgz#c0e4ca07f5386bb17ec5e52250b4f5961365156d"
integrity sha1-wOTKB/U4a7F+xeUiULT1lhNlFW0=
cssnano-util-raw-cache@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/cssnano-util-raw-cache/-/cssnano-util-raw-cache-4.0.1.tgz#b26d5fd5f72a11dfe7a7846fb4c67260f96bf282"
integrity sha512-qLuYtWK2b2Dy55I8ZX3ky1Z16WYsx544Q0UWViebptpwn/xDBmog2TLg4f+DBMg1rJ6JDWtn96WHbOKDWt1WQA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss "^7.0.0"
cssnano-util-same-parent@^4.0.0:
version "4.0.1"
resolved "https://registry.yarnpkg.com/cssnano-util-same-parent/-/cssnano-util-same-parent-4.0.1.tgz#574082fb2859d2db433855835d9a8456ea18bbf3"
integrity sha512-WcKx5OY+KoSIAxBW6UBBRay1U6vkYheCdjyVNDm85zt5K9mHoGOfsOsqIszfAqrQQFIIKgjh2+FDgIj/zsl21Q==
Pin dependencies
2020-04-01 17:18:39 +03:00
cssnano@4.1.10:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
version "4.1.10"
resolved "https://registry.yarnpkg.com/cssnano/-/cssnano-4.1.10.tgz#0ac41f0b13d13d465487e111b778d42da631b8b2"
integrity sha512-5wny+F6H4/8RgNlaqab4ktc3e0/blKutmq8yNlBFXA//nSFFAqAngjNVRzUvCgYROULmZZUoosL/KSoZo5aUaQ==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
cosmiconfig "^5.0.0"
cssnano-preset-default "^4.0.7"
is-resolvable "^1.0.0"
postcss "^7.0.0"
csso@^4.0.2:
version "4.0.3"
resolved "https://registry.yarnpkg.com/csso/-/csso-4.0.3.tgz#0d9985dc852c7cc2b2cacfbbe1079014d1a8e903"
integrity sha512-NL3spysxUkcrOgnpsT4Xdl2aiEiBG6bXswAABQVHcMrfjjBisFOKwLDOmf4wf32aPdcJws1zds2B0Rg+jqMyHQ==
dependencies:
css-tree "1.0.0-alpha.39"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
cssom@^0.4.4:
version "0.4.4"
resolved "https://registry.yarnpkg.com/cssom/-/cssom-0.4.4.tgz#5a66cf93d2d0b661d80bf6a44fb65f5c2e4e0a10"
integrity sha512-p3pvU7r1MyyqbTk+WbNJIgJjG2VmTIaB10rI93LzVPrmDJKkzKYMtxxyAvQXR/NS6otuzveI7+7BBq3SjBS2mw==
cssom@~0.3.6:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "0.3.8"
resolved "https://registry.yarnpkg.com/cssom/-/cssom-0.3.8.tgz#9f1276f5b2b463f2114d3f2c75250af8c1a36f4a"
integrity sha512-b0tGHbfegbhPJpxpiBPU2sCkigAqtM9O121le6bbOlgyV+NyGyCmVfJ6QW9eRjz8CpNfWEOYBIMIGRYkLwsIYg==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
cssstyle@^2.2.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/cssstyle/-/cssstyle-2.2.0.tgz#e4c44debccd6b7911ed617a4395e5754bba59992"
integrity sha512-sEb3XFPx3jNnCAMtqrXPDeSgQr+jojtCeNf8cvMNMh1cG970+lljssvQDzPq6lmmJu2Vhqood/gtEomBiHOGnA==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
cssom "~0.3.6"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update dependency csv-parser to v2.3.2
2019-11-11 03:20:58 +03:00
csv-parser@2.3.2:
version "2.3.2"
resolved "https://registry.yarnpkg.com/csv-parser/-/csv-parser-2.3.2.tgz#3a4146abb9a0be7c3cbcae9c289f0a7e622dc07b"
integrity sha512-ggurTYuhhoUJyrPXTAkiO1x6QXkxAoimV+YSz2eSAXF+jQ/Xve/030T34tVStKFmX56pPtY5PiZl3bR4HkZK+Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency csv-parser to v2.3.1
2019-09-30 03:35:43 +03:00
"@hapi/joi" "^16.1.4"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
buffer-alloc "^1.1.0"
buffer-from "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
generate-object-property "^1.0.0"
minimist "^1.2.0"
ndjson "^1.4.0"
currently-unhandled@^0.4.1:
version "0.4.1"
resolved "https://registry.yarnpkg.com/currently-unhandled/-/currently-unhandled-0.4.1.tgz#988df33feab191ef799a61369dd76c17adf957ea"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-mI3zP+qxke95mmE2nddsF635V+o=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
array-find-index "^1.0.1"
dashdash@^1.12.0:
version "1.14.1"
resolved "https://registry.yarnpkg.com/dashdash/-/dashdash-1.14.1.tgz#853cfa0f7cbe2fed5de20326b8dd581035f6e2f0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-hTz6D3y+L+1d4gMmuN1YEDX24vA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
assert-plus "^1.0.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
data-uri-to-buffer@1:
version "1.2.0"
resolved "https://registry.yarnpkg.com/data-uri-to-buffer/-/data-uri-to-buffer-1.2.0.tgz#77163ea9c20d8641b4707e8f18abdf9a78f34835"
integrity sha512-vKQ9DTQPN1FLYiiEEOQ6IBGFqvjCa5rSK3cWMy/Nespm5d/x3dGFT9UBZnkLxCwua/IXBi2TYnwTEpsOvhC4UQ==
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
data-urls@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/data-urls/-/data-urls-2.0.0.tgz#156485a72963a970f5d5821aaf642bef2bf2db9b"
integrity sha512-X5eWTSXO/BJmpdIKCRuKUgSCgAN0OwliVK3yPKbwIWU1Tdw5BRajxlzMidvh+gwko9AfQ9zIj52pzF91Q3YAvQ==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
abab "^2.0.3"
whatwg-mimetype "^2.3.0"
whatwg-url "^8.0.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
datauri@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/datauri/-/datauri-2.0.0.tgz#ff0ee23729935a6bcc81f301621bed3e692bf3c7"
integrity sha512-zS2HSf9pI5XPlNZgIqJg/wCJpecgU/HA6E/uv2EfaWnW1EiTGLfy/EexTIsC9c99yoCOTXlqeeWk4FkCSuO3/g==
dependencies:
image-size "^0.7.3"
mimer "^1.0.0"
🔥 remove gulp (#8159) * remove gulpfile * remove gulp dependencies * Update README.md
2017-03-14 17:20:53 +03:00
dateformat@~1.0.12:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.12"
resolved "https://registry.yarnpkg.com/dateformat/-/dateformat-1.0.12.tgz#9f124b67594c937ff706932e4a642cca8dbbfee9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-nxJLZ1lMk3/3BpMuSmQsyo27/uk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
get-stdin "^4.0.1"
meow "^3.3.0"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
dayjs@^1.8.19:
version "1.8.20"
resolved "https://registry.yarnpkg.com/dayjs/-/dayjs-1.8.20.tgz#724a5cb6ad1f6fc066b0bd9a800dedcc7886f19e"
integrity sha512-mH0MCDxw6UCGJYxVN78h8ugWycZAO8thkj3bW6vApL5tS0hQplIDdAQcmbvl7n35H0AKdCJQaArTrIQw2xt4Qg==
Removed misc unused dependencies
2020-04-01 17:38:26 +03:00
debug@2, debug@2.6.9, debug@^2.2.0, debug@^2.3.3, debug@^2.6.9:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
version "2.6.9"
resolved "https://registry.yarnpkg.com/debug/-/debug-2.6.9.tgz#5d128515df134ff327e90a4c93f4e077a536341f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
dependencies:
ms "2.0.0"
Update dependency analytics-node to v3.4.0-beta.1
2019-12-17 00:06:35 +03:00
debug@3.1.0, debug@=3.1.0:
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/debug/-/debug-3.1.0.tgz#5bb5a0672628b64149566ba16819e61518c67261"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-OX8XqP7/1a9cqkxYw2yXss15f26NKWBpDXQd0/uK/KPqdQhxbPa994hnzjcE2VqQpDslf55723cKPUOGSmMY3g==
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
dependencies:
ms "2.0.0"
Update dependency analytics-node to v3.4.0-beta.1
2019-12-17 00:06:35 +03:00
debug@3.2.6, debug@^3.1.0, debug@^3.2.6:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
version "3.2.6"
resolved "https://registry.yarnpkg.com/debug/-/debug-3.2.6.tgz#e83d17de16d8a7efb7717edbe5fb10135eee629b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-mel+jf7nrtEl5Pn1Qx46zARXKDpBbvzezse7p7LqINmdoIk8PYP5SySaxEmYv6TZ0JyEKA1hsCId6DIhgITtWQ==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dependencies:
ms "^2.1.1"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
debug@4, debug@4.1.1, debug@^4.0.0, debug@^4.0.1, debug@^4.1.0, debug@^4.1.1:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "4.1.1"
resolved "https://registry.yarnpkg.com/debug/-/debug-4.1.1.tgz#3b72260255109c6b589cee050f1d516139664791"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-pYAIzeRo8J6KPEaJ0VWOh5Pzkbw/RetuzehGM7QRRX5he4fPHx2rdKMB256ehJCkX+XRQm16eZLqLNS8RSZXZw==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
dependencies:
ms "^2.1.1"
Removed unused cpy-cli dependency no issue
2020-02-20 16:36:42 +03:00
decamelize@^1.1.1, decamelize@^1.1.2, decamelize@^1.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/decamelize/-/decamelize-1.2.0.tgz#f6534d15148269b20352e7bee26f501f9a191290"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-9lNNFRSCabIDUue+4m9QH5oZEpA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
decimal.js@^10.2.0:
version "10.2.0"
resolved "https://registry.yarnpkg.com/decimal.js/-/decimal.js-10.2.0.tgz#39466113a9e036111d02f82489b5fd6b0b5ed231"
integrity sha512-vDPw+rDgn3bZe1+F/pyEwb1oMG2XTlRVgAa6B4KccTEpYgF8w6eQllVbQcfIJnZyvzFtFpxnpGtx8dd7DJp/Rw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
decode-uri-component@^0.2.0:
version "0.2.0"
resolved "https://registry.yarnpkg.com/decode-uri-component/-/decode-uri-component-0.2.0.tgz#eb3913333458775cb84cd1a1fae062106bb87545"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-6zkTMzRYd1y4TNGh+uBiEGu4dUU=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
🐛 Fixed server crash when AMP posts contain images with unescaped chars (#10775) no issue - bump `amperize` to v0.4.0 which contains an updated version of `got` which does not crash on invalid image urls
2019-06-05 19:31:23 +03:00
decompress-response@^3.3.0:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
version "3.3.0"
resolved "https://registry.yarnpkg.com/decompress-response/-/decompress-response-3.3.0.tgz#80a4dd323748384bfa248083622aedec982adff3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-gKTdMjdIOEv6JICDYirt7Jgq3/M=
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
dependencies:
mimic-response "^1.0.0"
Update dependency sharp to v0.23.1
2019-09-30 03:35:55 +03:00
decompress-response@^4.2.0:
version "4.2.1"
resolved "https://registry.yarnpkg.com/decompress-response/-/decompress-response-4.2.1.tgz#414023cc7a302da25ce2ec82d0d5238ccafd8986"
integrity sha512-jOSne2qbyE+/r8G1VU+G/82LBs2Fs4LAsTiLSHOCOMZQl2OKZ6i8i4IyHemTe+/yIXOtTcRQMzPcgyhoFlqPkw==
dependencies:
mimic-response "^2.0.0"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
decompress-response@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/decompress-response/-/decompress-response-5.0.0.tgz#7849396e80e3d1eba8cb2f75ef4930f76461cb0f"
integrity sha512-TLZWWybuxWgoW7Lykv+gq9xvzOsUjQ9tF09Tj6NSTYGMTCHNXzrPnD6Hi+TgZq19PyTAGH4Ll/NIM/eTGglnMw==
dependencies:
mimic-response "^2.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
deep-extend@^0.6.0:
version "0.6.0"
resolved "https://registry.yarnpkg.com/deep-extend/-/deep-extend-0.6.0.tgz#c4fa7c95404a17a9c3e8ca7e1537312b736330ac"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
deep-is@~0.1.3:
version "0.1.3"
resolved "https://registry.yarnpkg.com/deep-is/-/deep-is-0.1.3.tgz#b369d6fb5dbc13eecf524f91b070feedc357cf34"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-s2nW+128E+7PUk+RsHD+7cNXzzQ=
🐛 Fixed server crash when AMP posts contain images with unescaped chars (#10775) no issue - bump `amperize` to v0.4.0 which contains an updated version of `got` which does not crash on invalid image urls
2019-06-05 19:31:23 +03:00
Update dependency probe-image-size to v4.1.1
2019-07-15 09:18:10 +03:00
deepmerge@^4.0.0:
Merge branch 'master' into v3
2019-10-08 15:58:08 +03:00
version "4.1.0"
resolved "https://registry.yarnpkg.com/deepmerge/-/deepmerge-4.1.0.tgz#f4647b378c0a9d32965470e477c01ae55451b19a"
integrity sha512-tJlmKE535XRVBrzMRMqlm4V2S/l3yO/qr9Ad0MUqgR5jh9epGrALs8Q6+pROMa6ntDieAlnmYM/cDFCtNjp4+Q==
Update dependency probe-image-size to v4.1.1
2019-07-15 09:18:10 +03:00
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
defer-to-connect@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/defer-to-connect/-/defer-to-connect-1.0.2.tgz#4bae758a314b034ae33902b5aac25a8dd6a8633e"
integrity sha512-k09hcQcTDY+cwgiwa6PYKLm3jlagNzQ+RSvhjzESOGOx+MNOuXkxTfEvPrO1IOQ81tArCFYQgi631clB70RpQw==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
defer-to-connect@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/defer-to-connect/-/defer-to-connect-2.0.0.tgz#83d6b199db041593ac84d781b5222308ccf4c2c1"
integrity sha512-bYL2d05vOSf1JEZNx5vSAtPuBMkX8K9EUutg7zlKvTqKXHt7RhWJFbmd7qakVuf13i+IkGmp6FwSsONOf6VYIg==
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
define-properties@^1.1.2, define-properties@^1.1.3:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/define-properties/-/define-properties-1.1.3.tgz#cf88da6cbee26fe6db7094f61d870cbd84cee9f1"
integrity sha512-3MqfYKj2lLzdMSf8ZIZE/V+Zuy+BgD6f164e8K2w7dgnpKArBDerGYpM46IYYcjnkdPNMjPk9A6VFB8+3SKlXQ==
dependencies:
object-keys "^1.0.12"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
define-property@^0.2.5:
version "0.2.5"
resolved "https://registry.yarnpkg.com/define-property/-/define-property-0.2.5.tgz#c35b1ef918ec3c990f9a5bc57be04aacec5c8116"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-w1se+RjsPJkPmlvFe+BKrOxcgRY=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
is-descriptor "^0.1.0"
define-property@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/define-property/-/define-property-1.0.0.tgz#769ebaaf3f4a63aad3af9e8d304c9bbe79bfb0e6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-dp66rz9KY6rTr56NMEybvnm/sOY=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
is-descriptor "^1.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
define-property@^2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/define-property/-/define-property-2.0.2.tgz#d459689e8d654ba77e02a817f8710d702cb16e9d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-jwK2UV4cnPpbcG7+VRARKTZPUWowwXA8bzH5NP6ud0oeAxyYPuGZUAC7hMugpCdz4BeSZl2Dl9k66CHJ/46ZYQ==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
is-descriptor "^1.0.2"
isobject "^3.0.1"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
degenerator@^1.0.4:
version "1.0.4"
resolved "https://registry.yarnpkg.com/degenerator/-/degenerator-1.0.4.tgz#fcf490a37ece266464d9cc431ab98c5819ced095"
integrity sha1-/PSQo37OJmRk2cxDGrmMWBnO0JU=
dependencies:
ast-types "0.x.x"
escodegen "1.x.x"
esprima "3.x.x"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
delayed-stream@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/delayed-stream/-/delayed-stream-1.0.0.tgz#df3ae199acadfb7d440aaae0b29e2272b24ec619"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-3zrhmayt+31ECqrgsp4icrJOxhk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
delegates@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/delegates/-/delegates-1.0.0.tgz#84c6e159b81904fdca59a0ef44cd870d31250f9a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-hMbhWbgZBP3KWaDvRM2HDTElD5o=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency image-size to v0.7.4
2019-07-02 12:42:15 +03:00
depd@~1.1.2:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/depd/-/depd-1.1.2.tgz#9bcd52e14c097763e749b274c4346ed2e560b5a9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-m81S4UwJd2PnSbJ0xDRu0uVgtak=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Update dependency express-session to v1.16.2
2019-07-02 03:40:30 +03:00
depd@~2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/depd/-/depd-2.0.0.tgz#b696163cc757560d09cf22cc8fad1571b79e76df"
integrity sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
destroy@~1.0.4:
version "1.0.4"
resolved "https://registry.yarnpkg.com/destroy/-/destroy-1.0.4.tgz#978857442c44749e4206613e37946205826abd80"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-l4hXRCxEdJ5CBmE+N5RiBYJqvYA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
detect-file@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/detect-file/-/detect-file-1.0.0.tgz#f0d66d03672a825cb1b73bdb3fe62310c8e552b7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8NZtA2cqglyxtzvbP+YjEMjlUrc=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
detect-libc@^1.0.2, detect-libc@^1.0.3:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/detect-libc/-/detect-libc-1.0.3.tgz#fa137c4bd698edf55cd5cd02ac559f91a4c4ba9b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-+hN8S9aY7fVc1c0CrFWfkaTEups=
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dicer@0.2.5:
version "0.2.5"
resolved "https://registry.yarnpkg.com/dicer/-/dicer-0.2.5.tgz#5996c086bb33218c812c090bddc09cd12facb70f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WZbAhrszIYyBLAkL3cCc0S+stw8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
readable-stream "1.1.x"
streamsearch "0.1.2"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
diff@3.5.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "3.5.0"
resolved "https://registry.yarnpkg.com/diff/-/diff-3.5.0.tgz#800c0dd1e0a8bfbc95835c202ad220fe317e5a12"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-A46qtFgd+g7pDZinpnwiRJtxbC1hpgf0uzP3iG89scHk0AUC7A1TGxf5OiiOUv/JMZR8GOt8hL900hV0bOy5xA==
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
Update dependency @lodder/grunt-postcss to v2.0.2
2020-04-15 17:15:23 +03:00
diff@^4.0.2:
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
version "4.0.2"
resolved "https://registry.yarnpkg.com/diff/-/diff-4.0.2.tgz#60f3aecb89d5fae520c11aa19efc2bb982aade7d"
integrity sha512-58lmxKSA4BNyLz+HHMUzlOEpg09FV+ev6ZMe3vJihgdxzgcwZ8VoEEPmALCZG9LmqfVoNMMKpttIYTVG6uDY7A==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
directmail@~0.1.7:
version "0.1.8"
resolved "https://registry.yarnpkg.com/directmail/-/directmail-0.1.8.tgz#e4852c8a0c5519bef4904fcd96d760822f42a446"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-5IUsigxVGb70kE/Nltdggi9CpEY=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
simplesmtp "~0.3.30"
dkim-signer@~0.1.1:
version "0.1.2"
resolved "https://registry.yarnpkg.com/dkim-signer/-/dkim-signer-0.1.2.tgz#2ff5d61c87d8fbff5a8b131cffc5ec3ba1c25553"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-L/XWHIfY+/9aixMc/8XsO6HCVVM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
mimelib "~0.2.15"
punycode "~1.2.4"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
doctrine@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/doctrine/-/doctrine-3.0.0.tgz#addebead72a6574db783639dc87a121773973961"
integrity sha512-yS+Q5i3hBf7GBkd4KG8a7eBNNWNGLTaEwwYWUijIYM7zrlYDM0BFXHjjPWlWZ1Rg7UaddZeIDmi9jF3HmqiQ2w==
dependencies:
esutils "^2.0.2"
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
dom-serializer@0:
version "0.2.1"
resolved "https://registry.yarnpkg.com/dom-serializer/-/dom-serializer-0.2.1.tgz#13650c850daffea35d8b626a4cfc4d3a17643fdb"
integrity sha512-sK3ujri04WyjwQXVoK4PU3y8ula1stq10GJZpqHIUgoGZdsGzAGu65BnU3d08aTVSvO7mGPZUc0wTEDL+qGE0Q==
dependencies:
domelementtype "^2.0.1"
entities "^2.0.0"
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
dom-serializer@^0.2.1:
version "0.2.2"
resolved "https://registry.yarnpkg.com/dom-serializer/-/dom-serializer-0.2.2.tgz#1afb81f533717175d478655debc5e332d9f9bb51"
integrity sha512-2/xPb3ORsQ42nHYiSunXkDjPLBaEj/xTwUO4B7XCZQTRk7EBtTOPaygh10YAAh2OI1Qrp6NWfpAhzswj0ydt9g==
dependencies:
domelementtype "^2.0.1"
entities "^2.0.0"
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
dom-serializer@~0.1.0, dom-serializer@~0.1.1:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "0.1.1"
resolved "https://registry.yarnpkg.com/dom-serializer/-/dom-serializer-0.1.1.tgz#1ec4059e284babed36eec2941d4a970a189ce7c0"
integrity sha512-l0IU0pPzLWSHBcieZbpOKgkIn3ts3vAh7ZuFyXNwJxJXk/c4Gwj9xaTJwIDVQCXawWD0qb3IzMGH5rglQaO0XA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Lock file maintenance
2019-08-01 08:14:51 +03:00
domelementtype "^1.3.0"
entities "^1.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency html-to-text to v5
2019-07-02 03:43:18 +03:00
domelementtype@1, domelementtype@^1.3.0, domelementtype@^1.3.1:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "1.3.1"
resolved "https://registry.yarnpkg.com/domelementtype/-/domelementtype-1.3.1.tgz#d048c44b37b0d10a7f2a3d5fee3f4333d790481f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-BSKB+TSpMpFI/HOxCNr1O8aMOTZ8hT3pM3GQ0w/mWRmkhEDSFJkkyzz4XQsBV44BChwGkrDfMyjVD0eA2aFV3w==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
domelementtype@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/domelementtype/-/domelementtype-2.0.1.tgz#1f8bdfe91f5a78063274e803b4bdcedf6e94f94d"
integrity sha512-5HOHUDsYZWV8FGWN0Njbr/Rn7f/eWSQi1v7+HsUVwXgn8nWWlL64zKDkS0n8ZmQ3mlWOMuXOnR+7Nx/5tMO5AQ==
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
domexception@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/domexception/-/domexception-2.0.1.tgz#fb44aefba793e1574b0af6aed2801d057529f304"
integrity sha512-yxJ2mFy/sibVQlu5qHjOkf9J3K6zgmCxgJ94u2EdvDOV09H+32LtRswEcUsmUWN72pVLOEnTSRaIVVzVQgS0dg==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
webidl-conversions "^5.0.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
domhandler@^2.3.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "2.4.2"
resolved "https://registry.yarnpkg.com/domhandler/-/domhandler-2.4.2.tgz#8805097e933d65e85546f726d60f5eb88b44f803"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-JiK04h0Ht5u/80fdLMCEmV4zkNh2BcoMFBmZ/91WtYZ8qVXSKjiw7fXMgFPnHcSZgOo3XdinHvmnDUeMf5R4wA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
domelementtype "1"
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
domhandler@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/domhandler/-/domhandler-3.0.0.tgz#51cd13efca31da95bbb0c5bee3a48300e333b3e9"
integrity sha512-eKLdI5v9m67kbXQbJSNn1zjh0SDzvzWVWtX+qEI3eMjZw8daH9k8rlj1FZY9memPwjiskQFbe7vHVVJIAqoEhw==
dependencies:
domelementtype "^2.0.1"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
domutils@1.5.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.5.1"
resolved "https://registry.yarnpkg.com/domutils/-/domutils-1.5.1.tgz#dcd8488a26f563d61079e48c9f7b7e32373682cf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-3NhIiib1Y9YQeeSMn3t+Mjc2gs8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
dom-serializer "0"
domelementtype "1"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
domutils@^1.5.1, domutils@^1.7.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.7.0"
resolved "https://registry.yarnpkg.com/domutils/-/domutils-1.7.0.tgz#56ea341e834e06e6748af7a1cb25da67ea9f8c2a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Lgd2XcJ/NjEw+7tFvfKxOzCYKZsdct5lczQ2ZaQY8Djz7pfAD3Gbp8ySJWtreII/vDlMVmxwa6pHmdxIYgttDg==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
dependencies:
dom-serializer "0"
domelementtype "1"
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
domutils@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/domutils/-/domutils-2.0.0.tgz#15b8278e37bfa8468d157478c58c367718133c08"
integrity sha512-n5SelJ1axbO636c2yUtOGia/IcJtVtlhQbFiVDBZHKV5ReJO1ViX7sFEemtuyoAnBxk5meNSYgA8V4s0271efg==
dependencies:
dom-serializer "^0.2.1"
domelementtype "^2.0.1"
domhandler "^3.0.0"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
dot-case@^3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/dot-case/-/dot-case-3.0.3.tgz#21d3b52efaaba2ea5fda875bb1aa8124521cf4aa"
integrity sha512-7hwEmg6RiSQfm/GwPL4AAWXKy3YNNZA3oFv2Pdiey0mwkRCPZ9x6SZbkLcn8Ma5PYeVokzoD4Twv2n7LKp5WeA==
dependencies:
no-case "^3.0.3"
tslib "^1.10.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
dot-prop@^5.2.0:
version "5.2.0"
resolved "https://registry.yarnpkg.com/dot-prop/-/dot-prop-5.2.0.tgz#c34ecc29556dc45f1f4c22697b6f4904e0cc4fcb"
integrity sha512-uEUyaDKoSQ1M4Oq8l45hSE26SnTxL6snNnqvK/VWx5wJhmff5z0FUVJDKDanor/6w3kzE3i7XZOk+7wC0EXr1A==
dependencies:
is-obj "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
downsize@0.0.8:
version "0.0.8"
resolved "https://registry.yarnpkg.com/downsize/-/downsize-0.0.8.tgz#21435a610c8c68220f5cc31474979b4d025f038e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IUNaYQyMaCIPXMMUdJebTQJfA44=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
xregexp "2.0.0"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
dtrace-provider@~0.8:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "0.8.8"
resolved "https://registry.yarnpkg.com/dtrace-provider/-/dtrace-provider-0.8.8.tgz#2996d5490c37e1347be263b423ed7b297fb0d97e"
integrity sha512-b7Z7cNtHPhH9EJhNNbbeqTcXB8LGFFZhq1PGgEvpeHlzd36bhbdTWoE/Ba/YguqpBSlAPKnARWhVlhunCMwfxg==
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
dependencies:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
nan "^2.14.0"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
duplexer3@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/duplexer3/-/duplexer3-0.1.4.tgz#ee01dd1cac0ed3cbc7fdbea37dc0a8f1ce002ce2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-7gHdHKwO08vH/b6jfcCo8c4ALOI=
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
duplexer@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/duplexer/-/duplexer-0.1.1.tgz#ace6ff808c1ce66b57d1ebf97977acb02334cfc1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-rOb/gIwc5mtX0ev5eXessCM0z8E=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ecc-jsbn@~0.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz#3a83a904e54353287874c564b7549386849a98c9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-OoOpBOVDUyh4dMVkt1SThoSamMk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
jsbn "~0.1.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
safer-buffer "^2.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
ecdsa-sig-formatter@1.0.11:
version "1.0.11"
resolved "https://registry.yarnpkg.com/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz#ae0f0fa2d85045ef14a817daa3ce9acd0489e5bf"
integrity sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==
dependencies:
safe-buffer "^5.0.1"
Update dependency gscan to v3.4.1
2020-04-06 20:10:36 +03:00
editorconfig@^0.15.3:
Updated express-hbs to 2.1.2 no-issue ronseal.
2019-05-20 13:35:04 +03:00
version "0.15.3"
resolved "https://registry.yarnpkg.com/editorconfig/-/editorconfig-0.15.3.tgz#bef84c4e75fb8dcb0ce5cee8efd51c15999befc5"
integrity sha512-M9wIMFx96vq0R4F+gRpY3o2exzb8hEj/n9S8unZtHSvYjibBp/iMufSzvmOcV/laG0ZtuTVGtiJggPOSW2r93g==
dependencies:
commander "^2.19.0"
lru-cache "^4.1.5"
semver "^5.6.0"
sigmund "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ee-first@1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/ee-first/-/ee-first-1.1.1.tgz#590c61156b0ae2f4f0255732a158b266bc56b21d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WQxhFWsK4vTwJVcyoViyZrxWsh0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
electron-to-chromium@^1.3.390:
version "1.3.392"
resolved "https://registry.yarnpkg.com/electron-to-chromium/-/electron-to-chromium-1.3.392.tgz#280ab4f7a3ae47419cfabb15dbfc1567be7f1111"
integrity sha512-/hsgeVdReDsyTBE0aU9FRdh1wnNPrX3xlz3t61F+CJPOT+Umfi9DXHsCX85TEgWZQqlow0Rw44/4/jbU2Sqgkg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
ember-rfc176-data@^0.3.12:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "0.3.12"
resolved "https://registry.yarnpkg.com/ember-rfc176-data/-/ember-rfc176-data-0.3.12.tgz#90d82878e69e2ac9a5438e8ce14d12c6031c5bd2"
integrity sha512-g9HeZj/gU5bfIIrGXkP7MhS2b3Vu5DfNUrYr14hy99TgIvtZETO+96QF4WOEUXGjIJdfTRjerVnQlqngPQSv1g==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 12:12:03 +03:00
emits@^3.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "3.0.0"
resolved "https://registry.yarnpkg.com/emits/-/emits-3.0.0.tgz#32752bba95e1707b219562384ab9bb8b1fd62f70"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-MnUrupXhcHshlWI4Srm7ix/WL3A=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
emoji-regex@^7.0.1:
version "7.0.3"
resolved "https://registry.yarnpkg.com/emoji-regex/-/emoji-regex-7.0.3.tgz#933a04052860c85e83c122479c4748a8e4c72156"
integrity sha512-CwBLREIQ7LvYFB0WyRvwhq5N5qPhc6PMjD6bYggFlI5YyDgl+0vxq5VHbMOFqLg7hfWzmu8T5Z1QofhmTIhItA==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
emoji-regex@^8.0.0:
version "8.0.0"
resolved "https://registry.yarnpkg.com/emoji-regex/-/emoji-regex-8.0.0.tgz#e818fd69ce5ccfcb404594f842963bf53164cc37"
integrity sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
encodeurl@~1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/encodeurl/-/encodeurl-1.0.2.tgz#ad3ff4c86ec2d029322f5a02c3a9a606c95b3f59"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-rT/0yG7C0CkyL1oCw6mmBslbP1k=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
encoding@~0.1.7:
version "0.1.12"
resolved "https://registry.yarnpkg.com/encoding/-/encoding-0.1.12.tgz#538b66f3ee62cd1ab51ec323829d1f9480c74beb"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-U4tm8+5izRq1HsMjgp0flIDHS+s=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
iconv-lite "~0.4.13"
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
end-of-stream@^1.0.0, end-of-stream@^1.1.0, end-of-stream@^1.4.1:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "1.4.4"
resolved "https://registry.yarnpkg.com/end-of-stream/-/end-of-stream-1.4.4.tgz#5ae64a5f45057baf3626ec14da0ca5e4b2431eb0"
integrity sha512-+uw1inIHVPQoaVuHzRyXd21icM+cnt4CzD5rW+NC1wjOUSTOs+Te7FOv7AhN7vS9x/oIyhLP5PR1H+phQAHu5Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
once "^1.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
entities@^1.1.1, entities@~1.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/entities/-/entities-1.1.2.tgz#bdfa735299664dfafd34529ed4f8522a275fea56"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-f2LZMYl1Fzu7YSBKg+RoROelpOaNrcGmE9AZubeDfrCEia483oW4MI4VyFd5VNHIgQ/7qm1I0wUHK1eJnn2y2w==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
entities@^2.0.0, entities@~2.0.0:
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
version "2.0.0"
resolved "https://registry.yarnpkg.com/entities/-/entities-2.0.0.tgz#68d6084cab1b079767540d80e56a39b423e4abf4"
integrity sha512-D9f7V0JSRwIxlRI2mjMqufDrRDnx8p+eEOz7aUM9SuvF8gsBzra0/6tbjl1m8eQHrZlYj6PxqE00hZ1SAIKPLw==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
error-ex@^1.2.0, error-ex@^1.3.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.3.2"
resolved "https://registry.yarnpkg.com/error-ex/-/error-ex-1.3.2.tgz#b4ac40648107fdcdcfae242f428bea8a14d4f1bf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-7dFHNmqeFSEt2ZBsCriorKnn3Z2pj+fd9kmI6QoWw4//DL+icEBfc0U7qJCisqrTsKTjw4fNFy2pW9OqStD84g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
is-arrayish "^0.2.1"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
error@^7.0.0:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "7.2.0"
resolved "https://registry.yarnpkg.com/error/-/error-7.2.0.tgz#80c989885635b41df9309d145834a4f125ae2245"
integrity sha512-M6t3j3Vt3uDicrViMP5fLq2AeADNrCVFD8Oj4Qt2MHsX0mPYG7D5XdnEfSdRpaHQzjAJ19wu+I1mw9rQYMTAPg==
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
dependencies:
string-template "~0.2.1"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
es-abstract@^1.17.0-next.1, es-abstract@^1.17.2, es-abstract@^1.17.5:
version "1.17.5"
resolved "https://registry.yarnpkg.com/es-abstract/-/es-abstract-1.17.5.tgz#d8c9d1d66c8981fb9200e2251d799eee92774ae9"
integrity sha512-BR9auzDbySxOcfog0tLECW8l28eRGpDpU3Dm3Hp4q/N+VtLTmyj4EUN088XZWQDW/hzj6sYRDXeOFsaAODKvpg==
dependencies:
es-to-primitive "^1.2.1"
function-bind "^1.1.1"
has "^1.0.3"
has-symbols "^1.0.1"
is-callable "^1.1.5"
is-regex "^1.0.5"
object-inspect "^1.7.0"
object-keys "^1.1.1"
object.assign "^4.1.0"
string.prototype.trimleft "^2.1.1"
string.prototype.trimright "^2.1.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
es-abstract@^1.5.1:
Added member's subscription cancellation helper {{cancel_link}} (#11434) no issue - The helper allows generating HTML needed to cancel or continue the member's subscription depending on subscription state. - Added public members endpoint to allow updating subscription's `cancel_at_period_end` attribute available at: `PUT /api/canary/members/subscriptions/:id/` - Added client-side hook to allow calling subscription cancellation. Allows to create elements with `data-members-cancel-subscription` / `data-members-continue-subscription` attributes which would call subscription update. - Updated schema and added migration for `current_period_end` column - As discussed we only add a single column to subscriptions table to avoid preoptimizing for future cases - Added {{cancel_link}} helper - Added error handling for {{cancel_link}} when members are disabled - Added test coverage for {{cancel_link}} helper - Bumped @tryghost/members-api version to 0.10.2. Needed to use `updateSubscription` middleware - Bumped gscan to 3.2.0. Needed to recognize new {{cancel_link}} helper
2019-12-12 15:59:15 +03:00
version "1.16.3"
resolved "https://registry.yarnpkg.com/es-abstract/-/es-abstract-1.16.3.tgz#52490d978f96ff9f89ec15b5cf244304a5bca161"
integrity sha512-WtY7Fx5LiOnSYgF5eg/1T+GONaGmpvpPdCpSnYij+U2gDTL0UPfWrhDw7b2IYb+9NQJsYpCA0wOQvZfsd6YwRw==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
dependencies:
Added member's subscription cancellation helper {{cancel_link}} (#11434) no issue - The helper allows generating HTML needed to cancel or continue the member's subscription depending on subscription state. - Added public members endpoint to allow updating subscription's `cancel_at_period_end` attribute available at: `PUT /api/canary/members/subscriptions/:id/` - Added client-side hook to allow calling subscription cancellation. Allows to create elements with `data-members-cancel-subscription` / `data-members-continue-subscription` attributes which would call subscription update. - Updated schema and added migration for `current_period_end` column - As discussed we only add a single column to subscriptions table to avoid preoptimizing for future cases - Added {{cancel_link}} helper - Added error handling for {{cancel_link}} when members are disabled - Added test coverage for {{cancel_link}} helper - Bumped @tryghost/members-api version to 0.10.2. Needed to use `updateSubscription` middleware - Bumped gscan to 3.2.0. Needed to recognize new {{cancel_link}} helper
2019-12-12 15:59:15 +03:00
es-to-primitive "^1.2.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
function-bind "^1.1.1"
has "^1.0.3"
Added member's subscription cancellation helper {{cancel_link}} (#11434) no issue - The helper allows generating HTML needed to cancel or continue the member's subscription depending on subscription state. - Added public members endpoint to allow updating subscription's `cancel_at_period_end` attribute available at: `PUT /api/canary/members/subscriptions/:id/` - Added client-side hook to allow calling subscription cancellation. Allows to create elements with `data-members-cancel-subscription` / `data-members-continue-subscription` attributes which would call subscription update. - Updated schema and added migration for `current_period_end` column - As discussed we only add a single column to subscriptions table to avoid preoptimizing for future cases - Added {{cancel_link}} helper - Added error handling for {{cancel_link}} when members are disabled - Added test coverage for {{cancel_link}} helper - Bumped @tryghost/members-api version to 0.10.2. Needed to use `updateSubscription` middleware - Bumped gscan to 3.2.0. Needed to recognize new {{cancel_link}} helper
2019-12-12 15:59:15 +03:00
has-symbols "^1.0.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
is-callable "^1.1.4"
is-regex "^1.0.4"
Added member's subscription cancellation helper {{cancel_link}} (#11434) no issue - The helper allows generating HTML needed to cancel or continue the member's subscription depending on subscription state. - Added public members endpoint to allow updating subscription's `cancel_at_period_end` attribute available at: `PUT /api/canary/members/subscriptions/:id/` - Added client-side hook to allow calling subscription cancellation. Allows to create elements with `data-members-cancel-subscription` / `data-members-continue-subscription` attributes which would call subscription update. - Updated schema and added migration for `current_period_end` column - As discussed we only add a single column to subscriptions table to avoid preoptimizing for future cases - Added {{cancel_link}} helper - Added error handling for {{cancel_link}} when members are disabled - Added test coverage for {{cancel_link}} helper - Bumped @tryghost/members-api version to 0.10.2. Needed to use `updateSubscription` middleware - Bumped gscan to 3.2.0. Needed to recognize new {{cancel_link}} helper
2019-12-12 15:59:15 +03:00
object-inspect "^1.7.0"
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
object-keys "^1.1.1"
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
string.prototype.trimleft "^2.1.0"
string.prototype.trimright "^2.1.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
Added member's subscription cancellation helper {{cancel_link}} (#11434) no issue - The helper allows generating HTML needed to cancel or continue the member's subscription depending on subscription state. - Added public members endpoint to allow updating subscription's `cancel_at_period_end` attribute available at: `PUT /api/canary/members/subscriptions/:id/` - Added client-side hook to allow calling subscription cancellation. Allows to create elements with `data-members-cancel-subscription` / `data-members-continue-subscription` attributes which would call subscription update. - Updated schema and added migration for `current_period_end` column - As discussed we only add a single column to subscriptions table to avoid preoptimizing for future cases - Added {{cancel_link}} helper - Added error handling for {{cancel_link}} when members are disabled - Added test coverage for {{cancel_link}} helper - Bumped @tryghost/members-api version to 0.10.2. Needed to use `updateSubscription` middleware - Bumped gscan to 3.2.0. Needed to recognize new {{cancel_link}} helper
2019-12-12 15:59:15 +03:00
es-to-primitive@^1.2.1:
version "1.2.1"
resolved "https://registry.yarnpkg.com/es-to-primitive/-/es-to-primitive-1.2.1.tgz#e55cd4c9cdc188bcefb03b366c736323fc5c898a"
integrity sha512-QCOllgZJtaUo9miYBcLChTUaHNjJF3PYs1VidD7AwiEj1kYxKeQTctLAezAOH5ZKRH0g2IgPn6KwB4IT8iRpvA==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
dependencies:
is-callable "^1.1.4"
is-date-object "^1.0.1"
is-symbol "^1.0.2"
Update dependency node-jose to v1.1.4
2020-03-26 22:17:47 +03:00
es6-promise@^4.0.3, es6-promise@^4.2.6, es6-promise@^4.2.8:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "4.2.8"
resolved "https://registry.yarnpkg.com/es6-promise/-/es6-promise-4.2.8.tgz#4eb21594c972bc40553d276e510539143db53e0a"
integrity sha512-HJDGx5daxeIvxdBxvG2cb9g4tEvwIk3i8+nhX0yGrYmZUzbkdg8QbDevheDB8gd0//uPj4c1EQua8Q+MViT0/w==
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
es6-promisify@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/es6-promisify/-/es6-promisify-5.0.0.tgz#5109d62f3e56ea967c4b63505aef08291c8a5203"
integrity sha1-UQnWLz5W6pZ8S2NQWu8IKRyKUgM=
dependencies:
es6-promise "^4.0.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
escape-html@~1.0.3:
version "1.0.3"
resolved "https://registry.yarnpkg.com/escape-html/-/escape-html-1.0.3.tgz#0258eae4d3d0c0974de1c169188ef0051d1d1988"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Aljq5NPQwJdN4cFpGI7wBR0dGYg=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🔥 remove gulp (#8159) * remove gulpfile * remove gulp dependencies * Update README.md
2017-03-14 17:20:53 +03:00
escape-string-regexp@1.0.5, escape-string-regexp@^1.0.2, escape-string-regexp@^1.0.5:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.5"
resolved "https://registry.yarnpkg.com/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz#1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-G2HAViGQqN/2rjuyzwIAyhMLhtQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
escodegen@1.x.x, escodegen@^1.8.1:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "1.12.0"
resolved "https://registry.yarnpkg.com/escodegen/-/escodegen-1.12.0.tgz#f763daf840af172bb3a2b6dd7219c0e17f7ff541"
integrity sha512-TuA+EhsanGcme5T3R0L80u4t8CpbXQjegRmf7+FPTJrtCTErXFeelblRgHQa1FofEzqYYJmJ/OqjTwREp9qgmg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump jsonpath to version 1.0.0 no issue - major bump - we only use jsonpath inside the `get` helper - the functionality still works as expected - includes security fix, see https://github.com/dchester/jsonpath/commit/98464aa5fea65bad09564a5632bad72e31736244
2017-10-31 14:21:48 +03:00
esprima "^3.1.3"
estraverse "^4.2.0"
esutils "^2.0.2"
optionator "^0.8.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
optionalDependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
source-map "~0.6.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
escodegen@^1.14.1:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
version "1.14.1"
resolved "https://registry.yarnpkg.com/escodegen/-/escodegen-1.14.1.tgz#ba01d0c8278b5e95a9a45350142026659027a457"
integrity sha512-Bmt7NcRySdIfNPfU2ZoXDrrXsG9ZjvDxcAlMfDUgRBjLOWTuIACXPBFJH7Z+cLb40JeQco5toikyc9t9P8E9SQ==
dependencies:
esprima "^4.0.1"
estraverse "^4.2.0"
esutils "^2.0.2"
optionator "^0.8.1"
optionalDependencies:
source-map "~0.6.1"
Update dependency eslint-plugin-ghost to v1.0.1
2020-03-25 21:31:55 +03:00
eslint-plugin-ember@7.10.1:
version "7.10.1"
resolved "https://registry.yarnpkg.com/eslint-plugin-ember/-/eslint-plugin-ember-7.10.1.tgz#9ec731f158fc76a293bfb8055eaceb6b978ae0e7"
integrity sha512-3iOrcUsqZXsri6krYw+8fEH20Es8A2QEkog8fCw/Ldr54SR2/IEO41F7ldOrr0X3h8w9z1W1/v97IlMiGJhXkg==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
dependencies:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
"@ember-data/rfc395-data" "^0.0.4"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
ember-rfc176-data "^0.3.12"
Update dependency eslint-plugin-ghost to v1.0.1
2020-03-25 21:31:55 +03:00
snake-case "^3.0.3"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Updated eslint-plugin-ghost dependency no issue
2020-04-02 16:11:33 +03:00
eslint-plugin-ghost@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/eslint-plugin-ghost/-/eslint-plugin-ghost-1.1.0.tgz#c8aba0287ea4b41e4c6ca93c6c2098f2c497e265"
integrity sha512-5Q/fnEQVdVvLz+Q4XVSqTBLBACMwNCxajsOnPFPsLHfcgS/m118t/p36HxvDmAge6Gc8jH7W5ouAJT8SpHWJcg==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
dependencies:
Update dependency eslint-plugin-ghost to v1.0.1
2020-03-25 21:31:55 +03:00
eslint-plugin-ember "7.10.1"
eslint-plugin-mocha "6.3.0"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
eslint-plugin-sort-imports-es6-autofix "0.5.0"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Update dependency eslint-plugin-ghost to v1.0.1
2020-03-25 21:31:55 +03:00
eslint-plugin-mocha@6.3.0:
version "6.3.0"
resolved "https://registry.yarnpkg.com/eslint-plugin-mocha/-/eslint-plugin-mocha-6.3.0.tgz#72bfd06a5c4323e17e30ef41cd726030e8cdb8fd"
integrity sha512-Cd2roo8caAyG21oKaaNTj7cqeYRWW1I2B5SfpKRp0Ip1gkfwoR1Ow0IGlPWnNjzywdF4n+kHL8/9vM6zCJUxdg==
Updated tests eslint config to use eslint-plugin-ghost@0.5.0 no issue - bump eslint-plugin-ghost to v0.5.0 - update core/test eslint config to use "ghost:test" in place of custom ruleset - apply automated eslint fixes
2019-08-19 14:41:09 +03:00
dependencies:
Update dependency eslint-plugin-ghost to v1.0.1
2020-03-25 21:31:55 +03:00
eslint-utils "^2.0.0"
ramda "^0.27.0"
Updated tests eslint config to use eslint-plugin-ghost@0.5.0 no issue - bump eslint-plugin-ghost to v0.5.0 - update core/test eslint config to use "ghost:test" in place of custom ruleset - apply automated eslint fixes
2019-08-19 14:41:09 +03:00
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
eslint-plugin-sort-imports-es6-autofix@0.5.0:
version "0.5.0"
resolved "https://registry.yarnpkg.com/eslint-plugin-sort-imports-es6-autofix/-/eslint-plugin-sort-imports-es6-autofix-0.5.0.tgz#dabae09a457eac6e95c52d8edd7855f576d014b6"
integrity sha512-KEX2Uz6bAs67jDYiH/OT1xz1E7AzIJJOIRg1F7OnFAfUVlpws3ldSZj5oZySRHfoVkWqDX9GGExYxckdLrWhwg==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
dependencies:
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
eslint "^6.2.2"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Update Test & linting packages
2019-08-16 22:07:23 +03:00
eslint-scope@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/eslint-scope/-/eslint-scope-5.0.0.tgz#e87c8887c73e8d1ec84f1ca591645c358bfc8fb9"
integrity sha512-oYrhJW7S0bxAFDvWqzvMPRm6pcgcnWc4QnofCAqRTRfQC0JcwenzGglTtsLyIuuWFfkqDG9vz67cnttSd53djw==
dependencies:
esrecurse "^4.1.0"
estraverse "^4.1.1"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
eslint-utils@^1.4.3:
version "1.4.3"
resolved "https://registry.yarnpkg.com/eslint-utils/-/eslint-utils-1.4.3.tgz#74fec7c54d0776b6f67e0251040b5806564e981f"
integrity sha512-fbBN5W2xdY45KulGXmLHZ3c3FHfVYmKg0IrAKGOkT/464PQsx2UeIzfz1RmEci+KLm1bBaAzZAh8+/E+XAeZ8Q==
dependencies:
eslint-visitor-keys "^1.1.0"
Update dependency eslint-plugin-ghost to v1.0.1
2020-03-25 21:31:55 +03:00
eslint-utils@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/eslint-utils/-/eslint-utils-2.0.0.tgz#7be1cc70f27a72a76cd14aa698bcabed6890e1cd"
integrity sha512-0HCPuJv+7Wv1bACm8y5/ECVfYdfsAm9xmVb7saeFlxjPYALefjhbYoCkBjPdPzGH8wWyTpAez82Fh3VKYEZ8OA==
dependencies:
eslint-visitor-keys "^1.1.0"
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
eslint-visitor-keys@^1.1.0:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-1.1.0.tgz#e2a82cea84ff246ad6fb57f9bde5b46621459ec2"
integrity sha512-8y9YjtM1JBJU/A9Kc+SbaOV4y29sSWckBwMHa+FGtVj5gN/sbnKDf6xJUl+8g7FAij9LVaP8C24DUiH/f/2Z9A==
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
eslint@6.8.0, eslint@^6.2.2, eslint@^6.8.0:
Update Test & linting packages
2020-02-03 16:44:38 +03:00
version "6.8.0"
resolved "https://registry.yarnpkg.com/eslint/-/eslint-6.8.0.tgz#62262d6729739f9275723824302fb227c8c93ffb"
integrity sha512-K+Iayyo2LtyYhDSYwz5D5QdWw0hCacNzyq1Y821Xna2xSJj7cijoLLYmLxTQgcgZ9mC61nryMy9S7GRbYpI5Ig==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
"@babel/code-frame" "^7.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ajv "^6.10.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
chalk "^2.1.0"
cross-spawn "^6.0.5"
debug "^4.0.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
doctrine "^3.0.0"
Update Test & linting packages
2019-08-16 22:07:23 +03:00
eslint-scope "^5.0.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
eslint-utils "^1.4.3"
eslint-visitor-keys "^1.1.0"
espree "^6.1.2"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
esquery "^1.0.1"
esutils "^2.0.2"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
file-entry-cache "^5.0.1"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
functional-red-black-tree "^1.0.1"
Update Test & linting packages
2019-08-16 22:07:23 +03:00
glob-parent "^5.0.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
globals "^12.1.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
ignore "^4.0.6"
import-fresh "^3.0.0"
imurmurhash "^0.1.4"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
inquirer "^7.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
is-glob "^4.0.0"
js-yaml "^3.13.1"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
json-stable-stringify-without-jsonify "^1.0.1"
levn "^0.3.0"
Update Test & linting packages
2019-08-16 22:07:23 +03:00
lodash "^4.17.14"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
minimatch "^3.0.4"
mkdirp "^0.5.1"
natural-compare "^1.4.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
optionator "^0.8.3"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
progress "^2.0.0"
regexpp "^2.0.1"
Update Test & linting packages
2019-08-16 22:07:23 +03:00
semver "^6.1.2"
strip-ansi "^5.2.0"
strip-json-comments "^3.0.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
table "^5.2.3"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
text-table "^0.2.0"
Update Test & linting packages
2019-08-16 22:07:23 +03:00
v8-compile-cache "^2.0.3"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Update dependency knex to v0.20.13
2020-04-01 20:10:27 +03:00
esm@^3.2.25:
version "3.2.25"
resolved "https://registry.yarnpkg.com/esm/-/esm-3.2.25.tgz#342c18c29d56157688ba5ce31f8431fbb795cc10"
integrity sha512-U1suiZ2oDVWv4zPO56S0NcR5QriEahGtdN2OR6FiOG4WJvcjBVFB0qI4+eKoWFH483PKGuLuu6V8Z4T5g63UVA==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
espree@^6.1.2:
version "6.1.2"
resolved "https://registry.yarnpkg.com/espree/-/espree-6.1.2.tgz#6c272650932b4f91c3714e5e7b5f5e2ecf47262d"
integrity sha512-2iUPuuPP+yW1PZaMSDM9eyVf8D5P0Hi8h83YtZ5bPc/zHYjII5khoixIUTMO794NOY8F/ThF1Bo8ncZILarUTA==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
Update Test & linting packages
2020-02-03 16:44:38 +03:00
acorn "^7.1.0"
acorn-jsx "^5.1.0"
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
eslint-visitor-keys "^1.1.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
esprima@1.2.2:
version "1.2.2"
resolved "https://registry.yarnpkg.com/esprima/-/esprima-1.2.2.tgz#76a0fd66fcfe154fd292667dc264019750b1657b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-dqD9Zvz+FU/SkmZ9wmQBl1CxZXs=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
esprima@3.x.x, esprima@^3.1.3:
version "3.1.3"
resolved "https://registry.yarnpkg.com/esprima/-/esprima-3.1.3.tgz#fdca51cee6133895e3c88d535ce49dbff62a4633"
integrity sha1-/cpRzuYTOJXjyI1TXOSdv/YqRjM=
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
esprima@^4.0.0, esprima@^4.0.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "4.0.1"
resolved "https://registry.yarnpkg.com/esprima/-/esprima-4.0.1.tgz#13b04cdb3e6c5d19df91ab6987a8695619b0aa71"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
esquery@^1.0.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/esquery/-/esquery-1.0.1.tgz#406c51658b1f5991a5f9b62b1dc25b00e3e5c708"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-SmiyZ5zIWH9VM+SRUReLS5Q8a7GxtRdxEBVZpm98rJM7Sb+A9DVCndXfkeFUd3byderg+EbDkfnevfCwynWaNA==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
estraverse "^4.0.0"
esrecurse@^4.1.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "4.2.1"
resolved "https://registry.yarnpkg.com/esrecurse/-/esrecurse-4.2.1.tgz#007a3b9fdbc2b3bb87e4879ea19c92fdbd3942cf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-64RBB++fIOAXPw3P9cy89qfMlvZEXZkqqJkjqqXIvzP5ezRZjW+lPWjw35UX/3EhUPFYbg5ER4JYgDw4007/DQ==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
estraverse "^4.1.0"
estraverse@^4.0.0, estraverse@^4.1.0, estraverse@^4.1.1, estraverse@^4.2.0:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "4.3.0"
resolved "https://registry.yarnpkg.com/estraverse/-/estraverse-4.3.0.tgz#398ad3f3c5a24948be7725e83d11a7de28cdbd1d"
integrity sha512-39nnKffWz8xN1BU/2c79n9nB9HDzo0niYUqx6xyqUnyoAnQyyWpOTdZEeiCch8BBu515t4wp9ZmgVfVhn9EBpw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 21:07:33 +03:00
esutils@^2.0.2:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "2.0.3"
resolved "https://registry.yarnpkg.com/esutils/-/esutils-2.0.3.tgz#74d2eb4de0b8da1293711910d50775b9b710ef64"
integrity sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
etag@~1.8.1:
version "1.8.1"
resolved "https://registry.yarnpkg.com/etag/-/etag-1.8.1.tgz#41ae2eeb65efa62268aebfea83ac7d79299b0887"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Qa4u62XvpiJorr/qg6x9eSmbCIc=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
eventemitter2@~0.4.13:
version "0.4.14"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/eventemitter2/-/eventemitter2-0.4.14.tgz#8f61b75cde012b2e9eb284d4545583b5643b61ab"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-j2G3XN4BKy6esoTUVFWDtWQ7Yas=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
execa@^0.8.0:
version "0.8.0"
resolved "https://registry.yarnpkg.com/execa/-/execa-0.8.0.tgz#d8d76bbc1b55217ed190fd6dd49d3c774ecfc8da"
integrity sha1-2NdrvBtVIX7RkP1t1J08d07PyNo=
dependencies:
cross-spawn "^5.0.1"
get-stream "^3.0.0"
is-stream "^1.1.0"
npm-run-path "^2.0.0"
p-finally "^1.0.0"
signal-exit "^3.0.0"
strip-eof "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
exit@~0.1.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/exit/-/exit-0.1.2.tgz#0632638f8d877cc82107d30a0fff1a17cba1cd0c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-BjJjj42HfMghB9MKD/8aF8uhzQw=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
expand-brackets@^2.1.4:
version "2.1.4"
resolved "https://registry.yarnpkg.com/expand-brackets/-/expand-brackets-2.1.4.tgz#b77735e315ce30f6b6eff0f83b04151a22449622"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-t3c14xXOMPa27/D4OwQVGiJEliI=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
debug "^2.3.3"
define-property "^0.2.5"
extend-shallow "^2.0.1"
posix-character-classes "^0.1.0"
regex-not "^1.0.0"
snapdragon "^0.8.1"
to-regex "^3.0.1"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
expand-template@^2.0.3:
version "2.0.3"
resolved "https://registry.yarnpkg.com/expand-template/-/expand-template-2.0.3.tgz#6e14b3fcee0f3a6340ecb57d2e8918692052a47c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
expand-tilde@^2.0.0, expand-tilde@^2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/expand-tilde/-/expand-tilde-2.0.2.tgz#97e801aa052df02454de46b02bf621642cdc8502"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-l+gBqgUt8CRU3kawK/YhZCzchQI=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
homedir-polyfill "^1.0.1"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
express-brute@1.0.1, express-brute@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/express-brute/-/express-brute-1.0.1.tgz#9f36d107fe34e40a682593e39bffcc53102b5335"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
integrity sha1-nzbRB/405ApoJZPjm//MUxArUzU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
long-timeout "~0.1.1"
underscore "~1.8.3"
Update dependency express-hbs to v2.3.3
2020-04-06 18:42:24 +03:00
express-hbs@2.3.3:
version "2.3.3"
resolved "https://registry.yarnpkg.com/express-hbs/-/express-hbs-2.3.3.tgz#6f31092daec38e6c582ec76326fcad09c984a0fd"
integrity sha512-/yJPRKtzcebvRnH08g/OUOn00RjFpWQl42xdLjIY55tbY74wT3nhFbBUb41zEmGR+7WZRf5PhWd3E8DujC9jQQ==
Update dependency express-hbs to v2.3.2
2020-04-01 21:04:24 +03:00
dependencies:
bluebird "^3.5.3"
Update dependency express-hbs to v2.3.3
2020-04-06 18:42:24 +03:00
handlebars "4.7.6"
Update dependency express-hbs to v2.3.2
2020-04-01 21:04:24 +03:00
lodash "4.17.15"
readdirp "3.4.0"
optionalDependencies:
Update dependency express-hbs to v2.3.3
2020-04-06 18:42:24 +03:00
js-beautify "1.11.0"
Update dependency express-hbs to v2.3.2
2020-04-01 21:04:24 +03:00
Update dependency express-jwt to v5.3.3
2020-04-07 18:08:49 +03:00
express-jwt@5.3.3:
version "5.3.3"
resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-5.3.3.tgz#e557b4a63dd34c5ddd6ad81452738386314cc243"
integrity sha512-UdB8p5O8vGYTKm3SfREnLgVGIGEHcL3lrVyi3ebEX2qhMuagN623ju7ywWis+qYL+CXE7G1qPc2bCPBAg2MxZQ==
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
dependencies:
async "^1.5.0"
express-unless "^0.3.0"
jsonwebtoken "^8.1.0"
lodash.set "^4.0.0"
🎨Added `absolute_url` flag to public api (#9833) closes #9832 The API _should_ be returning absolute URLs for everything, 3rd party applications require absolute urls to read and display ghost data correctly. Currently they have to concat the blog url and the resource url, which is very uncomfortable. Changing the public api like this would be considered a breaking change however so we've opted to put it behind a query parameter named `absolute_urls`.
2018-08-31 13:02:39 +03:00
express-query-boolean@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/express-query-boolean/-/express-query-boolean-2.0.0.tgz#ea56ac8138e2b95b171b8eee2af88738302941c3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-4dU/1HPm8lkTPR12+HFUXqCarcsC19OKOkb4otLOuADfPYrQMaugPJkSmxNsqwmWYjozvT6vdTiqkgeBHkzOow==
🎨Added `absolute_url` flag to public api (#9833) closes #9832 The API _should_ be returning absolute URLs for everything, 3rd party applications require absolute urls to read and display ghost data correctly. Currently they have to concat the blog url and the resource url, which is very uncomfortable. Changing the public api like this would be considered a breaking change however so we've opted to put it behind a query parameter named `absolute_urls`.
2018-08-31 13:02:39 +03:00
Update dependency express-session to v1.17.0 (#11238)
2019-10-30 18:41:39 +03:00
express-session@1.17.0:
version "1.17.0"
resolved "https://registry.yarnpkg.com/express-session/-/express-session-1.17.0.tgz#9b50dbb5e8a03c3537368138f072736150b7f9b3"
integrity sha512-t4oX2z7uoSqATbMfsxWMbNjAL0T5zpvcJCk3Z9wnPPN7ibddhnmDZXHfEcoBMG2ojKXZoCyPMc5FbtK+G7SoDg==
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
dependencies:
Update dependency express-session to v1.17.0 (#11238)
2019-10-30 18:41:39 +03:00
cookie "0.4.0"
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
cookie-signature "1.0.6"
debug "2.6.9"
Update dependency express-session to v1.16.2
2019-07-02 03:40:30 +03:00
depd "~2.0.0"
on-headers "~1.0.2"
parseurl "~1.3.3"
Update dependency express-session to v1.17.0 (#11238)
2019-10-30 18:41:39 +03:00
safe-buffer "5.2.0"
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
uid-safe "~2.1.5"
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
express-unless@^0.3.0:
version "0.3.1"
resolved "https://registry.yarnpkg.com/express-unless/-/express-unless-0.3.1.tgz#2557c146e75beb903e2d247f9b5ba01452696e20"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-JVfBRudb65A+LSR/m1ugFFJpbiA=
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
express@4.17.1, express@^4.16.2, express@^4.16.4:
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
version "4.17.1"
resolved "https://registry.yarnpkg.com/express/-/express-4.17.1.tgz#4491fc38605cf51f8629d39c2b5d026f98a4c134"
integrity sha512-mHJ9O79RqluphRrcw2X/GTh3k9tVv8YcoyY4Kkh4WDMUYKRZUq0h1o0w2rrrxBqM7VoeUVqgb27xlEMXTnYt4g==
dependencies:
accepts "~1.3.7"
array-flatten "1.1.1"
body-parser "1.19.0"
content-disposition "0.5.3"
content-type "~1.0.4"
cookie "0.4.0"
cookie-signature "1.0.6"
debug "2.6.9"
depd "~1.1.2"
encodeurl "~1.0.2"
escape-html "~1.0.3"
etag "~1.8.1"
finalhandler "~1.1.2"
fresh "0.5.2"
merge-descriptors "1.0.1"
methods "~1.1.2"
on-finished "~2.3.0"
parseurl "~1.3.3"
path-to-regexp "0.1.7"
proxy-addr "~2.0.5"
qs "6.7.0"
range-parser "~1.2.1"
safe-buffer "5.1.2"
send "0.17.1"
serve-static "1.14.1"
setprototypeof "1.1.1"
statuses "~1.5.0"
type-is "~1.6.18"
utils-merge "1.0.1"
vary "~1.1.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
extend-shallow@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/extend-shallow/-/extend-shallow-2.0.1.tgz#51af7d614ad9a9f610ea1bafbb989d6b1c56890f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Ua99YUrZqfYQ6huvu5idaxxWiQ8=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
is-extendable "^0.1.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
extend-shallow@^3.0.0, extend-shallow@^3.0.2:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/extend-shallow/-/extend-shallow-3.0.2.tgz#26a71aaf073b39fb2127172746131c2704028db8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Jqcarwc7OfshJxcnRhMcJwQCjbg=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
assign-symbols "^1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-extendable "^1.0.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
extend@^3.0.0, extend@~3.0.2:
version "3.0.2"
resolved "https://registry.yarnpkg.com/extend/-/extend-3.0.2.tgz#f8b1136b4071fbd8eb140aff858b1019ec2915fa"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
external-editor@^3.0.3:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/external-editor/-/external-editor-3.1.0.tgz#cb03f740befae03ea4d283caed2741a83f335495"
integrity sha512-hMQ4CX1p1izmuLYyZqLMO/qGNw10wSv9QDCPfzXfyFrOaCSSoRfqE1Kf1s5an66J5JZC62NewG+mK49jOCtQew==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
chardet "^0.7.0"
iconv-lite "^0.4.24"
tmp "^0.0.33"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
extglob@^2.0.4:
version "2.0.4"
resolved "https://registry.yarnpkg.com/extglob/-/extglob-2.0.4.tgz#ad00fe4dc612a9232e8718711dc5cb5ab0285543"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Nmb6QXkELsuBr24CJSkilo6UHHgbekK5UiZgfE6UHD3Eb27YC6oD+bhcT+tJ6cl8dmsgdQxnWlcry8ksBIBLpw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
array-unique "^0.3.2"
define-property "^1.0.0"
expand-brackets "^2.1.4"
extend-shallow "^2.0.1"
fragment-cache "^0.2.1"
regex-not "^1.0.0"
snapdragon "^0.8.1"
to-regex "^3.0.1"
Update dependency @tryghost/zip to v1
2020-04-08 14:57:26 +03:00
extract-zip@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/extract-zip/-/extract-zip-2.0.0.tgz#f53b71d44f4ff5a4527a2259ade000fb8b303492"
integrity sha512-i42GQ498yibjdvIhivUsRslx608whtGoFIhF26Z7O4MYncBxp8CwalOs1lnHy21A9sIohWO2+uiE4SRtC9JXDg==
dependencies:
debug "^4.1.1"
get-stream "^5.1.0"
yauzl "^2.10.0"
optionalDependencies:
"@types/yauzl" "^2.9.1"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
extsprintf@1.3.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/extsprintf/-/extsprintf-1.3.0.tgz#96918440e3041a7a414f8c52e3c574eb3c3e1e05"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-lpGEQOMEGnpBT4xS48V06zw+HgU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
extsprintf@^1.2.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/extsprintf/-/extsprintf-1.4.0.tgz#e2689f8f356fad62cca65a3a91c5df5f9551692f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-4mifjzVvrWLMplo6kcXfX5VRaS8=
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
fast-deep-equal@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/fast-deep-equal/-/fast-deep-equal-2.0.1.tgz#7b05218ddf9667bf7f370bf7fdb2cb15fdd0aa49"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ewUhjd+WZ79/Nwv3/bLLFf3Qqkk=
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
Update dependency ajv to v6.11.0
2020-02-17 05:16:58 +03:00
fast-deep-equal@^3.1.1:
version "3.1.1"
resolved "https://registry.yarnpkg.com/fast-deep-equal/-/fast-deep-equal-3.1.1.tgz#545145077c501491e33b15ec408c294376e94ae4"
integrity sha512-8UEa58QDLauDNfpbrX55Q9jrGHThw2ZMdOky5Gl1CDtVeJDPVrG4Jxx1N8jw2gkWaff5UUuX1KJd+9zGe2B+ZA==
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
fast-json-stable-stringify@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/fast-json-stable-stringify/-/fast-json-stable-stringify-2.0.0.tgz#d5142c0caee6b1189f87d3a76111064f86c8bbf2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-1RQsDK7msRifh9OnYREGT4bIu/I=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Update Test & linting packages
2020-02-03 16:44:38 +03:00
fast-levenshtein@~2.0.4, fast-levenshtein@~2.0.6:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.0.6"
resolved "https://registry.yarnpkg.com/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz#3d8a5c66883a16a30ca8643e851f19baa7797917"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-PYpcZog6FqMMqGQ+hR8Zuqd5eRc=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
faye-websocket@~0.10.0:
version "0.10.0"
resolved "https://registry.yarnpkg.com/faye-websocket/-/faye-websocket-0.10.0.tgz#4e492f8d04dfb6f89003507f6edbf2d501e7c6f4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-TkkvjQTftviQA1B/btvy1QHnxvQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
websocket-driver ">=0.5.1"
Update dependency @tryghost/zip to v1
2020-04-08 14:57:26 +03:00
fd-slicer@~1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/fd-slicer/-/fd-slicer-1.1.0.tgz#25c7c89cb1f9077f8891bbe61d8f390eae256f1e"
integrity sha1-JcfInLH5B3+IkbvmHY85Dq4lbx4=
dependencies:
pend "~1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
figures@^1.0.1:
version "1.7.0"
resolved "https://registry.yarnpkg.com/figures/-/figures-1.7.0.tgz#cbe1e3affcf1cd44b80cadfed28dc793a9701d2e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-y+Hjr/zxzUS4DK3+0o3Hk6lwHS4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
escape-string-regexp "^1.0.5"
object-assign "^4.1.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
figures@^3.0.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/figures/-/figures-3.1.0.tgz#4b198dd07d8d71530642864af2d45dd9e459c4ec"
integrity sha512-ravh8VRXqHuMvZt/d8GblBeqDMkdJMBdv/2KntFH+ra5MXkO7nxNKpzQ3n6QD/2da1kH0aWmNISdvhM7gl2gVg==
dependencies:
escape-string-regexp "^1.0.5"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
file-entry-cache@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/file-entry-cache/-/file-entry-cache-5.0.1.tgz#ca0f6efa6dd3d561333fb14515065c2fafdf439c"
integrity sha512-bCg29ictuBaKUwwArK4ouCaqDgLZcysCFLmM/Yn/FDoqndh/9vNuQfXRDvTuXKLxfD/JtZQGKFT8MGcJBK644g==
dependencies:
flat-cache "^2.0.1"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
file-extension@~4.0.5:
version "4.0.5"
resolved "https://registry.yarnpkg.com/file-extension/-/file-extension-4.0.5.tgz#ae6cef34c28e7313a92baa4aa955755cacdf0ce3"
integrity sha512-l0rOL3aKkoi6ea7MNZe6OHgqYYpn48Qfflr8Pe9G9JPPTx5A+sfboK91ZufzIs59/lPqh351l0eb6iKU9J5oGg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
file-sync-cmp@^0.1.0:
version "0.1.1"
resolved "https://registry.yarnpkg.com/file-sync-cmp/-/file-sync-cmp-0.1.1.tgz#a5e7a8ffbfa493b43b923bbd4ca89a53b63b612b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-peeo/7+kk7Q7kju9TKiaU7Y7YSs=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
file-uri-to-path@1:
version "1.0.0"
resolved "https://registry.yarnpkg.com/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz#553a7b8446ff6f684359c445f1e37a05dacc33dd"
integrity sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 16:59:06 +03:00
fill-keys@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/fill-keys/-/fill-keys-1.0.2.tgz#9a8fa36f4e8ad634e3bf6b4f3c8882551452eb20"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-mo+jb06K1jTjv2tPPIiCVRRS6yA=
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 16:59:06 +03:00
dependencies:
is-object "~1.0.1"
merge-descriptors "~1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
fill-range@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/fill-range/-/fill-range-4.0.0.tgz#d544811d428f98eb06a63dc402d2403c328c38f7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-1USBHUKPmOsGpj3EAtJAPDKMOPc=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
extend-shallow "^2.0.1"
is-number "^3.0.0"
repeat-string "^1.6.1"
to-regex-range "^2.1.0"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
fill-range@^7.0.1:
version "7.0.1"
resolved "https://registry.yarnpkg.com/fill-range/-/fill-range-7.0.1.tgz#1919a6a7c75fe38b2c7c77e5198535da9acdda40"
integrity sha512-qOo9F+dMUmC2Lcb4BbVvnKJxTPjCm+RRpe4gDuGrzkL7mEVl/djYSu2OdQ2Pa302N4oqkSg9ir6jaLWJ2USVpQ==
dependencies:
to-regex-range "^5.0.1"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
finalhandler@~1.1.2:
version "1.1.2"
resolved "https://registry.yarnpkg.com/finalhandler/-/finalhandler-1.1.2.tgz#b7e7d000ffd11938d0fdb053506f6ebabe9f587d"
integrity sha512-aAWcW57uxVNrQZqFXjITpW3sIUQmHGG3qSb9mUah9MgMC4NeWhNOlNjXEYq3HjRAvL6arUviZGGJsBg6z0zsWA==
dependencies:
debug "2.6.9"
encodeurl "~1.0.2"
escape-html "~1.0.3"
on-finished "~2.3.0"
parseurl "~1.3.3"
statuses "~1.5.0"
unpipe "~1.0.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
find-root@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/find-root/-/find-root-1.1.0.tgz#abcfc8ba76f708c42a97b3d685b7e9450bfb9ce4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-NKfW6bec6GfKc0SGx1e07QZY9PE99u0Bft/0rzSD5k3sO/vwkVUpDUKVm5Gpp5Ue3YfShPFTX2070tDs5kB9Ng==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
find-up@3.0.0, find-up@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/find-up/-/find-up-3.0.0.tgz#49169f1d7993430646da61ecc5ae355c21c97b73"
integrity sha512-1yD6RmLI1XBfxugvORwlck6f75tYL+iR0jqwsOrOxMZyGYqUuDhJ0l4AXdO1iX/FTs9cBAMEk1gWSEx1kSbylg==
dependencies:
locate-path "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
find-up@^1.0.0:
version "1.1.2"
resolved "https://registry.yarnpkg.com/find-up/-/find-up-1.1.2.tgz#6b2e9822b1a2ce0a60ab64d610eccad53cb24d0f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ay6YIrGizgpgq2TWEOzK1TyyTQ8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
path-exists "^2.0.0"
pinkie-promise "^2.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
find-up@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/find-up/-/find-up-2.1.0.tgz#45d1b7e506c717ddd482775a2b77920a3c0c57a7"
integrity sha1-RdG35QbHF93UgndaK3eSCjwMV6c=
dependencies:
locate-path "^2.0.0"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
findup-sync@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/findup-sync/-/findup-sync-3.0.0.tgz#17b108f9ee512dfb7a5c7f3c8b27ea9e1a9c08d1"
integrity sha512-YbffarhcicEhOrm4CtrwdKBdCuz576RLdhJDsIfvNtxUuhdRet1qZcsMjqbePtAseKdAnDyM/IyXbu7PRPRLYg==
dependencies:
detect-file "^1.0.0"
is-glob "^4.0.0"
micromatch "^3.0.4"
resolve-dir "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
findup-sync@~0.3.0:
version "0.3.0"
resolved "https://registry.yarnpkg.com/findup-sync/-/findup-sync-0.3.0.tgz#37930aa5d816b777c03445e1966cc6790a4c0b16"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-N5MKpdgWt3fANEXhlmzGeQpMCxY=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
glob "~5.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
fined@^1.0.1:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/fined/-/fined-1.2.0.tgz#d00beccf1aa2b475d16d423b0238b713a2c4a37b"
integrity sha512-ZYDqPLGxDkDhDZBjZBb+oD1+j0rA4E0pXY50eplAAOPg2N/gUBSSk5IM1/QhPfyVo19lJ+CvXpqfvk+b2p/8Ng==
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
expand-tilde "^2.0.2"
is-plain-object "^2.0.3"
object.defaults "^1.1.0"
object.pick "^1.2.0"
parse-filepath "^1.0.1"
flagged-respawn@^1.0.0:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/flagged-respawn/-/flagged-respawn-1.0.1.tgz#e7de6f1279ddd9ca9aac8a5971d618606b3aab41"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-lNaHNVymajmk0OJMBn8fVUAU1BtDeKIqKoVhk4xAALB57aALg6b4W0MfJ/cUE0g9YBXy5XhSlPIpYIJ7HaY/3Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
flat-cache@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/flat-cache/-/flat-cache-2.0.1.tgz#5d296d6f04bda44a4630a301413bdbc2ec085ec0"
integrity sha512-LoQe6yDuUMDzQAEH8sgmh4Md6oZnc/7PjtwjNFSzveXqSHt6ka9fPBuso7IGf9Rz4uqnSnWiFH2B/zj24a5ReA==
dependencies:
flatted "^2.0.0"
rimraf "2.6.3"
write "1.0.3"
flat@^4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/flat/-/flat-4.1.0.tgz#090bec8b05e39cba309747f1d588f04dbaf98db2"
integrity sha512-Px/TiLIznH7gEDlPXcUD4KnBusa6kR6ayRUVcnEAbreRIuhkqow/mun59BuRXwoYk7ZQOLW1ZM05ilIvK38hFw==
dependencies:
is-buffer "~2.0.3"
flatted@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/flatted/-/flatted-2.0.1.tgz#69e57caa8f0eacbc281d2e2cb458d46fdb449e08"
integrity sha512-a1hQMktqW9Nmqr5aktAux3JMNqaucxGcjtjWnZLHX7yyPCmlSV3M54nGYbqT8K+0GhF3NBgmJCc3ma+WOgX8Jg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
follow-redirects@0.0.3:
version "0.0.3"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-0.0.3.tgz#6ce67a24db1fe13f226c1171a72a7ef2b17b8f65"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-bOZ6JNsf4T8ibBFxpyp+8rF7j2U=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
underscore ""
Update dependency analytics-node to v3.4.0-beta.1
2019-12-17 00:06:35 +03:00
follow-redirects@1.5.10:
version "1.5.10"
resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.5.10.tgz#7b7a9f9aea2fdff36786a94ff643ed07f4ff5e2a"
integrity sha512-0V5l4Cizzvqt5D44aTXbFZz+FtyXV1vrDN6qrelxtfYQKW0KO0W2T/hkE8xvGa/540LkZlkaUjO4ailYTFtHVQ==
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
dependencies:
Update dependency analytics-node to v3.4.0-beta.1
2019-12-17 00:06:35 +03:00
debug "=3.1.0"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
for-in@^1.0.1, for-in@^1.0.2:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/for-in/-/for-in-1.0.2.tgz#81068d295a8142ec0ac726c6e2200c30fb6d5e80"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-gQaNKVqBQuwKxybG4iAMMPttXoA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
for-own@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/for-own/-/for-own-1.0.0.tgz#c63332f415cedc4b04dbfe70cf836494c53cb44b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-xjMy9BXO3EsE2/5wz4NklMU8tEs=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
for-in "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
forever-agent@~0.6.1:
version "0.6.1"
resolved "https://registry.yarnpkg.com/forever-agent/-/forever-agent-0.6.1.tgz#fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-+8cfDEGt6zf5bFd60e1C2P2sypE=
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
form-data@^2.3.1, form-data@^2.3.3:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "2.5.1"
resolved "https://registry.yarnpkg.com/form-data/-/form-data-2.5.1.tgz#f2cbec57b5e59e23716e128fe44d4e5dd23895f4"
integrity sha512-m21N3WOmEEURgk6B9GLOE4RuWOFf28Lhh9qGYeNlGq4VDXUlJy2th2slBNU8Gp8EzloYZOibZJ7t5ecIrFSjVA==
Lock file maintenance
2019-08-01 08:14:51 +03:00
dependencies:
asynckit "^0.4.0"
combined-stream "^1.0.6"
mime-types "^2.1.12"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
form-data@~2.3.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.3.3"
resolved "https://registry.yarnpkg.com/form-data/-/form-data-2.3.3.tgz#dcce52c05f644f298c6a7ab936bd724ceffbf3a6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-1lLKB2Mu3aGP1Q/2eCOx0fNbRMe7XdwktwOruhfqqd0rIJWwN4Dh+E3hrPSlDCXnSR7UtZ1N38rVXm+6+MEhJQ==
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
dependencies:
asynckit "^0.4.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
combined-stream "^1.0.6"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
mime-types "^2.1.12"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
formidable@^1.2.0:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
version "1.2.1"
resolved "https://registry.yarnpkg.com/formidable/-/formidable-1.2.1.tgz#70fb7ca0290ee6ff961090415f4b3df3d2082659"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Fs9VRguL0gqGHkXS5GQiMCr1VhZBxz0JnJs4JmMp/2jL18Fmbzvv7vOFRU+U8TBkHEE/CX1qDXzJplVULgsLeg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
forwarded@~0.1.2:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/forwarded/-/forwarded-0.1.2.tgz#98c23dab1175657b8c0573e8ceccd91b0ff18c84"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-mMI9qxF1ZXuMBXPozszZGw/xjIQ=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
fragment-cache@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/fragment-cache/-/fragment-cache-0.2.1.tgz#4290fad27f13e89be7f33799c6bc5a0abfff0d19"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-QpD60n8T6Jvn8zeZxrxaCr//DRk=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
map-cache "^0.2.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
fresh@0.5.2:
version "0.5.2"
resolved "https://registry.yarnpkg.com/fresh/-/fresh-0.5.2.tgz#3d8cadd90d976569fa835ab1f8e4b23a105605a7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-PYyt2Q2XZWn6g1qx+OSyOhBWBac=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
fs-constants@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/fs-constants/-/fs-constants-1.0.0.tgz#6be0de9be998ce16af8afc24497b9ee9b7ccd9ad"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Replaced zip tools with @tryghost/zip - Moved zipFolder to a new package - also exposing extract-zip from the new package - new package has the API pre-promisified - also uses @tryghost/extract-zip instead of extract-zip, which has bugfixes
2020-03-20 23:36:05 +03:00
fs-extra@9.0.0, fs-extra@^9.0.0:
Update dependency fs-extra to v9
2020-03-19 18:40:31 +03:00
version "9.0.0"
resolved "https://registry.yarnpkg.com/fs-extra/-/fs-extra-9.0.0.tgz#b6afc31036e247b2466dc99c29ae797d5d4580a3"
integrity sha512-pmEYSk3vYsG/bF651KPUXZ+hvjpgWYw/Gc7W9NFUe3ZVLczKKWIij3IKpOrQcdw4TILtibFslZ0UmR8Vvzig4g==
Update dependency fs-extra to v8
2019-07-02 03:42:42 +03:00
dependencies:
Update dependency fs-extra to v9
2020-03-19 18:40:31 +03:00
at-least-node "^1.0.0"
Update dependency fs-extra to v8
2019-07-02 03:42:42 +03:00
graceful-fs "^4.2.0"
Update dependency fs-extra to v9
2020-03-19 18:40:31 +03:00
jsonfile "^6.0.1"
universalify "^1.0.0"
Update dependency fs-extra to v8
2019-07-02 03:42:42 +03:00
fs-extra@^3.0.1:
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 10:51:54 +03:00
version "3.0.1"
resolved "https://registry.yarnpkg.com/fs-extra/-/fs-extra-3.0.1.tgz#3794f378c58b342ea7dbbb23095109c4b3b62291"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-N5TzeMWLNC6n27sjCVEJxLO2IpE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
graceful-fs "^4.1.2"
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 10:51:54 +03:00
jsonfile "^3.0.0"
universalify "^0.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency fs-extra to v9
2020-03-19 18:40:31 +03:00
fs-extra@^8.0.0:
version "8.1.0"
resolved "https://registry.yarnpkg.com/fs-extra/-/fs-extra-8.1.0.tgz#49d43c45a88cd9677668cb7be1b46efdb8d2e1c0"
integrity sha512-yhlQgA6mnOJUKOsRUFsgJdQCvkKhcz8tlZG5HBQfReYZy46OwLcY+Zia0mtdHsOo9y/hP+CxMN0TU9QxoOtG4g==
dependencies:
graceful-fs "^4.2.0"
jsonfile "^4.0.0"
universalify "^0.1.0"
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
fs-minipass@^1.2.5:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "1.2.7"
resolved "https://registry.yarnpkg.com/fs-minipass/-/fs-minipass-1.2.7.tgz#ccff8570841e7fe4265693da88936c55aed7f7c7"
integrity sha512-GWSSJGFy4e9GUeCcbIkED+bgAoFyj7XF1mV8rma3QW4NIqX9Kyx79N/PF61H5udOV3aY1IaMLs6pGbH71nlCTA==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
minipass "^2.6.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Update dependency sharp to v0.23.2
2019-11-04 03:34:39 +03:00
fs-minipass@^2.0.0:
Replaced image manipulation w/ @tryghost/image-transform (#11687) - moved image.manipulation lib to a new package called @tryghost/image-transform - new package has an updated API signature, so the method calls have changed but the underlying code is identical - removed the optional sharp dependency from Ghost, as this is now optionally required by the image-transform module
2020-03-25 20:33:03 +03:00
version "2.1.0"
resolved "https://registry.yarnpkg.com/fs-minipass/-/fs-minipass-2.1.0.tgz#7f5036fdbf12c63c169190cbe4199c852271f9fb"
integrity sha512-V/JgOLFCS+R6Vcq0slCuaeWEdNC3ouDlJMNIsacH2VtALiu9mV4LPrHc5cDl8k5aw6J8jwgWWpiTo5RYhmIzvg==
Update dependency sharp to v0.23.2
2019-11-04 03:34:39 +03:00
dependencies:
minipass "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
fs.realpath@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/fs.realpath/-/fs.realpath-1.0.0.tgz#1504ad2523158caa40db4a2787cb01411994ea4f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-FQStJSMVjKpA20onh8sBQRmU6k8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
fsevents@~2.1.1:
version "2.1.2"
resolved "https://registry.yarnpkg.com/fsevents/-/fsevents-2.1.2.tgz#4c0a1fb34bc68e543b4b82a9ec392bfbda840805"
integrity sha512-R4wDiBwZ0KzpgOWetKDug1FZcYhqYnUYKtfZYt4mD5SBz76q0KR4Q9o7GIPamsVPGmW3EYPPJ0dOOjvx32ldZA==
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
ftp@~0.3.10:
version "0.3.10"
resolved "https://registry.yarnpkg.com/ftp/-/ftp-0.3.10.tgz#9197d861ad8142f3e63d5a83bfe4c59f7330885d"
integrity sha1-kZfYYa2BQvPmPVqDv+TFn3MwiF0=
dependencies:
readable-stream "1.1.x"
xregexp "2.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
function-bind@^1.1.1:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/function-bind/-/function-bind-1.1.1.tgz#a56899d3ea3c9bab874bb9773b7c5ede92f4895d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-yIovAzMX49sF8Yl58fSCWJ5svSLuaibPxXQJFLmBObTuCr0Mf1KiPopGM9NiFjiYBCbfaa2Fh6breQ6ANVTI0A==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
functional-red-black-tree@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/functional-red-black-tree/-/functional-red-black-tree-1.0.1.tgz#1b0ab3bd553b2a0d6399d29c0e3ea0b252078327"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-GwqzvVU7Kg1jmdKcDj6gslIHgyc=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
gauge@~2.7.3:
🙀 Image field naming & new img_url helper (#8364) * 🙀 change database schema for images - rename user/post/tag images - contains all the required changes from the schema change * Refactor helper/meta data - rename cover to cover_image - also rename default settings to match the pattern - rename image to profile_image for user - rename image to feature_image for tags/posts * {{image}} >>> {{img_url}} - rename - change the functionality - attr is required - e.g. {{img_url feature_image}} * gscan 1.0.0 - update yarn.lock * Update casper reference: 1.0-changes - see https://github.com/TryGhost/Casper/commit/5487b4da8d2ad7c6a6d003a3a0ee1a860e0de34d
2017-04-24 20:21:47 +03:00
version "2.7.4"
resolved "https://registry.yarnpkg.com/gauge/-/gauge-2.7.4.tgz#2c03405c7538c39d7eb37b317022e325fb018bf7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-LANAXHU4w51+s3sxcCLjJfsBi/c=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
aproba "^1.0.3"
console-control-strings "^1.0.0"
has-unicode "^2.0.0"
object-assign "^4.1.0"
signal-exit "^3.0.0"
string-width "^1.0.1"
strip-ansi "^3.0.1"
wide-align "^1.1.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
gaze@^1.1.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/gaze/-/gaze-1.1.3.tgz#c441733e13b927ac8c0ff0b4c3b033f28812924a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-BRdNm8hbWzFzWHERTrejLqwHDfS4GibPoq5wjTPIoJHoBtKGPg3xAFfxmM+9ztbXelxcf2hwQcaz1PtmFeue8g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
globule "^1.0.0"
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
gelf-stream@^1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/gelf-stream/-/gelf-stream-1.1.1.tgz#9cea9b6386ac301c741838ca3cb91e66dbfbf669"
integrity sha1-nOqbY4asMBx0GDjKPLkeZtv79mk=
dependencies:
gelfling "^0.3.0"
gelfling@^0.3.0:
version "0.3.1"
resolved "https://registry.yarnpkg.com/gelfling/-/gelfling-0.3.1.tgz#336a98f81510f9ae0af2a494e17468a116a9dc04"
integrity sha1-M2qY+BUQ+a4K8qSU4XRooRap3AQ=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
generate-object-property@^1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/generate-object-property/-/generate-object-property-1.2.0.tgz#9c0e1c40308ce804f4783618b937fa88f99d50d0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-nA4cQDCM6AT0eDYYuTf6iPmdUNA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
is-property "^1.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
get-caller-file@^2.0.1:
version "2.0.5"
resolved "https://registry.yarnpkg.com/get-caller-file/-/get-caller-file-2.0.5.tgz#4f94412a82db32f36e3b0b9741f8a97feb031f7e"
integrity sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
get-stdin@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/get-stdin/-/get-stdin-4.0.1.tgz#b968c6b0a04384324902e8bf1a5df32579a450fe"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-uWjGsKBDhDJJAui/Gl3zJXmkUP4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
get-stream@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/get-stream/-/get-stream-3.0.0.tgz#8e943d1358dc37555054ecbe2edb05aa174ede14"
integrity sha1-jpQ9E1jcN1VQVOy+LtsFqhdO3hQ=
Removed unused release-utils dependency no issue - this is no longer needed because we moved the main release code out
2020-04-03 16:25:28 +03:00
get-stream@^4.1.0:
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
version "4.1.0"
resolved "https://registry.yarnpkg.com/get-stream/-/get-stream-4.1.0.tgz#c1b255575f3dc21d59bfc79cd3d2b46b1c3a54b5"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-GMat4EJ5161kIy2HevLlr4luNjBgvmj413KaQA7jt4V8B4RDsfpHk7WQ9GVqfYyyx8OS/L66Kox+rJRNklLK7w==
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
dependencies:
pump "^3.0.0"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
get-stream@^5.0.0, get-stream@^5.1.0:
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
version "5.1.0"
resolved "https://registry.yarnpkg.com/get-stream/-/get-stream-5.1.0.tgz#01203cdc92597f9b909067c3e656cc1f4d3c4dc9"
integrity sha512-EXr1FOzrzTfGeL0gQdeFEvOMm2mzMOglyiOXSTpPC+iAjAKftbr3jpCMWynogwYnM+eSj9sHGc6wjIcDvYiygw==
dependencies:
pump "^3.0.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
get-uri@^2.0.0:
version "2.0.4"
resolved "https://registry.yarnpkg.com/get-uri/-/get-uri-2.0.4.tgz#d4937ab819e218d4cb5ae18e4f5962bef169cc6a"
integrity sha512-v7LT/s8kVjs+Tx0ykk1I+H/rbpzkHvuIq87LmeXptcf5sNWm9uQiwjNAt94SJPA1zOlCntmnOlJvVWKmzsxG8Q==
dependencies:
data-uri-to-buffer "1"
debug "2"
extend "~3.0.2"
file-uri-to-path "1"
ftp "~0.3.10"
readable-stream "2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
get-value@^2.0.3, get-value@^2.0.6:
version "2.0.6"
resolved "https://registry.yarnpkg.com/get-value/-/get-value-2.0.6.tgz#dc15ca1c672387ca76bd37ac0a395ba2042a2c28"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-3BXKHGcjh8p2vTesCjlbogQqLCg=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
getobject@~0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/getobject/-/getobject-0.1.0.tgz#047a449789fa160d018f5486ed91320b6ec7885c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-BHpEl4n6Fg0Bj1SG7ZEyC27HiFw=
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
getopts@2.2.4:
version "2.2.4"
resolved "https://registry.yarnpkg.com/getopts/-/getopts-2.2.4.tgz#3137fe8a5fddf304904059a851bdc1c22f0f54fb"
integrity sha512-Rz7DGyomZjrenu9Jx4qmzdlvJgvrEFHXHvjK0FcZtcTC1U5FmES7OdZHUwMuSnEE6QvBvwse1JODKj7TgbSEjQ==
Update dependency knex to v0.19.3
2019-09-02 03:32:28 +03:00
getopts@2.2.5:
version "2.2.5"
resolved "https://registry.yarnpkg.com/getopts/-/getopts-2.2.5.tgz#67a0fe471cacb9c687d817cab6450b96dde8313b"
integrity sha512-9jb7AW5p3in+IiJWhQiZmmwkpLaR/ccTWdWQCtZM66HJcHHLegowh4q4tSD7gouUyeNvFWRavfK9GXosQHDpFA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
getpass@^0.1.1:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "0.1.7"
resolved "https://registry.yarnpkg.com/getpass/-/getpass-0.1.7.tgz#5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Xv+OPmhNVprkyysSgmBOi6YhSfo=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
assert-plus "^1.0.0"
Added new @tryghost/errors package - this will replace common.errors throughout the codebase - allows us to break more pieces of ghost out into modules as it's a common dependency
2020-03-25 13:26:51 +03:00
ghost-ignition@4.1.0, ghost-ignition@^4.0.0, ghost-ignition@^4.1.0:
Update dependency @tryghost/social-urls to v0.1.6
2020-03-16 09:14:49 +03:00
version "4.1.0"
resolved "https://registry.yarnpkg.com/ghost-ignition/-/ghost-ignition-4.1.0.tgz#44ac9dc8873606207f81a652a705f383714c2f07"
integrity sha512-d3hfUE1qey4S1sdjayWcbsYCr77joc7KcM4Zrhol0vdR/anGvR6h6Z529MI42VJHr38h6x0/PaQ/mjrlOey7XQ==
🐛 Fixed errors for missing sharp install closes #10421
2019-02-05 12:13:54 +03:00
dependencies:
bunyan "1.8.12"
bunyan-loggly "^1.3.1"
caller "1.0.1"
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
debug "^4.0.0"
🐛 Fixed errors for missing sharp install closes #10421
2019-02-05 12:13:54 +03:00
find-root "1.1.0"
fs-extra "^3.0.1"
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
gelf-stream "^1.1.1"
🐛 Fixed errors for missing sharp install closes #10421
2019-02-05 12:13:54 +03:00
json-stringify-safe "^5.0.1"
lodash "^4.16.4"
moment "^2.15.2"
nconf "^0.10.0"
prettyjson "^1.1.3"
uuid "^3.0.0"
Update dependency @tryghost/social-urls to v0.1.6
2020-03-16 09:14:49 +03:00
ghost-ignition@^2.9.6:
version "2.9.6"
resolved "https://registry.yarnpkg.com/ghost-ignition/-/ghost-ignition-2.9.6.tgz#cc8358f0a356bae490e5abeca3c3bda8383352fe"
integrity sha512-4C/z6PZOxp8xjqcHR+QqYBjt0T7IRdfUwHcN86gKNXMhybaWwsH7JDyfnxLfgDfQDunx7wTHmFiSo3UT//f7MQ==
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
dependencies:
bunyan "1.8.12"
bunyan-loggly "^1.3.1"
caller "1.0.1"
Update dependency @tryghost/social-urls to v0.1.6
2020-03-16 09:14:49 +03:00
debug "^2.6.9"
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
find-root "1.1.0"
fs-extra "^3.0.1"
json-stringify-safe "^5.0.1"
lodash "^4.16.4"
moment "^2.15.2"
nconf "^0.10.0"
prettyjson "^1.1.3"
uuid "^3.0.0"
Update dependency @tryghost/social-urls to v0.1.6
2020-03-16 09:14:49 +03:00
ghost-ignition@^3.0.4, ghost-ignition@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/ghost-ignition/-/ghost-ignition-3.1.0.tgz#4a0d7f0a15e54fbc0e16d398da62ff68737e4e23"
integrity sha512-ae0r/yBJDo9SkeLfy0ecrHVqO0gt9l07wiCOWmdzdvbmoU24AB881PjymnM/DLP9SY6E33mLYtT8K3ximgieLg==
Bump dependencies no issue - ghost-ignition@2.9.3 - simple-html-tokenizer@0.5.3
2018-06-06 15:00:43 +03:00
dependencies:
bunyan "1.8.12"
bunyan-loggly "^1.3.1"
caller "1.0.1"
Update dependency @tryghost/social-urls to v0.1.6
2020-03-16 09:14:49 +03:00
debug "^4.0.0"
Bump dependencies no issue - ghost-ignition@2.9.3 - simple-html-tokenizer@0.5.3
2018-06-06 15:00:43 +03:00
find-root "1.1.0"
fs-extra "^3.0.1"
Update dependency @tryghost/social-urls to v0.1.6
2020-03-16 09:14:49 +03:00
gelf-stream "^1.1.1"
Bump dependencies no issue - ghost-ignition@2.9.3 - simple-html-tokenizer@0.5.3
2018-06-06 15:00:43 +03:00
json-stringify-safe "^5.0.1"
lodash "^4.16.4"
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
moment "^2.15.2"
nconf "^0.10.0"
prettyjson "^1.1.3"
uuid "^3.0.0"
Updated ghost-storage-base dependency no issue
2020-03-03 12:56:40 +03:00
ghost-storage-base@0.0.4:
version "0.0.4"
resolved "https://registry.yarnpkg.com/ghost-storage-base/-/ghost-storage-base-0.0.4.tgz#c5badcab13d1763febc8eb3b293e1eb3a5e511e1"
integrity sha512-OWL/ONgP24r5s64eH25u8Nb36+MkQALvaeANByaEZlVYXJGkbt+lX+KMmkWMaC9bVpMRTc+ZZE1q/V3V0B0PXQ==
😱 🎨 Refactor storage adapter (#8229) refs #7687 There are four main changes in this PR: we have outsourced the base storage adapter to npm, because for storage developers it's annoying to inherit from a script within Ghost we hacked theme storage handling into the default local storage adapter - this was reverted, instead we have added a static theme storage here use classes instead of prototyping optimise the storage adapter in general - everything is explained in each commit ---- * rename local-file-store to LocalFileStorage I would like to keep the name pattern i have used for scheduling. If a file is a class, the file name reflects the class name. We can discuss this, if concerns are raised. * Transform LocalFileStorage to class and inherit from new base - inherit from npm ghost-storage-base - rewrite to class - no further refactoring, happens later * Rename core/test/unit/storage/local-file-store_spec.js -> core/test/unit/storage/LocalFileStorage_spec.js * Fix wrong require in core/test/unit/storage/LocalFileStorage_spec.js * remove base storage and test - see https://github.com/kirrg001/Ghost-Storage-Base - the test has moved to this repo as well * Use npm ghost-storage-base in storage/index.js * remove the concept of getStorage('themes') This concept was added when we added themes as a feature. Back then, we have changed the local storage adapter to support images and themes. This has added some hacks into the local storage adapters. We want to revert this change and add a simple static theme storage. Will adapt the api/themes layer in the next commits. * Revert LocalFileStorage - revert serve - revert delete * add storagePath as property to LocalFileStorage - define one property which holds the storage path - could be considered to pass from outside, but found that not helpful, as other storage adapters do not need this property - IMPORTANT: save has no longer a targetDir option, because this was used to pass the alternative theme storage path - IMPORTANT: exists has now an alternative targetDir, this makes sense, because - you can either ask the storage exists('my-file') and it will look in the base storage path - or you pass a specific path where to look exists('my-file', /path/to/dir) * LocalFileStorage: get rid of store pattern - getUniqueFileName(THIS) - this doesn't make sense, instances always have access to this by default * Add static theme storage - inherits from the local file storage, because they both operate on the file system - IMPORTANT: added a TODO to consider a merge of themes/loader and themes/storage - but will be definitely not part of this PR * Use new static theme storage in api/themes - storage functions are simplified! * Add https://github.com/kirrg001/Ghost-Storage-Base as dependency - tarball for now, as i am still testing - will release if PR review get's accepted * Adapt tests and jscs/jshint * 🐛 fix storage.read in favicon utility - wrong implementation of error handling * 🎨 optimise error messages for custom storage adapter errors * little renaming in the storage utlity - purpose is to have access to the custom storage instance and to the custom storage class - see next commit why * optimise instanceof base storage - instanceof is always tricky in javascript - if multiple modules exist, it can happen that instanceof is false * fix getTargetDir - the importer uses the `targetDir` option to ensure that images land in the correct folder * ghost-storage-base@0.0.1 package.json dependency
2017-04-05 17:10:34 +03:00
dependencies:
Updated ghost-storage-base dependency no issue
2020-03-03 12:56:40 +03:00
moment "2.24.0"
😱 🎨 Refactor storage adapter (#8229) refs #7687 There are four main changes in this PR: we have outsourced the base storage adapter to npm, because for storage developers it's annoying to inherit from a script within Ghost we hacked theme storage handling into the default local storage adapter - this was reverted, instead we have added a static theme storage here use classes instead of prototyping optimise the storage adapter in general - everything is explained in each commit ---- * rename local-file-store to LocalFileStorage I would like to keep the name pattern i have used for scheduling. If a file is a class, the file name reflects the class name. We can discuss this, if concerns are raised. * Transform LocalFileStorage to class and inherit from new base - inherit from npm ghost-storage-base - rewrite to class - no further refactoring, happens later * Rename core/test/unit/storage/local-file-store_spec.js -> core/test/unit/storage/LocalFileStorage_spec.js * Fix wrong require in core/test/unit/storage/LocalFileStorage_spec.js * remove base storage and test - see https://github.com/kirrg001/Ghost-Storage-Base - the test has moved to this repo as well * Use npm ghost-storage-base in storage/index.js * remove the concept of getStorage('themes') This concept was added when we added themes as a feature. Back then, we have changed the local storage adapter to support images and themes. This has added some hacks into the local storage adapters. We want to revert this change and add a simple static theme storage. Will adapt the api/themes layer in the next commits. * Revert LocalFileStorage - revert serve - revert delete * add storagePath as property to LocalFileStorage - define one property which holds the storage path - could be considered to pass from outside, but found that not helpful, as other storage adapters do not need this property - IMPORTANT: save has no longer a targetDir option, because this was used to pass the alternative theme storage path - IMPORTANT: exists has now an alternative targetDir, this makes sense, because - you can either ask the storage exists('my-file') and it will look in the base storage path - or you pass a specific path where to look exists('my-file', /path/to/dir) * LocalFileStorage: get rid of store pattern - getUniqueFileName(THIS) - this doesn't make sense, instances always have access to this by default * Add static theme storage - inherits from the local file storage, because they both operate on the file system - IMPORTANT: added a TODO to consider a merge of themes/loader and themes/storage - but will be definitely not part of this PR * Use new static theme storage in api/themes - storage functions are simplified! * Add https://github.com/kirrg001/Ghost-Storage-Base as dependency - tarball for now, as i am still testing - will release if PR review get's accepted * Adapt tests and jscs/jshint * 🐛 fix storage.read in favicon utility - wrong implementation of error handling * 🎨 optimise error messages for custom storage adapter errors * little renaming in the storage utlity - purpose is to have access to the custom storage instance and to the custom storage class - see next commit why * optimise instanceof base storage - instanceof is always tricky in javascript - if multiple modules exist, it can happen that instanceof is false * fix getTargetDir - the importer uses the `targetDir` option to ensure that images land in the correct folder * ghost-storage-base@0.0.1 package.json dependency
2017-04-05 17:10:34 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
github-from-package@0.0.0:
version "0.0.0"
resolved "https://registry.yarnpkg.com/github-from-package/-/github-from-package-0.0.0.tgz#97fb5d96bfde8973313f20e8288ef9a167fa64ce"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-l/tdlr/eiXMxPyDoKI75oWf6ZM4=
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
glob-parent@^5.0.0, glob-parent@~5.1.0:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "5.1.0"
resolved "https://registry.yarnpkg.com/glob-parent/-/glob-parent-5.1.0.tgz#5f4c1d1e748d30cd73ad2944b3577a81b081e8c2"
integrity sha512-qjtRgnIVmOfnKUE3NJAQEdk+lKrxfw8t5ke7SXtfMTHcjsBfOfWXCQfdb30zfDoZQ2IRSIiidmjtbHZPZ++Ihw==
Update Test & linting packages
2019-08-16 22:07:23 +03:00
dependencies:
is-glob "^4.0.1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
glob@7.1.3:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
version "7.1.3"
resolved "https://registry.yarnpkg.com/glob/-/glob-7.1.3.tgz#3960832d3f1574108342dafd3a67b332c0969df1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-vcfuiIxogLV4DlGBHIUOwI0IbrJ8HWPc4MU7HzviGeNho/UJDfi6B5p3sHeWIQ0KGIU0Jpxi5ZHxemQfLkkAwQ==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
dependencies:
fs.realpath "^1.0.0"
inflight "^1.0.4"
inherits "2"
minimatch "^3.0.4"
once "^1.3.0"
path-is-absolute "^1.0.0"
Update dependency glob to v7.1.6
2019-11-11 03:21:08 +03:00
glob@7.1.6:
version "7.1.6"
resolved "https://registry.yarnpkg.com/glob/-/glob-7.1.6.tgz#141f33b81a7c2492e125594307480c46679278a6"
integrity sha512-LwaxwyZ72Lk7vZINtNNrywX0ZuLyStrdDtabefZKAY5ZGJhVtgdznluResxNmPitE0SAO+O26sWTHeKSI2wMBA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update mocha to version 3.3.0 🚀 (#8376) * chore(package): update mocha to version 3.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-05-02 14:33:47 +03:00
fs.realpath "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
inflight "^1.0.4"
inherits "2"
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 21:32:03 +03:00
minimatch "^3.0.4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
once "^1.3.0"
path-is-absolute "^1.0.0"
Update mocha to version 3.3.0 🚀 (#8376) * chore(package): update mocha to version 3.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-05-02 14:33:47 +03:00
glob@^6.0.1:
version "6.0.4"
resolved "https://registry.yarnpkg.com/glob/-/glob-6.0.4.tgz#0f08860f6a155127b2fadd4f9ce24b1aab6e4d22"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-DwiGD2oVUSey+t1PnOJLGqtuTSI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
inflight "^1.0.4"
inherits "2"
Update mocha to version 3.3.0 🚀 (#8376) * chore(package): update mocha to version 3.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-05-02 14:33:47 +03:00
minimatch "2 || 3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
once "^1.3.0"
path-is-absolute "^1.0.0"
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
glob@^7.0.0, glob@^7.0.5, glob@^7.1.3, glob@^7.1.4, glob@~7.1.1:
Update dependency glob to v7.1.5
2019-10-28 03:35:00 +03:00
version "7.1.4"
resolved "https://registry.yarnpkg.com/glob/-/glob-7.1.4.tgz#aa608a2f6c577ad357e1ae5a5c26d9a8d1969255"
integrity sha512-hkLPepehmnKk41pUGm3sYxoFs/umurYfYJCerbXEyFIWcAzvpipAgVkBqqT9RBKMGjnq6kMuyYwha6csxbiM1A==
dependencies:
fs.realpath "^1.0.0"
inflight "^1.0.4"
inherits "2"
minimatch "^3.0.4"
once "^1.3.0"
path-is-absolute "^1.0.0"
Update dependency glob to v7
2019-07-04 07:39:11 +03:00
glob@~5.0.0:
version "5.0.15"
resolved "https://registry.yarnpkg.com/glob/-/glob-5.0.15.tgz#1bc936b9e02f4a603fcc222ecf7633d30b8b93b1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-G8k2ueAvSmA/zCIuz3Yz0wuLk7E=
Update dependency glob to v7
2019-07-04 07:39:11 +03:00
dependencies:
inflight "^1.0.4"
inherits "2"
minimatch "2 || 3"
once "^1.3.0"
path-is-absolute "^1.0.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
glob@~7.0.0:
version "7.0.6"
resolved "https://registry.yarnpkg.com/glob/-/glob-7.0.6.tgz#211bafaf49e525b8cd93260d14ab136152b3f57a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IRuvr0nlJbjNkyYNFKsTYVKz9Xo=
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
dependencies:
fs.realpath "^1.0.0"
inflight "^1.0.4"
inherits "2"
minimatch "^3.0.2"
once "^1.3.0"
path-is-absolute "^1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
global-modules@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/global-modules/-/global-modules-1.0.0.tgz#6d770f0eb523ac78164d72b5e71a8877265cc3ea"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-sKzpEkf11GpOFuw0Zzjzmt4B4UZwjOcG757PPvrfhxcLFbq0wpsgpOqxpxtxFiCG4DtG93M6XRVbF2oGdev7bg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
global-prefix "^1.0.1"
is-windows "^1.0.1"
resolve-dir "^1.0.0"
global-prefix@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/global-prefix/-/global-prefix-1.0.2.tgz#dbf743c6c14992593c655568cb66ed32c0122ebe"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-2/dDxsFJklk8ZVVoy2btMsASLr4=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
expand-tilde "^2.0.2"
homedir-polyfill "^1.0.1"
ini "^1.3.4"
is-windows "^1.0.1"
which "^1.2.14"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
globals@^12.1.0:
version "12.3.0"
resolved "https://registry.yarnpkg.com/globals/-/globals-12.3.0.tgz#1e564ee5c4dded2ab098b0f88f24702a3c56be13"
integrity sha512-wAfjdLgFsPZsklLJvOBUBmzYE8/CwhEqSBEMRXA3qxIiNtyqvjYurAtIfDh6chlEPUfmTY3MnZh5Hfh4q0UlIw==
dependencies:
type-fest "^0.8.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
globule@^1.0.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.2.1"
resolved "https://registry.yarnpkg.com/globule/-/globule-1.2.1.tgz#5dffb1b191f22d20797a9369b49eab4e9839696d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-g7QtgWF4uYSL5/dn71WxubOrS7JVGCnFPEnoeChJmBnyR9Mw8nGoEwOgJL/RC2Te0WhbsEUCejfH8SZNJ+adYQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
glob "~7.1.1"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
lodash "~4.17.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
minimatch "~3.0.2"
✨ Added capture of geolocation during member signup/signin no issue - updated `@tryghost/members-api` which now includes geolocation lookup from IP address during member signup and signin when geolocation data doesn't already exist
2020-02-27 13:46:37 +03:00
got@9.6.0, got@^9.6.0:
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
version "9.6.0"
resolved "https://registry.yarnpkg.com/got/-/got-9.6.0.tgz#edf45e7d67f99545705de1f7bbeeeb121765ed85"
integrity sha512-R7eWptXuGYxwijs0eV+v3o6+XH1IqVK8dJOEecQfTmkncw9AV4dcw/Dhxi8MdlqPthxxpZyizMzyg8RTmEsG+Q==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
"@sindresorhus/is" "^0.14.0"
"@szmarczak/http-timer" "^1.1.2"
cacheable-request "^6.0.0"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
decompress-response "^3.3.0"
duplexer3 "^0.1.4"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
get-stream "^4.1.0"
lowercase-keys "^1.0.1"
mimic-response "^1.0.1"
p-cancelable "^1.0.0"
to-readable-stream "^1.0.0"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
url-parse-lax "^3.0.0"
Update metascraper to v5.11.8
2020-04-06 03:17:00 +03:00
got@~10.7.0:
version "10.7.0"
resolved "https://registry.yarnpkg.com/got/-/got-10.7.0.tgz#62889dbcd6cca32cd6a154cc2d0c6895121d091f"
integrity sha512-aWTDeNw9g+XqEZNcTjMMZSy7B7yE9toWOFYip7ofFTLleJhvZwUxxTxkTpKvF+p1SAA4VHmuEy7PiHTHyq8tJg==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
dependencies:
"@sindresorhus/is" "^2.0.0"
"@szmarczak/http-timer" "^4.0.0"
"@types/cacheable-request" "^6.0.1"
cacheable-lookup "^2.0.0"
cacheable-request "^7.0.1"
decompress-response "^5.0.0"
duplexer3 "^0.1.4"
get-stream "^5.0.0"
lowercase-keys "^2.0.0"
mimic-response "^2.1.0"
p-cancelable "^2.0.0"
p-event "^4.0.0"
responselike "^2.0.0"
to-readable-stream "^2.0.0"
type-fest "^0.10.0"
Update dependency gscan to v3.4.1
2020-04-06 20:10:36 +03:00
graceful-fs@^4.1.0, graceful-fs@^4.1.2, graceful-fs@^4.1.6, graceful-fs@^4.2.0:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "4.2.2"
resolved "https://registry.yarnpkg.com/graceful-fs/-/graceful-fs-4.2.2.tgz#6f0952605d0140c1cfdb138ed005775b92d67b02"
integrity sha512-IItsdsea19BoLC7ELy13q1iJFNmd7ofZH5+X/pJr90/nRoPEX0DJo1dHDbgtYWOhJhcCgMDTOw84RZ72q6lB+Q==
Update dependency gscan to v2.6.2
2019-07-02 12:09:26 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
growl@1.10.5:
version "1.10.5"
resolved "https://registry.yarnpkg.com/growl/-/growl-1.10.5.tgz#f2735dc2283674fa67478b10181059355c369e5e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-qBr4OuELkhPenW6goKVXiv47US3clb3/IbuWF9KNKEijAy9oeHxU9IgzjvJhHkUzhaj7rOUD7+YGWqUjLp5oSA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
grunt-bg-shell@2.3.3:
version "2.3.3"
resolved "https://registry.yarnpkg.com/grunt-bg-shell/-/grunt-bg-shell-2.3.3.tgz#139ae8f9c76f68a0db4ee9dbbd4ec825b9227fff"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-E5ro+cdvaKDbTunbvU7IJbkif/8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
grunt-cli@~1.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.2.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/grunt-cli/-/grunt-cli-1.2.0.tgz#562b119ebb069ddb464ace2845501be97b35b6a8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-VisRnrsGndtGSs4oRVAb6Xs1tqg=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
findup-sync "~0.3.0"
grunt-known-options "~1.1.0"
nopt "~3.0.6"
resolve "~1.1.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
grunt-contrib-clean@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-clean/-/grunt-contrib-clean-2.0.0.tgz#3be7ca480da4b740aa5e9d863e2f7e8b24f8a68b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-g5ZD3ORk6gMa5ugZosLDQl3dZO7cI3R14U75hTM+dVLVxdMNJCPVmwf9OUt4v4eWgpKKWWoVK9DZc1amJp4nQw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
async "^2.6.1"
rimraf "^2.6.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
grunt-contrib-compress@1.6.0:
version "1.6.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-compress/-/grunt-contrib-compress-1.6.0.tgz#9708885c738a97a12c5f3072dc97dbc31b4121db"
integrity sha512-wIFuvk+/Ny4E+OgEfJYFZgoH7KcU/nnNFbYasB7gRvrcRyW6vmTp3Pj8a4rFSR3tbFMjrGvTUszdO6fgLajgZQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 21:56:05 +03:00
archiver "^1.3.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
chalk "^1.1.1"
lodash "^4.7.0"
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 21:56:05 +03:00
pretty-bytes "^4.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
stream-buffers "^2.1.0"
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 21:56:05 +03:00
optionalDependencies:
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
iltorb "^2.4.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
grunt-contrib-copy@1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-copy/-/grunt-contrib-copy-1.0.0.tgz#7060c6581e904b8ab0d00f076e0a8f6e3e7c3573"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-cGDGWB6QS4qw0A8HbgqPbj58NXM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
chalk "^1.1.1"
file-sync-cmp "^0.1.0"
Pin dependency grunt-contrib-symlink to 1.0.0
2019-07-02 12:05:35 +03:00
grunt-contrib-symlink@1.0.0:
✨ Added pre-commit hook to handle submodules (#8302) refs #8235 Usage: - for existing development setups: `grunt symlink` (will create the pre-commit symlink) - for fresh development setups: `npm run init` (symlinking happens as part of the typical set up) - ✨ Added pre-commit hook to handle submodules - Checks to see if there are any submodules about to be committed - Output matches closely to `git st` to make it easy to read - Requires interaction from the committer to accept that this really should be committed - ✨ Use grunt symlink to register githooks - Grunt symlink will make a link to the pre-commit hook - It ONLY does this if there isn't already a pre-commit hook, so won't overwrite anything - It does this as part of npm run init, not grunt init, because a release repo would NEVER want this - This is a dev tool, that configures the repo for development
2017-04-13 10:26:48 +03:00
version "1.0.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-symlink/-/grunt-contrib-symlink-1.0.0.tgz#c83616c035711a6c0062a2810cf1c77ffc6bed2b"
Pin dependency grunt-contrib-symlink to 1.0.0
2019-07-02 12:05:35 +03:00
integrity sha1-yDYWwDVxGmwAYqKBDPHHf/xr7Ss=
✨ Added pre-commit hook to handle submodules (#8302) refs #8235 Usage: - for existing development setups: `grunt symlink` (will create the pre-commit symlink) - for fresh development setups: `npm run init` (symlinking happens as part of the typical set up) - ✨ Added pre-commit hook to handle submodules - Checks to see if there are any submodules about to be committed - Output matches closely to `git st` to make it easy to read - Requires interaction from the committer to accept that this really should be committed - ✨ Use grunt symlink to register githooks - Grunt symlink will make a link to the pre-commit hook - It ONLY does this if there isn't already a pre-commit hook, so won't overwrite anything - It does this as part of npm run init, not grunt init, because a release repo would NEVER want this - This is a dev tool, that configures the repo for development
2017-04-13 10:26:48 +03:00
Update Build Tool
2019-07-02 03:34:50 +03:00
grunt-contrib-uglify@4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/grunt-contrib-uglify/-/grunt-contrib-uglify-4.0.1.tgz#68a7b62fa045ce8e2c7574d1bdcd3b96b8a686b1"
integrity sha512-dwf8/+4uW1+7pH72WButOEnzErPGmtUvc8p08B0eQS/6ON0WdeQu0+WFeafaPTbbY1GqtS25lsHWaDeiTQNWPg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
chalk "^2.4.1"
maxmin "^2.1.0"
Update Build Tool
2019-07-02 03:34:50 +03:00
uglify-js "^3.5.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
uri-path "^1.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
grunt-contrib-watch@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-watch/-/grunt-contrib-watch-1.1.0.tgz#c143ca5b824b288a024b856639a5345aedb78ed4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-yGweN+0DW5yM+oo58fRu/XIRrPcn3r4tQx+nL7eMRwjpvk+rQY6R8o94BPK0i2UhTg9FN21hS+m8vR8v9vXfeg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
async "^2.6.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
gaze "^1.1.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
lodash "^4.17.10"
tiny-lr "^1.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
grunt-express-server@0.5.4:
version "0.5.4"
resolved "https://registry.yarnpkg.com/grunt-express-server/-/grunt-express-server-0.5.4.tgz#8ce79c335c6cbb9ef50ee1dfaa61942028f43aeb"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Q9sTDOwxC46uviL1/LSXFflTMv+/WnwANtzxD7hwnEXaej79LS1AUZlWc/O5P+CWjKG69/1xJFn+CVP94fOQ6Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
grunt-known-options@~1.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/grunt-known-options/-/grunt-known-options-1.1.1.tgz#6cc088107bd0219dc5d3e57d91923f469059804d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-cHwsLqoighpu7TuYj5RonnEuxGVFnztcUqTqp5rXFGYL4OuPFofwC4Ycg7n9fYwvK6F5WbYgeVOwph9Crs2fsQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
grunt-legacy-log-utils@~2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/grunt-legacy-log-utils/-/grunt-legacy-log-utils-2.0.1.tgz#d2f442c7c0150065d9004b08fd7410d37519194e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-o7uHyO/J+i2tXG8r2bZNlVk20vlIFJ9IEYyHMCQGfWYru8Jv3wTqKZzvV30YW9rWEjq0eP3cflQ1qWojIe9VFA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
chalk "~2.4.1"
lodash "~4.17.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
grunt-legacy-log@~2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/grunt-legacy-log/-/grunt-legacy-log-2.0.0.tgz#c8cd2c6c81a4465b9bbf2d874d963fef7a59ffb9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-1m3+5QvDYfR1ltr8hjiaiNjddxGdQWcH0rw1iKKiQnF0+xtgTazirSTGu68RchPyh1OBng1bBUjLmX8q9NpoCw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
colors "~1.1.2"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
grunt-legacy-log-utils "~2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
hooker "~0.2.3"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
lodash "~4.17.5"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
grunt-legacy-util@~1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/grunt-legacy-util/-/grunt-legacy-util-1.1.1.tgz#e10624e7c86034e5b870c8a8616743f0a0845e42"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-9zyA29w/fBe6BIfjGENndwoe1Uy31BIXxTH3s8mga0Z5Bz2Sp4UCjkeyv2tI449ymkx3x26B+46FV4fXEddl5A==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
async "~1.5.2"
exit "~0.1.1"
getobject "~0.1.0"
hooker "~0.2.3"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
lodash "~4.17.10"
underscore.string "~3.3.4"
which "~1.3.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated grunt-mocha-cli dependency no issue
2020-03-30 12:52:48 +03:00
grunt-mocha-cli@6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/grunt-mocha-cli/-/grunt-mocha-cli-6.0.0.tgz#4066e086822928c5e17c1a81ea2ad5d0c0e31fc3"
integrity sha512-kLTkAgSwommFzaiveTdMzYC+UR/wwrLoXZEu5F01XHF1aFvZGVwfCqnJMLEnJXNL7fRmjo6FgNYUUZMxtcEDxg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Updated grunt-mocha-cli dependency no issue
2020-03-30 12:52:48 +03:00
mocha "^7.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
grunt-shell@3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/grunt-shell/-/grunt-shell-3.0.1.tgz#24e783901543c7269980d534902bedfb94e7ec9f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-C8eR4frw/NmIFIwSvzSLS4wOQBUzC+z6QhrKPzwt/tlaIqlzH35i/O2MggVOBj2Sh1tbaAqpASWxGiGsi4JMIQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
chalk "^2.4.1"
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 21:45:29 +03:00
npm-run-path "^2.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
strip-ansi "^5.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
grunt-subgrunt@1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/grunt-subgrunt/-/grunt-subgrunt-1.3.0.tgz#0b77c057a7b22ba15ef5977b7c5992a75f5e4181"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-rioBokPl1wlwjvTIAlisB/QE1vZpMtIE8S4T1hxH8fGESriajeLqBr8a9qh7nTAI+M2/yWjGGrQLJtL/VGvPSA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
async "^2.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
glob "^7.0.0"
grunt-update-submodules@0.4.1:
version "0.4.1"
resolved "https://registry.yarnpkg.com/grunt-update-submodules/-/grunt-update-submodules-0.4.1.tgz#46c485fe6413cc0bdd6988aa2803c4e7d997c366"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-RsSF/mQTzAvdaYiqKAPE59mXw2Y=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency grunt to v1.1.0
2020-03-17 06:01:58 +03:00
grunt@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/grunt/-/grunt-1.1.0.tgz#97dc6e6add901459774a988e4f454a12e24c9d3d"
integrity sha512-+NGod0grmviZ7Nzdi9am7vuRS/h76PcWDsV635mEXF0PEQMUV6Kb+OjTdsVxbi0PZmfQOjCMKb3w8CVZcqsn1g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
coffeescript "~1.10.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dateformat "~1.0.12"
eventemitter2 "~0.4.13"
exit "~0.1.1"
findup-sync "~0.3.0"
glob "~7.0.0"
grunt-cli "~1.2.0"
grunt-known-options "~1.1.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
grunt-legacy-log "~2.0.0"
grunt-legacy-util "~1.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
iconv-lite "~0.4.13"
Update dependency grunt to v1.1.0
2020-03-17 06:01:58 +03:00
js-yaml "~3.13.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
minimatch "~3.0.2"
Update dependency grunt to v1.1.0
2020-03-17 06:01:58 +03:00
mkdirp "~1.0.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
nopt "~3.0.6"
path-is-absolute "~1.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
rimraf "~2.6.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency gscan to v3.5.1
2020-04-10 15:23:43 +03:00
gscan@3.5.1:
version "3.5.1"
resolved "https://registry.yarnpkg.com/gscan/-/gscan-3.5.1.tgz#9f78c9678d73e0c7fc6beaeedf56671807811989"
integrity sha512-0H6etw+GL7blKo06Gw9KDh6B+2RMriXGO1WLeBwqmOFRtQoRXPf1JHldeI78yc3wR11mqVGpxi06BgNKUdDsiQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency gscan to v3.4.1
2020-04-06 20:10:36 +03:00
"@tryghost/pretty-cli" "1.2.4"
Update dependency gscan to v3.5.1
2020-04-10 15:23:43 +03:00
"@tryghost/zip" "^1.0.0"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
bluebird "^3.4.6"
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
chalk "^3.0.0"
Bumped gscan version to 2.6.0 no issue - Updated valid theme fixture to be inline with warning that was added when using {{each}} helper instead of {{foreach}}
2019-05-08 17:56:22 +03:00
common-tags "^1.8.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
express "^4.16.2"
Update dependency gscan to v3.4.1
2020-04-06 20:10:36 +03:00
express-hbs "2.3.3"
Update dependency gscan to v2.6.2
2019-07-02 12:09:26 +03:00
fs-extra "^8.0.0"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
ghost-ignition "4.1.0"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
glob "^7.0.5"
Update dependency gscan to v3.0.1
2019-10-28 03:35:12 +03:00
lodash "^4.17.12"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
multer "^1.1.0"
Update dependency gscan to v2.6.2
2019-07-02 12:09:26 +03:00
pluralize "^8.0.0"
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
require-dir "^1.0.0"
Update dependency gscan to v3.4.0
2020-03-20 12:27:55 +03:00
semver "^7.0.0"
Bumped gscan version to 2.4.0 no issue - Updated theme fixtures to be in line with new deprecation rules for {{lang}} and {{@blog.*}} helpers introduced with https://github.com/TryGhost/gscan/pull/180
2019-04-02 07:59:16 +03:00
upath "^1.1.0"
Update dependency gscan to v3.4.1
2020-04-06 20:10:36 +03:00
uuid "7.0.3"
Update dependency gscan to v3.4.0
2020-03-20 12:27:55 +03:00
validator "12.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
gzip-size@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/gzip-size/-/gzip-size-3.0.0.tgz#546188e9bdc337f673772f81660464b389dce520"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-VGGI6b3DN/Zzdy+BZgRks4nc5SA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
duplexer "^0.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency express-hbs to v2.3.3
2020-04-06 18:42:24 +03:00
handlebars@4.7.6:
version "4.7.6"
resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.7.6.tgz#d4c05c1baf90e9945f77aa68a7a219aa4a7df74e"
integrity sha512-1f2BACcBfiwAfStCKZNrUCgqNZkGsAT7UM3kkYtXuLo0KnaVfjKOyf7PRzB6++aK9STyT1Pd2ZCPe3EGOXleXA==
Update dependency express-hbs to v2.3.2
2020-04-01 21:04:24 +03:00
dependencies:
Update dependency express-hbs to v2.3.3
2020-04-06 18:42:24 +03:00
minimist "^1.2.5"
Update dependency express-hbs to v2.3.2
2020-04-01 21:04:24 +03:00
neo-async "^2.6.0"
source-map "^0.6.1"
Update dependency express-hbs to v2.3.3
2020-04-06 18:42:24 +03:00
wordwrap "^1.0.0"
Update dependency express-hbs to v2.3.2
2020-04-01 21:04:24 +03:00
optionalDependencies:
uglify-js "^3.1.4"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
har-schema@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/har-schema/-/har-schema-2.0.0.tgz#a94c2224ebcac04782a0d9035521f24735b7ec92"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-qUwiJOvKwEeCoNkDVSHyRzW37JI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
har-validator@~5.1.0, har-validator@~5.1.3:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "5.1.3"
resolved "https://registry.yarnpkg.com/har-validator/-/har-validator-5.1.3.tgz#1ef89ebd3e4996557675eed9893110dc350fa080"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-sNvOCzEQNr/qrvJgc3UG/kD4QtlHycrzwS+6mfTrrSq97BvaYcPZZI1ZSqGSPR73Cxn4LKTD4PttRwfU7jWq5g==
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
ajv "^6.5.5"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
har-schema "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
has-ansi@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/has-ansi/-/has-ansi-2.0.0.tgz#34f5049ce1ecdf2b0649af3ef24e45ed35416d91"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-NPUEnOHs3ysGSa8+8k5F7TVBbZE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
ansi-regex "^2.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
has-flag@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-2.0.0.tgz#e8207af1cc7b30d446cc70b734b5e8be18f88d51"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-6CB68cx7MNRGzHC3NLXovhj4jVE=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
has-flag@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-3.0.0.tgz#b5d454dc2199ae225699f3467e5a07f3b955bafd"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-tdRU3CGZriJWmfNGfloH87lVuv0=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
has-flag@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-4.0.0.tgz#944771fd9c81c81265c4d6941860da06bb59479b"
integrity sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==
Added member's subscription cancellation helper {{cancel_link}} (#11434) no issue - The helper allows generating HTML needed to cancel or continue the member's subscription depending on subscription state. - Added public members endpoint to allow updating subscription's `cancel_at_period_end` attribute available at: `PUT /api/canary/members/subscriptions/:id/` - Added client-side hook to allow calling subscription cancellation. Allows to create elements with `data-members-cancel-subscription` / `data-members-continue-subscription` attributes which would call subscription update. - Updated schema and added migration for `current_period_end` column - As discussed we only add a single column to subscriptions table to avoid preoptimizing for future cases - Added {{cancel_link}} helper - Added error handling for {{cancel_link}} when members are disabled - Added test coverage for {{cancel_link}} helper - Bumped @tryghost/members-api version to 0.10.2. Needed to use `updateSubscription` middleware - Bumped gscan to 3.2.0. Needed to recognize new {{cancel_link}} helper
2019-12-12 15:59:15 +03:00
has-symbols@^1.0.0, has-symbols@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/has-symbols/-/has-symbols-1.0.1.tgz#9f5214758a44196c406d9bd76cebf81ec2dd31e8"
integrity sha512-PLcsoqu++dmEIZB+6totNFKq/7Do+Z0u4oT0zKOJNl3lYK6vGwwu2hjHs+68OEZbTjiUE9bgOABXbP/GvrS0Kg==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
has-unicode@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/has-unicode/-/has-unicode-2.0.1.tgz#e0e6fe6a28cf51138855e086d1691e771de2a8b9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-4Ob+aijPUROIVeCG0Wkedx3iqLk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
has-value@^0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/has-value/-/has-value-0.3.1.tgz#7b1f58bada62ca827ec0a2078025654845995e1f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ex9YutpiyoJ+wKIHgCVlSEWZXh8=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
get-value "^2.0.3"
has-values "^0.1.4"
isobject "^2.0.0"
has-value@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/has-value/-/has-value-1.0.0.tgz#18b281da585b1c5c51def24c930ed29a0be6b177"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-GLKB2lhbHFxR3vJMkw7SmgvmsXc=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
get-value "^2.0.6"
has-values "^1.0.0"
isobject "^3.0.0"
has-values@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/has-values/-/has-values-0.1.4.tgz#6d61de95d91dfca9b9a02089ad384bff8f62b771"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-bWHeldkd/Km5oCCJrThL/49it3E=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
has-values@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/has-values/-/has-values-1.0.0.tgz#95b0b63fec2146619a6fe57fe75628d5a39efe4f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-lbC2P+whRmGab+V/51Yo1aOe/k8=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
is-number "^3.0.0"
kind-of "^4.0.0"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
has-values@~2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/has-values/-/has-values-2.0.1.tgz#3876200ff86d8a8546a9264a952c17d5fc17579d"
integrity sha512-+QdH3jOmq9P8GfdjFg0eJudqx1FqU62NQJ4P16rOEHeRdl7ckgwn6uqQjzYE0ZoHVV/e5E2esuJ5Gl5+HUW19w==
dependencies:
kind-of "^6.0.2"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
has@^1.0.0, has@^1.0.1, has@^1.0.3:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/has/-/has-1.0.3.tgz#722d7cbfc1f6aa8241f16dd814e011e1f41e8796"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-f2dvO0VU6Oej7RkWJGrehjbzMAjFp5/VKPp5tTpWIV4JHHZK1/BxbFRtf/siA2SWTe09caDmVtYYzWEIbBS4zw==
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
function-bind "^1.1.1"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
he@1.2.0, he@^1.2.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/he/-/he-1.2.0.tgz#84ae65fa7eafb165fddb61566ae14baf05664f0f"
Update dependency html-to-text to v5
2019-07-02 03:43:18 +03:00
integrity sha512-F/1DnUGPopORZi0ni+CvrCgHQ5FyEAHRLSApuYWMmrbSwoN2Mn/7k+Gl38gJnR7yyDZk6WLXwiGod1JOWNDKGw==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
he@~0.3.6:
version "0.3.6"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/he/-/he-0.3.6.tgz#9d7bc446e77963933301dd602d5731cb861135e0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-nXvERud5Y5MzAd1gLVcxy4YRNeA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
hex-color-regex@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/hex-color-regex/-/hex-color-regex-1.1.0.tgz#4c06fccb4602fe2602b3c93df82d7e7dbf1a8a8e"
integrity sha512-l9sfDFsuqtOqKDsQdqrMRk0U85RZc0RtOR9yPI7mRVOa4FsR/BVnZ0shmQRM96Ji99kYZP/7hn1cedc1+ApsTQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
hijackresponse@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/hijackresponse/-/hijackresponse-2.0.1.tgz#45f5e0c9b87d73bad858f66021bec377c736b8b3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-RfXgybh9c7rYWPZgIb7Dd8c2uLM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
homedir-polyfill@^1.0.1:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/homedir-polyfill/-/homedir-polyfill-1.0.3.tgz#743298cef4e5af3e194161fbadcc2151d3a058e8"
integrity sha512-eSmmWE5bZTK2Nou4g0AI3zZ9rswp7GRKoKXS1BLUkvPviOqs4YTN1djQIqrXy9k5gEtdLPy86JjRwsNM9tnDcA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
parse-passwd "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
hooker@~0.2.3:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.2.3"
resolved "https://registry.yarnpkg.com/hooker/-/hooker-0.2.3.tgz#b834f723cc4a242aa65963459df6d984c5d3d959"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-uDT3I8xKJCqmWWNFnfbZhMXT2Vk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
hosted-git-info@^2.1.4:
Merge branch 'master' into v3
2019-10-08 15:58:08 +03:00
version "2.8.5"
resolved "https://registry.yarnpkg.com/hosted-git-info/-/hosted-git-info-2.8.5.tgz#759cfcf2c4d156ade59b0b2dfabddc42a6b9c70c"
integrity sha512-kssjab8CvdXfcXMXVcvsXum4Hwdq9XGtRD3TteMEvEbq0LXyiNQr6AprqKqfeaDXze7SxWvRxdpwE6ku7ikLkg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
hsl-regex@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/hsl-regex/-/hsl-regex-1.0.0.tgz#d49330c789ed819e276a4c0d272dffa30b18fe6e"
integrity sha1-1JMwx4ntgZ4nakwNJy3/owsY/m4=
hsla-regex@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/hsla-regex/-/hsla-regex-1.0.0.tgz#c1ce7a3168c8c6614033a4b5f7877f3b225f9c38"
integrity sha1-wc56MWjIxmFAM6S194d/OyJfnDg=
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
html-comment-regex@^1.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/html-comment-regex/-/html-comment-regex-1.1.2.tgz#97d4688aeb5c81886a364faa0cad1dda14d433a7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-P+M65QY2JQ5Y0G9KKdlDpo0zK+/OHptU5AaBwUfAIDJZk1MYf32Frm84EcOytfJE0t5JvkAnKlmjsXDnWzCJmQ==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
html-encoding-sniffer@^2.0.1:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
version "2.0.1"
resolved "https://registry.yarnpkg.com/html-encoding-sniffer/-/html-encoding-sniffer-2.0.1.tgz#42a6dc4fd33f00281176e8b23759ca4e4fa185f3"
integrity sha512-D5JbOMBIR/TVZkubHT+OyT2705QvogUW4IBn6nHd756OwieSF9aDYFj4dv6HHEVGYbHaLETa3WggZYWWMyy3ZQ==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
whatwg-encoding "^1.0.5"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update dependency html-to-text to v5
2019-07-02 03:43:18 +03:00
html-to-text@5.1.1:
version "5.1.1"
resolved "https://registry.yarnpkg.com/html-to-text/-/html-to-text-5.1.1.tgz#2d89db7bf34bc7bcb7d546b1b228991a16926e87"
integrity sha512-Bci6bD/JIfZSvG4s0gW/9mMKwBRoe/1RWLxUME/d6WUSZCdY7T60bssf/jFf7EYXRyqU4P5xdClVqiYU0/ypdA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency html-to-text to v5
2019-07-02 03:43:18 +03:00
he "^1.2.0"
htmlparser2 "^3.10.1"
lodash "^4.17.11"
minimist "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
htmlparser2@^3.10.1, htmlparser2@^3.8.3, htmlparser2@^3.9.1:
Update dependency html-to-text to v5
2019-07-02 03:43:18 +03:00
version "3.10.1"
resolved "https://registry.yarnpkg.com/htmlparser2/-/htmlparser2-3.10.1.tgz#bd679dc3f59897b6a34bb10749c855bb53a9392f"
integrity sha512-IgieNijUMbkDovyoKObU1DUhm1iwNYE/fuifEoEHfd1oZKZDaONBSkal7Y01shxsM49R4XaMdGez3WnF9UfiCQ==
dependencies:
domelementtype "^1.3.1"
domhandler "^2.3.0"
domutils "^1.5.1"
entities "^1.1.1"
inherits "^2.0.1"
readable-stream "^3.1.1"
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
htmlparser2@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/htmlparser2/-/htmlparser2-4.0.0.tgz#6034658db65b7713a572a9ebf79f650832dceec8"
integrity sha512-cChwXn5Vam57fyXajDtPXL1wTYc8JtLbr2TN76FYu05itVVVealxLowe2B3IEznJG4p9HAYn/0tJaRlGuEglFQ==
dependencies:
domelementtype "^2.0.1"
domhandler "^3.0.0"
domutils "^2.0.0"
entities "^2.0.0"
Update dependency sanitize-html to v1.22.0
2020-02-24 15:29:02 +03:00
htmlparser2@^4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/htmlparser2/-/htmlparser2-4.1.0.tgz#9a4ef161f2e4625ebf7dfbe6c0a2f52d18a59e78"
integrity sha512-4zDq1a1zhE4gQso/c5LP1OtrhYTncXNSpvJYtWJBtXAETPlMfi3IFNjGuQbYLuVY4ZR0QMqRVvo4Pdy9KLyP8Q==
dependencies:
domelementtype "^2.0.1"
domhandler "^3.0.0"
domutils "^2.0.0"
entities "^2.0.0"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
http-cache-semantics@^4.0.0:
version "4.0.3"
resolved "https://registry.yarnpkg.com/http-cache-semantics/-/http-cache-semantics-4.0.3.tgz#495704773277eeef6e43f9ab2c2c7d259dda25c5"
integrity sha512-TcIMG3qeVLgDr1TEd2XvHaTnMPwYQUQMIBLy+5pLSDKYFc7UIqj39w8EGzZkaxoLv/l2K8HaI0t5AVA+YYgUew==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
http-errors@1.7.2:
version "1.7.2"
resolved "https://registry.yarnpkg.com/http-errors/-/http-errors-1.7.2.tgz#4f5029cf13239f31036e5b2e55292bcfbcc85c8f"
integrity sha512-uUQBt3H/cSIVfch6i1EuPNy/YsRSOUBXTVfZ+yR7Zjez3qjBz6i9+i4zjNaoqcoFVI4lQJ5plg63TvGfRSDCRg==
dependencies:
depd "~1.1.2"
inherits "2.0.3"
setprototypeof "1.1.1"
statuses ">= 1.5.0 < 2"
toidentifier "1.0.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
http-errors@1.7.3, http-errors@~1.7.2:
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
version "1.7.3"
resolved "https://registry.yarnpkg.com/http-errors/-/http-errors-1.7.3.tgz#6c619e4f9c60308c38519498c14fbb10aacebb06"
integrity sha512-ZTTX0MWrsQ2ZAhA1cejAwDLycFsd7I7nVtnkT3Ol0aqodaKW+0CTZDQ1uBv5whptCnc8e8HeRRJxRs0kmm/Qfw==
dependencies:
depd "~1.1.2"
inherits "2.0.4"
setprototypeof "1.1.1"
statuses ">= 1.5.0 < 2"
toidentifier "1.0.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
http-errors@~1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/http-errors/-/http-errors-1.4.0.tgz#6c0242dea6b3df7afda153c71089b31c6e82aabf"
integrity sha1-bAJC3qaz33r9oVPHEImzHG6Cqr8=
dependencies:
inherits "2.0.1"
statuses ">= 1.2.1 < 2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
"http-parser-js@>=0.4.0 <0.4.11":
version "0.4.10"
resolved "https://registry.yarnpkg.com/http-parser-js/-/http-parser-js-0.4.10.tgz#92c9c1374c35085f75db359ec56cc257cbb93fa4"
integrity sha1-ksnBN0w1CF912zWexWzCV8u5P6Q=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
http-proxy-agent@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/http-proxy-agent/-/http-proxy-agent-2.1.0.tgz#e4821beef5b2142a2026bd73926fe537631c5405"
integrity sha512-qwHbBLV7WviBl0rQsOzH6o5lwyOIvwp/BdFnvVxXORldu5TmjFfjzBcWUWS5kWAZhmv+JtiDhSuQCp4sBfbIgg==
dependencies:
agent-base "4"
debug "3.1.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
http-signature@~1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/http-signature/-/http-signature-1.2.0.tgz#9aecd925114772f3d95b65a60abb8f7c18fbace1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-muzZJRFHcvPZW2WmCruPfBj7rOE=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
assert-plus "^1.0.0"
jsprim "^1.2.2"
sshpk "^1.7.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
https-proxy-agent@^3.0.0:
version "3.0.1"
resolved "https://registry.yarnpkg.com/https-proxy-agent/-/https-proxy-agent-3.0.1.tgz#b8c286433e87602311b01c8ea34413d856a4af81"
integrity sha512-+ML2Rbh6DAuee7d07tYGEKOEi2voWPUGan+ExdPbPW6Z3svq+JCqr0v8WmKPOkz1vOVykPCBSuobe7G8GJUtVg==
dependencies:
agent-base "^4.3.0"
debug "^3.1.0"
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
https-proxy-agent@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/https-proxy-agent/-/https-proxy-agent-4.0.0.tgz#702b71fb5520a132a66de1f67541d9e62154d82b"
integrity sha512-zoDhWrkR3of1l9QAL8/scJZyLu8j/gBkcwcaQOZh7Gyh/+uJQzGVETdgT30akuwkpL8HTRfssqI3BZuV18teDg==
dependencies:
agent-base "5"
debug "4"
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
iconv-lite@0.4.24, iconv-lite@^0.4.24, iconv-lite@^0.4.4, iconv-lite@~0.4.13:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "0.4.24"
resolved "https://registry.yarnpkg.com/iconv-lite/-/iconv-lite-0.4.24.tgz#2022b4b25fbddc21d2f524974a474aafe733908b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dependencies:
safer-buffer ">= 2.1.2 < 3"
ieee754@^1.1.4:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.1.13"
resolved "https://registry.yarnpkg.com/ieee754/-/ieee754-1.1.13.tgz#ec168558e95aa181fd87d37f55c32bbcb6708b84"
integrity sha512-4vf7I2LYV/HaWerSo3XmlMkp5eZ83i+/CDluXi/IGTs/O1sejBNhTtnxzmRZfvOUqj7lZjqHkeTvpgSFDlWZTg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
ignore-walk@^3.0.1:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/ignore-walk/-/ignore-walk-3.0.2.tgz#99d83a246c196ea5c93ef9315ad7b0819c35069b"
integrity sha512-EXyErtpHbn75ZTsOADsfx6J/FPo6/5cjev46PXrcTpd8z3BoRkXgYu9/JVqrI7tusjmwCZutGeRJeU0Wo1e4Cw==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
minimatch "^3.0.4"
Removed unused cpy-cli dependency no issue
2020-02-20 16:36:42 +03:00
ignore@^4.0.6:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
version "4.0.6"
resolved "https://registry.yarnpkg.com/ignore/-/ignore-4.0.6.tgz#750e3db5862087b4737ebac8207ffd1ef27b25fc"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-cyFDKrqc/YdcWFniJhzI42+AzS+gNwmUzOSFcRCQYwySuBBBy/KjuxWLZ/FHEH6Moq1NizMOBWyTcv8O4OZIMg==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
iltorb@^2.4.3:
version "2.4.4"
resolved "https://registry.yarnpkg.com/iltorb/-/iltorb-2.4.4.tgz#7ec303bbbd8c0cd4d44a847eb6c6d8490f9c7433"
integrity sha512-7Qk6O7TK3rSWVRVRkPehcNTSN+P2i7MsG9pWmw6iVw/W6NcoNj0rFKOuBDM6fbZV6NNGuUW3JBRem6Ozn4KXhg==
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 21:56:05 +03:00
dependencies:
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
detect-libc "^1.0.3"
nan "^2.14.0"
npmlog "^4.1.2"
prebuild-install "^5.3.2"
which-pm-runs "^1.0.0"
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 21:56:05 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
image-extensions@~1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/image-extensions/-/image-extensions-1.1.0.tgz#b8e6bf6039df0056e333502a00b6637a3105d894"
integrity sha1-uOa/YDnfAFbjM1AqALZjejEF2JQ=
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
image-size@0.8.3, image-size@^0.8.1:
Update dependency image-size to v0.8.3 (#11149)
2019-10-01 00:17:18 +03:00
version "0.8.3"
resolved "https://registry.yarnpkg.com/image-size/-/image-size-0.8.3.tgz#f0b568857e034f29baffd37013587f2c0cad8b46"
integrity sha512-SMtq1AJ+aqHB45c3FsB4ERK0UCiA2d3H1uq8s+8T0Pf8A3W4teyBQyaFaktH6xvZqh+npwlKU7i4fJo0r7TYTg==
dependencies:
queue "6.0.1"
Update dependency image-size to v0.7.5
2019-09-16 03:28:16 +03:00
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
image-size@^0.7.3:
Update dependency image-size to v0.7.5
2019-09-16 03:28:16 +03:00
version "0.7.5"
resolved "https://registry.yarnpkg.com/image-size/-/image-size-0.7.5.tgz#269f357cf5797cb44683dfa99790e54c705ead04"
integrity sha512-Hiyv+mXHfFEP7LzUL/llg9RwFxxY+o9N3JVLIeG5E7iFIFAalxvRU9UZthBdYDEVnzHMgjnKJPPpay5BWf1g9g==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
import-fresh@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/import-fresh/-/import-fresh-2.0.0.tgz#d81355c15612d386c61f9ddd3922d4304822a546"
integrity sha1-2BNVwVYS04bGH53dOSLUMEgipUY=
dependencies:
caller-path "^2.0.0"
resolve-from "^3.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
import-fresh@^3.0.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/import-fresh/-/import-fresh-3.1.0.tgz#6d33fa1dcef6df930fae003446f33415af905118"
integrity sha512-PpuksHKGt8rXfWEr9m9EHIpgyyaltBy8+eF6GJM0QCAxMgxCfucMF3mjecK2QsJr0amJW7gTqh5/wht0z2UhEQ==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
parent-module "^1.0.0"
resolve-from "^4.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
imurmurhash@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/imurmurhash/-/imurmurhash-0.1.4.tgz#9218b9b2b928a238b13dc4fb6b6d576f231453ea"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-khi5srkoojixPcT7a21XbyMUU+o=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
indent-string@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/indent-string/-/indent-string-2.1.0.tgz#8e2d48348742121b4a8218b7a137e9a52049dc80"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ji1INIdCEhtKghi3oTfppSBJ3IA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
repeating "^2.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
indexes-of@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/indexes-of/-/indexes-of-1.0.1.tgz#f30f716c8e2bd346c7b67d3df3915566a7c05607"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8w9xbI4r00bHtn0985FVZqfAVgc=
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
inflection@^1.5.1, inflection@~1.12.0:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "1.12.0"
resolved "https://registry.yarnpkg.com/inflection/-/inflection-1.12.0.tgz#a200935656d6f5f6bc4dc7502e1aecb703228416"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ogCTVlbW9fa8TcdQLhrstwMihBY=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
inflection@~1.3.0:
version "1.3.8"
resolved "https://registry.yarnpkg.com/inflection/-/inflection-1.3.8.tgz#cbd160da9f75b14c3cc63578d4f396784bf3014e"
integrity sha1-y9Fg2p91sUw8xjV41POWeEvzAU4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
inflight@^1.0.4:
version "1.0.6"
resolved "https://registry.yarnpkg.com/inflight/-/inflight-1.0.6.tgz#49bd6331d7d02d0c09bc910a1075ba8165b56df9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Sb1jMdfQLQwJvJEKEHW6gWW1bfk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
once "^1.3.0"
wrappy "1"
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
inherits@2, inherits@2.0.4, inherits@^2.0.1, inherits@^2.0.3, inherits@~2.0.1, inherits@~2.0.3, inherits@~2.0.4:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "2.0.4"
resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.4.tgz#0fa2c64f932917c3433a0ded55363aae37416b7c"
integrity sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
inherits@2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.1.tgz#b17d08d326b4423e568eff719f91b0b1cbdf69f1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-sX0I0ya0Qj5Wjv9xn5GwscvfafE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
inherits@2.0.3:
version "2.0.3"
resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.3.tgz#633c2c83e3da42a502f52466022480f4208261de"
integrity sha1-Yzwsg+PaQqUC9SRmAiSA9CCCYd4=
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ini@^1.3.0, ini@^1.3.4, ini@~1.3.0:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.3.5"
resolved "https://registry.yarnpkg.com/ini/-/ini-1.3.5.tgz#eee25f56db1c9ec6085e0c22778083f596abf927"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-RZY5huIKCMRWDUqZlEi72f/lmXKMvuszcMBduliQ3nnWbx9X/ZBQO7DijMEYS9EhHBb2qacRUMtC7svLwe0lcw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages
2020-02-03 16:44:38 +03:00
inquirer@^7.0.0:
version "7.0.4"
resolved "https://registry.yarnpkg.com/inquirer/-/inquirer-7.0.4.tgz#99af5bde47153abca23f5c7fc30db247f39da703"
integrity sha512-Bu5Td5+j11sCkqfqmUTiwv+tWisMtP0L7Q8WrqA2C/BbBhy1YTdFrvjjlrKq8oagA/tLQBski2Gcx/Sqyi2qSQ==
dependencies:
ansi-escapes "^4.2.1"
chalk "^2.4.2"
cli-cursor "^3.1.0"
cli-width "^2.0.0"
external-editor "^3.0.3"
figures "^3.0.0"
lodash "^4.17.15"
mute-stream "0.0.8"
run-async "^2.2.0"
rxjs "^6.5.3"
string-width "^4.1.0"
strip-ansi "^5.1.0"
through "^2.3.6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
interpret@^1.2.0:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/interpret/-/interpret-1.2.0.tgz#d5061a6224be58e8083985f5014d844359576296"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
integrity sha512-mT34yGKMNceBQUoVn7iCDKDntA7SC6gycMAWzGx1z/CMCTV7b2AAtXlo3nRyHZ1FelRkQbQjprHSYGwzLtkVbw==
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
Update dependency knex to v0.20.13
2020-04-01 20:10:27 +03:00
interpret@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/interpret/-/interpret-2.0.0.tgz#b783ffac0b8371503e9ab39561df223286aa5433"
integrity sha512-e0/LknJ8wpMMhTiWcjivB+ESwIuvHnBSlBbmP/pSb8CQJldoj1p2qv7xGZ/+BtbTziYRFSz8OsvdbiX45LtYQA==
Update dependency intl-messageformat to v5.4.3
2019-07-29 09:34:47 +03:00
intl-format-cache@^4.1.3:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "4.2.2"
resolved "https://registry.yarnpkg.com/intl-format-cache/-/intl-format-cache-4.2.2.tgz#4e745d4cda3aa9df2495f0493bed4c6c4ff7093d"
integrity sha512-7tY3XadLn8rMHiYVUzH/6NmOe944nJ59LdAWuFm64/m2OfFAEkZTtTHxrEtoxq7HWFddX4aRwDb9P8KB5Z2AvQ==
Update dependency intl-messageformat to v5.1.2
2019-07-29 03:28:39 +03:00
Update dependency intl-messageformat to v5.4.3
2019-07-29 09:34:47 +03:00
intl-messageformat-parser@^2.1.3:
Update dependency intl-messageformat to v5.1.2
2019-07-29 03:28:39 +03:00
version "2.1.3"
resolved "https://registry.yarnpkg.com/intl-messageformat-parser/-/intl-messageformat-parser-2.1.3.tgz#c918e36a08bd7ff01349d8ea3736262c986aaeb1"
integrity sha512-YOP2GuQ8Y+f3j2Vti1/abcozYlkv/WsIffsRP8cgtN4Oha5hjhNnucxzyfmeAoDgDHw4s/lNyLylB01369a5lg==
Update dependency intl-messageformat to v5.4.3
2019-07-29 09:34:47 +03:00
intl-messageformat@5.4.3:
version "5.4.3"
resolved "https://registry.yarnpkg.com/intl-messageformat/-/intl-messageformat-5.4.3.tgz#3864f6201d779e61b09c1afb6b8ed386163a18dc"
integrity sha512-wiGIeeokY6D/TFC6JYoBIUmZJ2AzkTHJuWp5QulDH4h77aghFTBm+8MvjTLIUiQ/z7xiY3SUQN2UBG7EtwYTAg==
Update dependency intl-messageformat to v5.1.2
2019-07-29 03:28:39 +03:00
dependencies:
Update dependency intl-messageformat to v5.4.3
2019-07-29 09:34:47 +03:00
intl-format-cache "^4.1.3"
intl-messageformat-parser "^2.1.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
intl@1.2.5:
version "1.2.5"
resolved "https://registry.yarnpkg.com/intl/-/intl-1.2.5.tgz#82244a2190c4e419f8371f5aa34daa3420e2abde"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-giRKIZDE5Bn4Nx9ao02qNCDiq94=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
invert-kv@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/invert-kv/-/invert-kv-1.0.0.tgz#104a8e4aaca6d3d8cd157a8ef8bfab2d7a3ffdb6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-EEqOSqym09jNFXqO+L+rLXo//bY=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
ip-regex@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/ip-regex/-/ip-regex-2.1.0.tgz#fa78bf5d2e6913c911ce9f819ee5146bb6d844e9"
integrity sha1-+ni/XS5pE8kRzp+BnuUUa7bYROk=
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
ip-regex@^4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/ip-regex/-/ip-regex-4.1.0.tgz#5ad62f685a14edb421abebc2fff8db94df67b455"
integrity sha512-pKnZpbgCTfH/1NLIlOduP/V+WRXzC2MOz3Qo8xmxk8C5GudJLgK5QyLVXOSWy3ParAH7Eemurl3xjv/WXYFvMA==
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
ip@1.1.5, ip@^1.1.5:
version "1.1.5"
resolved "https://registry.yarnpkg.com/ip/-/ip-1.1.5.tgz#bdded70114290828c0a039e72ef25f5aaec4354a"
integrity sha1-vd7XARQpCCjAoDnnLvJfWq7ENUo=
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
ipaddr.js@1.9.0:
version "1.9.0"
resolved "https://registry.yarnpkg.com/ipaddr.js/-/ipaddr.js-1.9.0.tgz#37df74e430a0e47550fe54a2defe30d8acd95f65"
integrity sha512-M4Sjn6N/+O6/IXSJseKqHoFc+5FdGJ22sXqnjTpdZweHK64MzEPAyQZyEU3R/KRv2GLoa7nNtg/C2Ev6m7z+eA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
is-absolute-url@^2.0.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/is-absolute-url/-/is-absolute-url-2.1.0.tgz#50530dfb84fcc9aa7dbe7852e83a37b93b9f2aa6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-UFMN+4T8yap9vnhS6Do3uTufKqY=
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
is-absolute-url@^3.0.0:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "3.0.3"
resolved "https://registry.yarnpkg.com/is-absolute-url/-/is-absolute-url-3.0.3.tgz#96c6a22b6a23929b11ea0afb1836c36ad4a5d698"
integrity sha512-opmNIX7uFnS96NtPmhWQgQx6/NYFgsUXYMllcfzwWKUMwfo8kku1TvE6hkNcH+Q1ts5cMVrsY7j0bxXQDciu9Q==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
is-absolute@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-absolute/-/is-absolute-1.0.0.tgz#395e1ae84b11f26ad1795e73c17378e48a301576"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-dOWoqflvcydARa360Gvv18DZ/gRuHKi2NU/wU5X1ZFzdYfH29nkiNZsF3mp4OJ3H4yo9Mx8A/uAGNzpzPN3yBA==
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
is-relative "^1.0.0"
is-windows "^1.0.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-accessor-descriptor@^0.1.6:
version "0.1.6"
resolved "https://registry.yarnpkg.com/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz#a9e12cb3ae8d876727eeef3843f8a0897b5c98d6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-qeEss66Nh2cn7u84Q/igiXtcmNY=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
kind-of "^3.0.2"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
is-accessor-descriptor@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-accessor-descriptor/-/is-accessor-descriptor-1.0.0.tgz#169c2f6d3df1f992618072365c9b0ea1f6878656"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-m5hnHTkcVsPfqx3AKlyttIPb7J+XykHvJP2B9bZDjlhLIoEq4XoK64Vg7boZlVWYK6LUY94dYPEE7Lh0ZkZKcQ==
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
dependencies:
kind-of "^6.0.0"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
is-alphabetical@^1.0.0:
version "1.0.3"
resolved "https://registry.yarnpkg.com/is-alphabetical/-/is-alphabetical-1.0.3.tgz#eb04cc47219a8895d8450ace4715abff2258a1f8"
integrity sha512-eEMa6MKpHFzw38eKm56iNNi6GJ7lf6aLLio7Kr23sJPAECscgRtZvOBYybejWDQ2bM949Y++61PY+udzj5QMLA==
is-alphanumeric@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-alphanumeric/-/is-alphanumeric-1.0.0.tgz#4a9cef71daf4c001c1d81d63d140cf53fd6889f4"
integrity sha1-Spzvcdr0wAHB2B1j0UDPU/1oifQ=
is-alphanumerical@^1.0.0:
version "1.0.3"
resolved "https://registry.yarnpkg.com/is-alphanumerical/-/is-alphanumerical-1.0.3.tgz#57ae21c374277b3defe0274c640a5704b8f6657c"
integrity sha512-A1IGAPO5AW9vSh7omxIlOGwIqEvpW/TA+DksVOPM5ODuxKlZS09+TEM1E3275lJqO2oJ38vDpeAL3DCIiHE6eA==
dependencies:
is-alphabetical "^1.0.0"
is-decimal "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
is-arrayish@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/is-arrayish/-/is-arrayish-0.2.1.tgz#77c99840527aa8ecb1a8ba697b80645a7a926a9d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-d8mYQFJ6qOyxqLppe4BkWnqSap0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
is-arrayish@^0.3.1:
version "0.3.2"
resolved "https://registry.yarnpkg.com/is-arrayish/-/is-arrayish-0.3.2.tgz#4574a2ae56f7ab206896fb431eaeed066fdf8f03"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-eVRqCvVlZbuw3GrM63ovNSNAeA1K16kaR/LRY/92w0zxQ5/1YzwblUX652i4Xs9RwAGjW9d9y6X88t8OaAJfWQ==
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
is-binary-path@~2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/is-binary-path/-/is-binary-path-2.1.0.tgz#ea1f7f3b80f064236e83470f86c09c254fb45b09"
integrity sha512-ZMERYes6pDydyuGidse7OsHxtbI7WVeUEozgR/g7rd0xUimYNlvZRE/K2MgZTjWy725IfelLeVcEM97mmtRGXw==
dependencies:
binary-extensions "^2.0.0"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
is-buffer@^1.1.5, is-buffer@~1.1.1:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.1.6"
resolved "https://registry.yarnpkg.com/is-buffer/-/is-buffer-1.1.6.tgz#efaa2ea9daa0d7ab2ea13a97b2b8ad51fefbe8be"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-NcdALwpXkTm5Zvvbk7owOUSvVvBKDgKP5/ewfXEznmQFfs4ZRmanOeKBTjRVjka3QFoN6XJ+9F3USqfHqTaU5w==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency analytics-node to v3.4.0-beta.1
2019-12-17 00:06:35 +03:00
is-buffer@^2.0.0, is-buffer@^2.0.2, is-buffer@~2.0.3:
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
version "2.0.4"
resolved "https://registry.yarnpkg.com/is-buffer/-/is-buffer-2.0.4.tgz#3e572f23c8411a5cfd9557c849e3665e0b290623"
integrity sha512-Kq1rokWXOPXWuaMAqZiJW4XxsmD9zGx9q4aePabbn3qCRGedtH7Cm+zV8WETitMfu1wdh+Rvd6w5egwSngUX2A==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
is-callable@^1.1.4:
version "1.1.4"
resolved "https://registry.yarnpkg.com/is-callable/-/is-callable-1.1.4.tgz#1e1adf219e1eeb684d691f9d6a05ff0d30a24d75"
integrity sha512-r5p9sxJjYnArLjObpjA4xu5EKI3CuKHkJXMhT7kwbpUyIFD1n5PMAsoPvWnvtZiNz7LjkYDRZhd7FlI0eMijEA==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
is-callable@^1.1.5:
version "1.1.5"
resolved "https://registry.yarnpkg.com/is-callable/-/is-callable-1.1.5.tgz#f7e46b596890456db74e7f6e976cb3273d06faab"
integrity sha512-ESKv5sMCJB2jnHTWZ3O5itG+O128Hsus4K4Qh1h2/cgn2vbgnLSVqfV46AeJA9D5EeeLa9w81KUXMtn34zhX+Q==
is-color-stop@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/is-color-stop/-/is-color-stop-1.1.0.tgz#cfff471aee4dd5c9e158598fbe12967b5cdad345"
integrity sha1-z/9HGu5N1cnhWFmPvhKWe1za00U=
dependencies:
css-color-names "^0.0.4"
hex-color-regex "^1.1.0"
hsl-regex "^1.0.0"
hsla-regex "^1.0.0"
rgb-regex "^1.0.1"
rgba-regex "^1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-data-descriptor@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz#0b5ee648388e2c860282e793f1856fec3f301b56"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-C17mSDiOLIYCgueT8YVv7D8wG1Y=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
kind-of "^3.0.2"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
is-data-descriptor@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-data-descriptor/-/is-data-descriptor-1.0.0.tgz#d84876321d0e7add03990406abbbbd36ba9268c7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-jbRXy1FmtAoCjQkVmIVYwuuqDFUbaOeDjmed1tOGPrsMhtJA4rD9tkgA0F1qJ3gRFRXcHYVkdeaP50Q5rE/jLQ==
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
dependencies:
kind-of "^6.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
is-date-object@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/is-date-object/-/is-date-object-1.0.1.tgz#9aa20eb6aeebbff77fbd33e74ca01b33581d3a16"
integrity sha1-mqIOtq7rv/d/vTPnTKAbM1gdOhY=
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
is-decimal@^1.0.0, is-decimal@^1.0.2:
version "1.0.3"
resolved "https://registry.yarnpkg.com/is-decimal/-/is-decimal-1.0.3.tgz#381068759b9dc807d8c0dc0bfbae2b68e1da48b7"
integrity sha512-bvLSwoDg2q6Gf+E2LEPiklHZxxiSi3XAh4Mav65mKqTfCO1HM3uBs24TjEH8iJX3bbDdLXKJXBTmGzuTUuAEjQ==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-descriptor@^0.1.0:
version "0.1.6"
resolved "https://registry.yarnpkg.com/is-descriptor/-/is-descriptor-0.1.6.tgz#366d8240dde487ca51823b1ab9f07a10a78251ca"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-avDYr0SB3DwO9zsMov0gKCESFYqCnE4hq/4z3TdUlukEy5t9C0YRq7HLrsN52NAcqXKaepeCD0n+B0arnVG3Hg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
is-accessor-descriptor "^0.1.6"
is-data-descriptor "^0.1.4"
kind-of "^5.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
is-descriptor@^1.0.0, is-descriptor@^1.0.2:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/is-descriptor/-/is-descriptor-1.0.2.tgz#3b159746a66604b04f8c81524ba365c5f14d86ec"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-2eis5WqQGV7peooDyLmNEPUrps9+SXX5c9pL3xEB+4e9HnGuDa7mB7kHxHw4CbqS9k1T2hOH3miL8n8WtiYVtg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
is-accessor-descriptor "^1.0.0"
is-data-descriptor "^1.0.0"
kind-of "^6.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
is-directory@^0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/is-directory/-/is-directory-0.3.1.tgz#61339b6f2475fc772fd9c9d83f5c8575dc154ae1"
integrity sha1-YTObbyR1/Hcv2cnYP1yFddwVSuE=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-extendable@^0.1.0, is-extendable@^0.1.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.1.1"
resolved "https://registry.yarnpkg.com/is-extendable/-/is-extendable-0.1.1.tgz#62b110e289a471418e3ec36a617d472e301dfc89"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-YrEQ4omkcUGOPsNqYX1HLjAd/Ik=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-extendable@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/is-extendable/-/is-extendable-1.0.1.tgz#a7470f9e426733d81bd81e1155264e3a3507cab4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-arnXMxT1hhoKo9k1LZdmlNyJdDDfy2v0fXjFlmok4+i8ul/6WlbVge9bhM74OpNPQPMGUToDtz+KXa1PneJxOA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
is-plain-object "^2.0.4"
Removed unnecessary dependency matchdep - Don't really need a dependency here, can work without it - matchdep hasn't been updated in 3 years, and has a web of potentially insecure dependencies - Unlikely to affect us, but safer to go without
2020-04-01 19:42:41 +03:00
is-extglob@^2.1.1:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/is-extglob/-/is-extglob-2.1.1.tgz#a88c02535791f02ed37c76a1b9ea9773c833f8c2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-qIwCU1eR8C7TfHahueqXc8gz+MI=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
is-finite@^1.0.0:
version "1.0.2"
resolved "https://registry.yarnpkg.com/is-finite/-/is-finite-1.0.2.tgz#cc6677695602be550ef11e8b4aa6305342b6d0aa"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-zGZ3aVYCvlUO8R6LSqYwU0K20Ko=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
number-is-nan "^1.0.0"
is-fullwidth-code-point@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz#ef9e31386f031a7f0d643af82fde50c457ef00cb"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-754xOG8DGn8NZDr4L95QxFfvAMs=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
number-is-nan "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
is-fullwidth-code-point@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz#a3b30a5c4f199183167aaab93beefae3ddfb654f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-o7MKXE8ZkYMWeqq5O+764937ZU8=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Update Test & linting packages
2020-02-03 16:44:38 +03:00
is-fullwidth-code-point@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz#f116f8064fe90b3f7844a38997c0b75051269f1d"
integrity sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
is-glob@^4.0.0, is-glob@^4.0.1, is-glob@~4.0.1:
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
version "4.0.1"
resolved "https://registry.yarnpkg.com/is-glob/-/is-glob-4.0.1.tgz#7567dbe9f2f5e2467bc77ab83c4a29482407a5dc"
integrity sha512-5G0tKtBTFImOqDnLB2hG6Bp2qcKEFduo4tZu9MT/H6NQv/ghhy30o55ufafxJ/LdH79LLs2Kfrn85TLKyA7BUg==
dependencies:
is-extglob "^2.1.1"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
is-hexadecimal@^1.0.0:
version "1.0.3"
resolved "https://registry.yarnpkg.com/is-hexadecimal/-/is-hexadecimal-1.0.3.tgz#e8a426a69b6d31470d3a33a47bb825cda02506ee"
integrity sha512-zxQ9//Q3D/34poZf8fiy3m3XVpbQc7ren15iKqrTtLPwkPD/t3Scy9Imp63FujULGxuK0ZlCwoo5xNpktFgbOA==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
is-number@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/is-number/-/is-number-3.0.0.tgz#24fd6201a4782cf50561c810276afc7d12d71195"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-JP1iAaR4LPUFYcgQJ2r8fRLXEZU=
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
dependencies:
kind-of "^3.0.2"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
is-number@^7.0.0:
version "7.0.0"
resolved "https://registry.yarnpkg.com/is-number/-/is-number-7.0.0.tgz#7535345b896734d5f80c4d06c50955527a14f12b"
integrity sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
is-obj@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/is-obj/-/is-obj-2.0.0.tgz#473fb05d973705e3fd9620545018ca8e22ef4982"
integrity sha512-drqDG3cbczxxEJRoOXcOjtdp1J/lyp1mNn0xaznRs8+muBhgQcrnbspox5X5fOw0HnMnbfDzvnEMEtqDEJEo8w==
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
is-object@~1.0.1:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/is-object/-/is-object-1.0.1.tgz#8952688c5ec2ffd6b03ecc85e769e02903083470"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-iVJojF7C/9awPsyF52ngKQMINHA=
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
is-plain-obj@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/is-plain-obj/-/is-plain-obj-2.0.0.tgz#7fd1a7f1b69e160cde9181d2313f445c68aa2679"
integrity sha512-EYisGhpgSCwspmIuRHGjROWTon2Xp8Z7U03Wubk/bTL5TTRC5R1rGVgyjzBrk9+ULdH6cRD06KRcw/xfqhVYKQ==
Lock file maintenance
2019-08-01 08:14:51 +03:00
is-plain-object@^2.0.3, is-plain-object@^2.0.4:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
version "2.0.4"
resolved "https://registry.yarnpkg.com/is-plain-object/-/is-plain-object-2.0.4.tgz#2c163b3fafb1b606d9d17928f05c2a1c38e07677"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-h5PpgXkWitc38BBMYawTYMWJHFZJVnBquFE57xFpjB8pJFiF6gZ+bU+WyI/yqXiFR5mdLsgYNaPe8uao6Uv9Og==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
isobject "^3.0.1"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
is-potential-custom-element-name@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-potential-custom-element-name/-/is-potential-custom-element-name-1.0.0.tgz#0c52e54bcca391bb2c494b21e8626d7336c6e397"
integrity sha1-DFLlS8yjkbssSUsh6GJtczbG45c=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
is-promise@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/is-promise/-/is-promise-2.1.0.tgz#79a2a9ece7f096e80f36d2b2f3bc16c1ff4bf3fa"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-eaKp7OfwlugPNtKy87wWwf9L8/o=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
is-property@^1.0.0:
version "1.0.2"
resolved "https://registry.yarnpkg.com/is-property/-/is-property-1.0.2.tgz#57fe1c4e48474edd65b09911f26b1cd4095dda84"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-V/4cTkhHTt1lsJkR8msc1Ald2oQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
is-regex@^1.0.4:
version "1.0.4"
resolved "https://registry.yarnpkg.com/is-regex/-/is-regex-1.0.4.tgz#5517489b547091b0930e095654ced25ee97e9491"
integrity sha1-VRdIm1RwkbCTDglWVM7SXul+lJE=
dependencies:
has "^1.0.1"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
is-regex@^1.0.5:
version "1.0.5"
resolved "https://registry.yarnpkg.com/is-regex/-/is-regex-1.0.5.tgz#39d589a358bf18967f726967120b8fc1aed74eae"
integrity sha512-vlKW17SNq44owv5AQR3Cq0bQPEb8+kF3UKZ2fiZNOWtztYE5i0CzCZxFDwO58qAOWtxdBRVO/V5Qin1wjCqFYQ==
dependencies:
has "^1.0.3"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
is-relative-url@~3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/is-relative-url/-/is-relative-url-3.0.0.tgz#f623c8e26baa5bd3742b3b7ec074f50f3b45b3f3"
integrity sha512-U1iSYRlY2GIMGuZx7gezlB5dp1Kheaym7zKzO1PV06mOihiWTXejLwm4poEJysPyXF+HtK/BEd0DVlcCh30pEA==
dependencies:
is-absolute-url "^3.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
is-relative@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-relative/-/is-relative-1.0.0.tgz#a1bb6935ce8c5dba1e8b9754b9b2dcc020e2260d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Kw/ReK0iqwKeu0MITLFuj0jbPAmEiOsIwyIXvvbfa6QfmN9pkD1M+8pdk7Rl/dTKbH34/XBFMbgD4iMJhLQbGA==
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
is-unc-path "^1.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
is-resolvable@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/is-resolvable/-/is-resolvable-1.1.0.tgz#fb18f87ce1feb925169c9a407c19318a3206ed88"
integrity sha512-qgDYXFSR5WvEfuS5dMj6oTMEbrrSaM0CrFk2Yiq/gXnBvD9pMa2jGXxyhGLfvhZpuMZe18CJpFxAt3CRs42NMg==
🐛 Fixed server crash when AMP posts contain images with unescaped chars (#10775) no issue - bump `amperize` to v0.4.0 which contains an updated version of `got` which does not crash on invalid image urls
2019-06-05 19:31:23 +03:00
is-retry-allowed@^1.1.0:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/is-retry-allowed/-/is-retry-allowed-1.2.0.tgz#d778488bd0a4666a3be8a1482b9f2baafedea8b4"
integrity sha512-RUbUeKwvm3XG2VYamhJL1xFktgjvPzL0Hq8C+6yrWIswDy3BIXGqCxhxkc30N9jqK311gVU137K8Ei55/zVJRg==
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
🐛 Fixed server crash when AMP posts contain images with unescaped chars (#10775) no issue - bump `amperize` to v0.4.0 which contains an updated version of `got` which does not crash on invalid image urls
2019-06-05 19:31:23 +03:00
is-stream@^1.1.0:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/is-stream/-/is-stream-1.1.0.tgz#12d4a3dd4e68e0b79ceb8dbc84173ae80d91ca44"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-EtSj3U5o4Lec6428hBc66A2RykQ=
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
is-svg@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/is-svg/-/is-svg-3.0.0.tgz#9321dbd29c212e5ca99c4fa9794c714bcafa2f75"
integrity sha512-gi4iHK53LR2ujhLVVj+37Ykh9GLqYHX6JOVXbLAucaG/Cqw9xwdFOjDM2qeifLs1sF1npXXFvDu0r5HNgCMrzQ==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
html-comment-regex "^1.1.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
is-symbol@^1.0.2:
Added member's subscription cancellation helper {{cancel_link}} (#11434) no issue - The helper allows generating HTML needed to cancel or continue the member's subscription depending on subscription state. - Added public members endpoint to allow updating subscription's `cancel_at_period_end` attribute available at: `PUT /api/canary/members/subscriptions/:id/` - Added client-side hook to allow calling subscription cancellation. Allows to create elements with `data-members-cancel-subscription` / `data-members-continue-subscription` attributes which would call subscription update. - Updated schema and added migration for `current_period_end` column - As discussed we only add a single column to subscriptions table to avoid preoptimizing for future cases - Added {{cancel_link}} helper - Added error handling for {{cancel_link}} when members are disabled - Added test coverage for {{cancel_link}} helper - Bumped @tryghost/members-api version to 0.10.2. Needed to use `updateSubscription` middleware - Bumped gscan to 3.2.0. Needed to recognize new {{cancel_link}} helper
2019-12-12 15:59:15 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/is-symbol/-/is-symbol-1.0.3.tgz#38e1014b9e6329be0de9d24a414fd7441ec61937"
integrity sha512-OwijhaRSgqvhm/0ZdAcXNZt9lYdKFpcRDT5ULUuYXPoT794UNOdU+gpT6Rzo7b4V2HUl/op6GqY894AZwv9faQ==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
dependencies:
Added member's subscription cancellation helper {{cancel_link}} (#11434) no issue - The helper allows generating HTML needed to cancel or continue the member's subscription depending on subscription state. - Added public members endpoint to allow updating subscription's `cancel_at_period_end` attribute available at: `PUT /api/canary/members/subscriptions/:id/` - Added client-side hook to allow calling subscription cancellation. Allows to create elements with `data-members-cancel-subscription` / `data-members-continue-subscription` attributes which would call subscription update. - Updated schema and added migration for `current_period_end` column - As discussed we only add a single column to subscriptions table to avoid preoptimizing for future cases - Added {{cancel_link}} helper - Added error handling for {{cancel_link}} when members are disabled - Added test coverage for {{cancel_link}} helper - Bumped @tryghost/members-api version to 0.10.2. Needed to use `updateSubscription` middleware - Bumped gscan to 3.2.0. Needed to recognize new {{cancel_link}} helper
2019-12-12 15:59:15 +03:00
has-symbols "^1.0.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
is-typedarray@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-typedarray/-/is-typedarray-1.0.0.tgz#e479c80858df0c1b11ddda6940f96011fcda4a9a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-5HnICFjfDBsR3dppQPlgEfzaSpo=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
is-unc-path@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-unc-path/-/is-unc-path-1.0.0.tgz#d731e8898ed090a12c352ad2eaed5095ad322c9d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-mrGpVd0fs7WWLfVsStvgF6iEJnbjDFZh9/emhRDcGWTduTfNHd9CHeUwH3gYIjdbwo4On6hunkztwOaAw0yllQ==
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
unc-path-regex "^0.1.2"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
is-uri@~1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/is-uri/-/is-uri-1.2.0.tgz#b92ff234af68c0ed97d2eed46492d01793b7d420"
integrity sha1-uS/yNK9owO2X0u7UZJLQF5O31CA=
dependencies:
parse-uri "~1.0.0"
punycode2 "~1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
is-utf8@^0.2.0:
version "0.2.1"
resolved "https://registry.yarnpkg.com/is-utf8/-/is-utf8-0.2.1.tgz#4b0da1442104d1b336340e80797e865cf39f7d72"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Sw2hRCEE0bM2NA6AeX6GXPOffXI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
is-whitespace-character@^1.0.0:
version "1.0.3"
resolved "https://registry.yarnpkg.com/is-whitespace-character/-/is-whitespace-character-1.0.3.tgz#b3ad9546d916d7d3ffa78204bca0c26b56257fac"
integrity sha512-SNPgMLz9JzPccD3nPctcj8sZlX9DAMJSKH8bP7Z6bohCwuNgX8xbWr1eTAYXX9Vpi/aSn8Y1akL9WgM3t43YNQ==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
is-windows@^1.0.1, is-windows@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/is-windows/-/is-windows-1.0.2.tgz#d1850eb9791ecd18e6182ce12a30f396634bb19d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-eXK1UInq2bPmjyX6e3VHIzMLobc4J94i4AWn+Hpq3OU5KkrRC96OAcR3PRJ/pGu6m8TRnBHP9dkXQVsT/COVIA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
is-word-character@^1.0.0:
version "1.0.3"
resolved "https://registry.yarnpkg.com/is-word-character/-/is-word-character-1.0.3.tgz#264d15541cbad0ba833d3992c34e6b40873b08aa"
integrity sha512-0wfcrFgOOOBdgRNT9H33xe6Zi6yhX/uoc4U8NBZGeQQB0ctU1dnlNTyL9JM2646bHDTpsDm1Brb3VPoCIMrd/A==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
isarray@0.0.1:
version "0.0.1"
resolved "https://registry.yarnpkg.com/isarray/-/isarray-0.0.1.tgz#8a18acfca9a8f4177e09abfc6038939b05d1eedf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ihis/Kmo9Bd+Cav8YDiTmwXR7t8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
isarray@1.0.0, isarray@~1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.0"
resolved "https://registry.yarnpkg.com/isarray/-/isarray-1.0.0.tgz#bb935d48582cba168c06834957a54a3e07124f11"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-u5NdSFgsuhaMBoNJV6VKPgcSTxE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
isexe@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/isexe/-/isexe-2.0.0.tgz#e8fbf374dc556ff8947a10dcb0572d633f2cfa10"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-6PvzdNxVb/iUehDcsFctYz8s+hA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
iso-639-3@~2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/iso-639-3/-/iso-639-3-2.0.0.tgz#5844c6b885cbeac3571d407de5b5fdcb92f3505f"
integrity sha512-Pp+ctEs/pna6/rj05a5VR3qYxJHBZi95wp20C6Snf/WeghrkR/4G44LPJFqlbyo67XntkcUaxwrGmMeyY+F4mA==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
isobject@^2.0.0, isobject@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/isobject/-/isobject-2.1.0.tgz#f065561096a3f1da2ef46272f815c840d87e0c89"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8GVWEJaj8dou9GJy+BXIQNh+DIk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
isarray "1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
isobject@^3.0.0, isobject@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/isobject/-/isobject-3.0.1.tgz#4e431e92b11a9731636aa1f9c8d1ccbcfdab78df"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-TkMekrEalzFjaqH5yNHMvP2reN8=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
isostring@0.0.1:
version "0.0.1"
resolved "https://registry.yarnpkg.com/isostring/-/isostring-0.0.1.tgz#ddb608efbfc89cda86db9cb16be090a788134c7f"
integrity sha1-3bYI77/InNqG25yxa+CQp4gTTH8=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
isstream@~0.1.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/isstream/-/isstream-0.1.2.tgz#47e63f7af55afa6f92e1500e690eb8b8529c099a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-R+Y/evVa+m+S4VAOaQ64uFKcCZo=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
join-component@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/join-component/-/join-component-1.1.0.tgz#b8417b750661a392bee2c2537c68b2a9d4977cd5"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-uEF7dQZho5K+4sJTfGiyqdSXfNU=
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
Update dependency express-hbs to v2.3.3
2020-04-06 18:42:24 +03:00
js-beautify@1.11.0:
version "1.11.0"
resolved "https://registry.yarnpkg.com/js-beautify/-/js-beautify-1.11.0.tgz#afb873dc47d58986360093dcb69951e8bcd5ded2"
integrity sha512-a26B+Cx7USQGSWnz9YxgJNMmML/QG2nqIaL7VVYPCXbqiKz8PN0waSNvroMtvAK6tY7g/wPdNWGEP+JTNIBr6A==
Update dependency express-hbs to v2.3.2
2020-04-01 21:04:24 +03:00
dependencies:
config-chain "^1.1.12"
editorconfig "^0.15.3"
glob "^7.1.3"
Update dependency express-hbs to v2.3.3
2020-04-06 18:42:24 +03:00
mkdirp "~1.0.3"
nopt "^4.0.3"
Update dependency express-hbs to v2.3.2
2020-04-01 21:04:24 +03:00
Updated members service to use magic-link signin no-issue
2019-09-03 07:39:00 +03:00
js-tokens@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-4.0.0.tgz#19203fb59991df98e3a287050d4647cdeaf32499"
integrity sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==
Update dependency grunt to v1.1.0
2020-03-17 06:01:58 +03:00
js-yaml@3.13.1, js-yaml@^3.13.1, js-yaml@~3.13.1:
Bumped js-yaml version to 3.13.1 no issue - The 3.13.1 version contains security fixes described in https://github.com/nodeca/js-yaml/commit/b2f9e882397660da37c5c5bb92e8ccc7bb9eb668
2019-06-24 16:47:37 +03:00
version "3.13.1"
resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.13.1.tgz#aff151b30bfdfa8e49e05da22e7415e9dfa37847"
integrity sha512-YfbcO7jXDdyj0DGxYVSlSeQNHbD7XPWvrVWeVUujrQEoZzWJIRrCPoyk6kL6IAjAG2IolMK4T0hNUe0HOUs5Jw==
dependencies:
argparse "^1.0.7"
esprima "^4.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
jsbn@~0.1.0:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "0.1.1"
resolved "https://registry.yarnpkg.com/jsbn/-/jsbn-0.1.1.tgz#a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-peZUwuWi3rXyAdls77yoDA7y9RM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated Ghost-SDK packages no issue
2020-04-03 12:43:35 +03:00
jsdom@16.2.2:
version "16.2.2"
resolved "https://registry.yarnpkg.com/jsdom/-/jsdom-16.2.2.tgz#76f2f7541646beb46a938f5dc476b88705bedf2b"
integrity sha512-pDFQbcYtKBHxRaP55zGXCJWgFHkDAYbKcsXEK/3Icu9nKYZkutUXfLBwbD+09XDutkYSHcgfQLZ0qvpAAm9mvg==
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
dependencies:
abab "^2.0.3"
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
acorn "^7.1.1"
acorn-globals "^6.0.0"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
cssom "^0.4.4"
cssstyle "^2.2.0"
data-urls "^2.0.0"
decimal.js "^10.2.0"
domexception "^2.0.1"
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
escodegen "^1.14.1"
html-encoding-sniffer "^2.0.1"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
is-potential-custom-element-name "^1.0.0"
nwsapi "^2.2.0"
parse5 "5.1.1"
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
request "^2.88.2"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
request-promise-native "^1.0.8"
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
saxes "^5.0.0"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
symbol-tree "^3.2.4"
tough-cookie "^3.0.1"
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
w3c-hr-time "^1.0.2"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
w3c-xmlserializer "^2.0.0"
Updated Ghost-SDK packages no issue
2020-04-03 12:43:35 +03:00
webidl-conversions "^6.0.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
whatwg-encoding "^1.0.5"
Bumped and pinned version for @tryghost/html-to-mobiledoc no issue
2019-02-15 22:07:01 +03:00
whatwg-mimetype "^2.3.0"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
whatwg-url "^8.0.0"
Updated Ghost-SDK packages no issue
2020-04-03 12:43:35 +03:00
ws "^7.2.3"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
xml-name-validator "^3.0.0"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
json-buffer@3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/json-buffer/-/json-buffer-3.0.0.tgz#5b1f397afc75d677bde8bcfc0e47e1f9a3d9a898"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Wx85evx11ne96Lz8Dkfh+aPZqJg=
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
json-buffer@3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/json-buffer/-/json-buffer-3.0.1.tgz#9338802a30d3b6605fbe0613e094008ca8c05a13"
integrity sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
json-parse-better-errors@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/json-parse-better-errors/-/json-parse-better-errors-1.0.2.tgz#bb867cfb3450e69107c131d1c514bab3dc8bcaa9"
integrity sha512-mrqyZKfX5EhL7hvqcV6WG1yYjnjeuYDzDhhcAAUrq8Po85NBQBJP+ZDUT75qZQ98IkUoBqdkExkukOU7Ts2wrw==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
json-schema-traverse@^0.4.1:
version "0.4.1"
resolved "https://registry.yarnpkg.com/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz#69f6a87d9513ab8bb8fe63bdb0979c448e684660"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
json-schema@0.2.3:
version "0.2.3"
resolved "https://registry.yarnpkg.com/json-schema/-/json-schema-0.2.3.tgz#b480c892e59a2f05954ce727bd3f2a4e882f9e13"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-tIDIkuWaLwWVTOcnvT8qTogvnhM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
json-stable-stringify-without-jsonify@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz#9db7b59496ad3f3cfef30a75142d2d930ad72651"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-nbe1lJatPzz+8wp1FC0tkwrXJlE=
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
json-stringify-safe@5.0.x, json-stringify-safe@^5.0.1, json-stringify-safe@~5.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "5.0.1"
resolved "https://registry.yarnpkg.com/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz#1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Epai1Y/UXxmg9s4B1lcB4sc1tus=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 10:51:54 +03:00
jsonfile@^3.0.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "3.0.1"
resolved "https://registry.yarnpkg.com/jsonfile/-/jsonfile-3.0.1.tgz#a5ecc6f65f53f662c4415c7675a0331d0992ec66"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-pezG9l9T9mLEQVx2daAzHQmS7GY=
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 10:51:54 +03:00
optionalDependencies:
graceful-fs "^4.1.6"
Bumped gscan version to 2.6.0 no issue - Updated valid theme fixture to be inline with warning that was added when using {{each}} helper instead of {{foreach}}
2019-05-08 17:56:22 +03:00
jsonfile@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/jsonfile/-/jsonfile-4.0.0.tgz#8771aae0799b64076b76640fca058f9c10e33ecb"
integrity sha1-h3Gq4HmbZAdrdmQPygWPnBDjPss=
optionalDependencies:
graceful-fs "^4.1.6"
Update dependency fs-extra to v9
2020-03-19 18:40:31 +03:00
jsonfile@^6.0.1:
version "6.0.1"
resolved "https://registry.yarnpkg.com/jsonfile/-/jsonfile-6.0.1.tgz#98966cba214378c8c84b82e085907b40bf614179"
integrity sha512-jR2b5v7d2vIOust+w3wtFKZIfpC2pnRmFAhAC/BuweZFQR8qZzxH1OyrQ10HmdVYiXWkYUqPVsz91cG7EL2FBg==
dependencies:
universalify "^1.0.0"
optionalDependencies:
graceful-fs "^4.1.6"
Update dependency jsonpath to v1.0.2
2019-07-02 13:28:29 +03:00
jsonpath@1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/jsonpath/-/jsonpath-1.0.2.tgz#e6aae681d03e9a77b4651d5d96eac5fc63b1fd13"
integrity sha512-rmzlgFZiQPc6q4HDyK8s9Qb4oxBnI5sF61y/Co5PV0lc3q2bIuRsNdueVbhoSHdKM4fxeimphOAtfz47yjCfeA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
esprima "1.2.2"
Update dependency jsonpath to v1.0.2
2019-07-02 13:28:29 +03:00
static-eval "2.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
underscore "1.7.0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
jsonwebtoken@8.5.1, jsonwebtoken@^8.1.0, jsonwebtoken@^8.5.1:
Update dependency jsonwebtoken to v8.5.1
2019-07-02 03:41:06 +03:00
version "8.5.1"
resolved "https://registry.yarnpkg.com/jsonwebtoken/-/jsonwebtoken-8.5.1.tgz#00e71e0b8df54c2121a1f26137df2280673bcc0d"
integrity sha512-XjwVfRS6jTMsqYs0EsuJ4LGxXV14zQybNd4L2r0UvbVnSF9Af8x7p5MzbJ90Ioz/9TI41/hTCvznF/loiSzn8w==
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
dependencies:
Update dependency jsonwebtoken to v8.5.1
2019-07-02 03:41:06 +03:00
jws "^3.2.2"
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
lodash.includes "^4.3.0"
lodash.isboolean "^3.0.3"
lodash.isinteger "^4.0.4"
lodash.isnumber "^3.0.3"
lodash.isplainobject "^4.0.6"
lodash.isstring "^4.0.1"
lodash.once "^4.0.0"
ms "^2.1.1"
Update dependency jsonwebtoken to v8.5.1
2019-07-02 03:41:06 +03:00
semver "^5.6.0"
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
jsprim@^1.2.2:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.4.1"
resolved "https://registry.yarnpkg.com/jsprim/-/jsprim-1.4.1.tgz#313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-MT5mvB5cwG5Di8G3SZwuXFastqI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
assert-plus "1.0.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
extsprintf "1.3.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
json-schema "0.2.3"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
verror "1.10.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
juice@6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/juice/-/juice-6.0.0.tgz#cd8f8fe5210ef129d186fe2c41c0ec169f7b07b6"
integrity sha512-5T3JPgXYiw6A6axsb9E09Gzq46WbfJeDirY6nMrqY55iAdqEoPDxSr1GpXqYfoyndx4ujpBPXGLzBRzbiqOOaw==
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
dependencies:
cheerio "^0.22.0"
commander "^2.15.1"
cross-spawn "^6.0.5"
deep-extend "^0.6.0"
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
mensch "^0.3.4"
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
slick "^1.12.2"
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
web-resource-inliner "^4.3.3"
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
just-extend@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/just-extend/-/just-extend-4.0.2.tgz#f3f47f7dfca0f989c55410a7ebc8854b07108afc"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-FrLwOgm+iXrPV+5zDU6Jqu4gCRXbWEQg2O3SKONsWE4w7AXFRkryS53bpWdaL9cNol+AmR3AEYz6kn+o0fCPnw==
Added API Key auth middleware to v2 Admin API (#10006) refs #9865 - Added `auth.authenticate.authenticateAdminApiKey` middleware - accepts signed JWT in an `Authorization: Ghost [token]` header - sets `req.api_key` if the token is valid - Updated `authenticatePrivate` middleware stack for v2 admin routes
2019-01-18 15:45:06 +03:00
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
jwa@^1.4.1:
version "1.4.1"
resolved "https://registry.yarnpkg.com/jwa/-/jwa-1.4.1.tgz#743c32985cb9e98655530d53641b66c8645b039a"
integrity sha512-qiLX/xhEEFKUAJ6FiBMbes3w9ATzyk5W7Hvzpa/SLYdxNtng+gcurvrI7TbACjIXlsJyr05/S1oUhZrc63evQA==
dependencies:
buffer-equal-constant-time "1.0.1"
ecdsa-sig-formatter "1.0.11"
safe-buffer "^5.0.1"
Update dependency jwks-rsa to v1.8.0
2020-04-13 21:47:44 +03:00
jwks-rsa@1.8.0:
version "1.8.0"
resolved "https://registry.yarnpkg.com/jwks-rsa/-/jwks-rsa-1.8.0.tgz#4b13d962f82128ed06e30c7cc9d3a04652c1ec7c"
integrity sha512-+HYROHD5fsYQCNrJ37RSr2NjbN2/V9YT+yVF3oJxLmPIZWrmp1SOl1hMw2RcuNh+LGA2bGZIhRKGiMjhQa/b7Q==
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
dependencies:
"@types/express-jwt" "0.0.42"
Update dependency jwks-rsa to v1.8.0
2020-04-13 21:47:44 +03:00
axios "^0.19.2"
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
debug "^4.1.0"
jsonwebtoken "^8.5.1"
limiter "^1.1.4"
lru-memoizer "^2.0.1"
ms "^2.1.2"
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
jws@^3.2.2:
version "3.2.2"
resolved "https://registry.yarnpkg.com/jws/-/jws-3.2.2.tgz#001099f3639468c9414000e99995fa52fb478304"
integrity sha512-YHlZCB6lMTllWDtSPHz/ZXTsi8S00usEV6v1tjq8tOUZzw7DpSDWVXjXDre6ed1w/pd495ODpHZYSdkRTsa0HA==
dependencies:
jwa "^1.4.1"
safe-buffer "^5.0.1"
Installed @tryghost/members-api@0.8.3 no-issue This improves logging for webhook signature validation
2019-10-30 13:24:04 +03:00
keygrip@~1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/keygrip/-/keygrip-1.1.0.tgz#871b1681d5e159c62a445b0c74b615e0917e7226"
integrity sha512-iYSchDJ+liQ8iwbSI2QqsQOvqv58eJCEanyJPJi+Khyu8smkcKSFUCbPwzFcL7YVtZ6eONjqRX/38caJ7QjRAQ==
dependencies:
tsscmp "1.0.6"
Revert "Replaced keypair with rsa-keypair module (#10758)" This reverts commit 64735693beda5800bc81fdcd610d71a84ca36896. - `rsa-keypair` is a binary dependency that was failing to install for a lot of users, reverting for now so we can look at alternative options for speeding up boot time
2019-06-26 15:58:50 +03:00
keypair@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/keypair/-/keypair-1.0.1.tgz#7603719270afb6564ed38a22087a06fc9aa4ea1b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-dgNxknCvtlZO04oiCHoG/Jqk6hs=
Revert "Replaced keypair with rsa-keypair module (#10758)" This reverts commit 64735693beda5800bc81fdcd610d71a84ca36896. - `rsa-keypair` is a binary dependency that was failing to install for a lot of users, reverting for now so we can look at alternative options for speeding up boot time
2019-06-26 15:58:50 +03:00
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
keyv@^3.0.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/keyv/-/keyv-3.1.0.tgz#ecc228486f69991e49e9476485a5be1e8fc5c4d9"
integrity sha512-9ykJ/46SN/9KPM/sichzQ7OvXyGDYKGTaDlKMGCAlg2UK8KRy4jb0d8sFc+0Tt0YYnThq8X2RZgCg74RPxgcVA==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
json-buffer "3.0.0"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
keyv@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/keyv/-/keyv-4.0.0.tgz#2d1dab694926b2d427e4c74804a10850be44c12f"
integrity sha512-U7ioE8AimvRVLfw4LffyOIRhL2xVgmE8T22L6i0BucSnBUyv4w+I7VN/zVZwRKHOI6ZRUcdMdWHQ8KSUvGpEog==
dependencies:
json-buffer "3.0.1"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
kind-of@^3.0.2, kind-of@^3.0.3, kind-of@^3.2.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "3.2.2"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-3.2.2.tgz#31ea21a734bab9bbb0f32466d893aea51e4a3c64"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-MeohpzS6ubuw8yRm2JOupR5KPGQ=
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
dependencies:
is-buffer "^1.1.5"
kind-of@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-4.0.0.tgz#20813df3d712928b207378691a45066fae72dd57"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IIE989cSkosgc3hpGkUGb65y3Vc=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
is-buffer "^1.1.5"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
kind-of@^5.0.0:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
version "5.1.0"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-5.1.0.tgz#729c91e2d857b7a419a1f9aa65685c4c33f5845d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-NGEErnH6F2vUuXDh+OlbcKW7/wOcfdRHaZ7VWtqCztfHri/++YKmP51OdWeGPuqCOba6kk2OTe5d02VmTB80Pw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
kind-of@^6.0.0, kind-of@^6.0.2:
version "6.0.2"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-6.0.2.tgz#01146b36a6218e64e58f3a8d66de5d7fc6f6d051"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-s5kLOcnH0XqDO+FvuaLX8DDjZ18CGFk7VygH40QoKPUQhW4e2rvM0rwUq0t8IQDOwYSeLK01U90OjzBTme2QqA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
kleur@^3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/kleur/-/kleur-3.0.3.tgz#a79c9ecc86ee1ce3fa6206d1216c501f147fc07e"
integrity sha512-eTIzlVOSUR+JxdDFepEYcBMtZ9Qqdef+rnzWdRZuMbOywu5tO2w2N7rqjoANZ5k9vywhL6Br1VRjUIgTQx4E8w==
Update dependency knex-migrator to v3.4.4
2020-04-14 18:21:50 +03:00
knex-migrator@3.4.4:
version "3.4.4"
resolved "https://registry.yarnpkg.com/knex-migrator/-/knex-migrator-3.4.4.tgz#2a34e20e57236b46b58bfea170f44b45d7b3f93a"
integrity sha512-2JpEIFQkrj+dtRp12QwacIz+7saCXQcO0WxeQ6sjllUtNbChpwYDZL0HJgZXw7GRS3poj1E9wjht2qykBXAchg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency knex-migrator to v3.4.4
2020-04-14 18:21:50 +03:00
bluebird "3.7.2"
commander "2.20.3"
compare-ver "2.0.2"
debug "4.1.1"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
ghost-ignition "4.1.0"
Update dependency knex-migrator to v3.4.4
2020-04-14 18:21:50 +03:00
knex "0.20.14"
lodash "4.17.15"
moment "2.24.0"
nconf "0.10.0"
resolve "1.15.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
optionalDependencies:
Update dependency knex-migrator to v3.4.4
2020-04-14 18:21:50 +03:00
mysql "2.18.1"
sqlite3 "4.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency knex to v0.20.14
2020-04-14 05:32:48 +03:00
knex@0.20.14:
version "0.20.14"
resolved "https://registry.yarnpkg.com/knex/-/knex-0.20.14.tgz#607d46a067f37ba2ea50be9aa8fbffef9ff72d12"
integrity sha512-RUBIydapgYGguzuw/YQ3+9TPm6d1qkzEQ7XlmLdFuVkn6GsaZhDHSNX1ycInRZZT8j2blHb7YjTXgLKRCHMI0Q==
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
dependencies:
Update dependency knex to v0.19.3
2019-09-02 03:32:28 +03:00
colorette "1.1.0"
Update dependency knex to v0.20.13
2020-04-01 20:10:27 +03:00
commander "^4.1.1"
Update dependency knex to v0.20.15
2020-04-16 01:54:22 +03:00
debug "4.1.1"
esm "^3.2.25"
getopts "2.2.5"
inherits "~2.0.4"
interpret "^2.0.0"
liftoff "3.1.0"
lodash "^4.17.15"
mkdirp "^0.5.1"
pg-connection-string "2.1.0"
tarn "^2.0.0"
tildify "2.0.0"
uuid "^7.0.1"
v8flags "^3.1.3"
knex@0.20.15:
version "0.20.15"
resolved "https://registry.yarnpkg.com/knex/-/knex-0.20.15.tgz#b7e9e1efd9cf35d214440d9439ed21153574679d"
integrity sha512-WHmvgfQfxA5v8pyb9zbskxCS1L1WmYgUbwBhHojlkmdouUOazvroUWlCr6KIKMQ8anXZh1NXOOtIUMnxENZG5Q==
dependencies:
colorette "1.1.0"
commander "^4.1.1"
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
debug "4.1.1"
Update dependency knex to v0.20.13
2020-04-01 20:10:27 +03:00
esm "^3.2.25"
Update dependency knex to v0.19.3
2019-09-02 03:32:28 +03:00
getopts "2.2.5"
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
inherits "~2.0.4"
Update dependency knex to v0.20.13
2020-04-01 20:10:27 +03:00
interpret "^2.0.0"
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
liftoff "3.1.0"
Update dependency knex to v0.19.1
2019-07-29 03:28:52 +03:00
lodash "^4.17.15"
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
mkdirp "^0.5.1"
Update dependency knex to v0.19.3
2019-09-02 03:32:28 +03:00
pg-connection-string "2.1.0"
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
tarn "^2.0.0"
tildify "2.0.0"
Update dependency knex to v0.20.13
2020-04-01 20:10:27 +03:00
uuid "^7.0.1"
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
v8flags "^3.1.3"
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
knex@^0.17:
version "0.17.6"
resolved "https://registry.yarnpkg.com/knex/-/knex-0.17.6.tgz#80220cf159cd52768d5b29118c70b18aaf5138fe"
integrity sha512-4SKp8jaBxqlEoaveenmpfnHEv5Kzo6/vhIj8UhW1srGw/FKqARTr+7Fv8C1C1qeVHDjv0coQWuUzN5eermHUsw==
dependencies:
"@babel/polyfill" "^7.4.4"
"@types/bluebird" "^3.5.27"
bluebird "^3.5.5"
colorette "1.0.8"
commander "^2.20.0"
debug "4.1.1"
getopts "2.2.4"
inherits "~2.0.3"
interpret "^1.2.0"
liftoff "3.1.0"
lodash "^4.17.11"
mkdirp "^0.5.1"
pg-connection-string "2.0.0"
tarn "^1.1.5"
tildify "1.2.0"
uuid "^3.3.2"
v8flags "^3.1.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lazystream@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/lazystream/-/lazystream-1.0.0.tgz#f6995fe0f820392f61396be89462407bb77168e4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-9plf4PggOS9hOWvolGJAe7dxaOQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
readable-stream "^2.0.5"
lcid@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/lcid/-/lcid-1.0.0.tgz#308accafa0bc483a3867b4b6f2b9506251d1b835"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-MIrMr6C8SDo4Z7S28rlQYlHRuDU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
invert-kv "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
levn@^0.3.0, levn@~0.3.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.3.0"
resolved "https://registry.yarnpkg.com/levn/-/levn-0.3.0.tgz#3b09924edf9f083c0490fdd4c0bc4421e04764ee"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-OwmSTt+fCDwEkP3UwLxEIeBHZO4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
prelude-ls "~1.1.2"
type-check "~0.3.2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
liftoff@3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/liftoff/-/liftoff-3.1.0.tgz#c9ba6081f908670607ee79062d700df062c52ed3"
integrity sha512-DlIPlJUkCV0Ips2zf2pJP0unEoT1kwYhiiPUGF3s/jtxTCjziNLoiVVh+jqWOWeFi6mmwQ5fNxvAUyPad4Dfog==
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
dependencies:
extend "^3.0.0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
findup-sync "^3.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
fined "^1.0.1"
flagged-respawn "^1.0.0"
is-plain-object "^2.0.4"
object.map "^1.0.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
rechoir "^0.6.2"
resolve "^1.1.7"
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
limiter@^1.1.4:
version "1.1.5"
resolved "https://registry.yarnpkg.com/limiter/-/limiter-1.1.5.tgz#8f92a25b3b16c6131293a0cc834b4a838a2aa7c2"
integrity sha512-FWWMIEOxz3GwUI4Ts/IvgVy6LPvoMPgjMdQ185nN6psJyBJ4yOpzqm695/h5umdLJg2vW3GR5iG11MAkR2AzJA==
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
linkify-it@^2.0.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "2.2.0"
resolved "https://registry.yarnpkg.com/linkify-it/-/linkify-it-2.2.0.tgz#e3b54697e78bf915c70a38acd78fd09e0058b1cf"
integrity sha512-GnAl/knGn+i1U/wjBz3akz2stz+HrHLsxMwHQGofCDfPvlf+gDKN58UtfmUquTY4/MXeE2x7k19KQmeoZi94Iw==
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
dependencies:
uc.micro "^1.0.1"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
livereload-js@^2.3.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "2.4.0"
resolved "https://registry.yarnpkg.com/livereload-js/-/livereload-js-2.4.0.tgz#447c31cf1ea9ab52fc20db615c5ddf678f78009c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-XPQH8Z2GDP/Hwz2PCDrh2mth4yFejwA1OZ/81Ti3LgKyhDcEjsSsqFWZojHG0va/duGd+WyosY7eXLDoOyqcPw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
load-json-file@^1.0.0:
version "1.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/load-json-file/-/load-json-file-1.1.0.tgz#956905708d58b4bab4c2261b04f59f31c99374c0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-lWkFcI1YtLq0wiYbBPWfMcmTdMA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
graceful-fs "^4.1.2"
parse-json "^2.2.0"
pify "^2.0.0"
pinkie-promise "^2.0.0"
strip-bom "^2.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
locate-path@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/locate-path/-/locate-path-2.0.0.tgz#2b568b265eec944c6d9c0de9c3dbbbca0354cd8e"
integrity sha1-K1aLJl7slExtnA3pw9u7ygNUzY4=
dependencies:
p-locate "^2.0.0"
path-exists "^3.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
locate-path@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/locate-path/-/locate-path-3.0.0.tgz#dbec3b3ab759758071b58fe59fc41871af21400e"
integrity sha512-7AO748wWnIhNqAuaty2ZWHkQHRSNfPVIsPIfwEOWO22AmaoVrWavlOcMR5nzTLNYvp36X220/maaRsrec1G65A==
dependencies:
p-locate "^3.0.0"
path-exists "^3.0.0"
Updated to use count words/images helpers from SDK (#10686) refs #10618 - Added @tryghost/helpers dependency to use Ghost-SDK helpers - Updated countWords, countImages helpers and removed local copy
2019-04-16 05:30:01 +03:00
lodash-es@^4.17.11:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "4.17.15"
resolved "https://registry.yarnpkg.com/lodash-es/-/lodash-es-4.17.15.tgz#21bd96839354412f23d7a10340e5eac6ee455d78"
integrity sha512-rlrc3yU3+JNOpZ9zj5pQtxnx2THmvRykwL4Xlxoa8I9lHBlVbbyPhgyPMioxVZ4NqyxaVVtaJnzsyOidQIhyyQ==
Updated to use count words/images helpers from SDK (#10686) refs #10618 - Added @tryghost/helpers dependency to use Ghost-SDK helpers - Updated countWords, countImages helpers and removed local copy
2019-04-16 05:30:01 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.assignin@^4.0.9:
version "4.2.0"
resolved "https://registry.yarnpkg.com/lodash.assignin/-/lodash.assignin-4.2.0.tgz#ba8df5fb841eb0a3e8044232b0e263a8dc6a28a2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-uo31+4QesKPoBEIysOJjqNxqKKI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.bind@^4.1.4:
version "4.2.1"
resolved "https://registry.yarnpkg.com/lodash.bind/-/lodash.bind-4.2.1.tgz#7ae3017e939622ac31b7d7d7dcb1b34db1690d35"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-euMBfpOWIqwxt9fX3LGzTbFpDTU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
lodash.clonedeep@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.clonedeep/-/lodash.clonedeep-4.5.0.tgz#e23f3f9c4f8fbdde872529c1071857a086e5ccef"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-4j8/nE+Pvd6HJSnBBxhXoIblzO8=
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
lodash.defaults@^4.0.0, lodash.defaults@^4.0.1, lodash.defaults@^4.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "4.2.0"
resolved "https://registry.yarnpkg.com/lodash.defaults/-/lodash.defaults-4.2.0.tgz#d09178716ffea4dde9e5fb7b37f6f0802274580c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-0JF4cW/+pN3p5ft7N/bwgCJ0WAw=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
lodash.difference@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.difference/-/lodash.difference-4.5.0.tgz#9ccb4e505d486b91651345772885a2df27fd017c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-nMtOUF1Ia5FlE0V3KIWi3yf9AXw=
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
lodash.escaperegexp@^4.1.2:
version "4.1.2"
resolved "https://registry.yarnpkg.com/lodash.escaperegexp/-/lodash.escaperegexp-4.1.2.tgz#64762c48618082518ac3df4ccf5d5886dae20347"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ZHYsSGGAglGKw99Mz11YhtriA0c=
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.filter@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.filter/-/lodash.filter-4.6.0.tgz#668b1d4981603ae1cc5a6fa760143e480b4c4ace"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ZosdSYFgOuHMWm+nYBQ+SAtMSs4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
lodash.flatten@^4.2.0, lodash.flatten@^4.4.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "4.4.0"
resolved "https://registry.yarnpkg.com/lodash.flatten/-/lodash.flatten-4.4.0.tgz#f31c22225a9632d2bbf8e4addbef240aa765a61f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8xwiIlqWMtK7+OSt2+8kCqdlph8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.foreach@^4.3.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.foreach/-/lodash.foreach-4.5.0.tgz#1a6a35eace401280c7f06dddec35165ab27e3e53"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Gmo16s5AEoDH8G3d7DUWWrJ+PlM=
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
lodash.get@^4.4.2:
version "4.4.2"
resolved "https://registry.yarnpkg.com/lodash.get/-/lodash.get-4.4.2.tgz#2d177f652fa31e939b4438d5341499dfa3825e99"
integrity sha1-LRd/ZS+jHpObRDjVNBSZ36OCXpk=
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
lodash.includes@^4.3.0:
version "4.3.0"
resolved "https://registry.yarnpkg.com/lodash.includes/-/lodash.includes-4.3.0.tgz#60bb98a87cb923c68ca1e51325483314849f553f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-YLuYqHy5I8aMoeUTJUgzFISfVT8=
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
lodash.isboolean@^3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/lodash.isboolean/-/lodash.isboolean-3.0.3.tgz#6c2e171db2a257cd96802fd43b01b20d5f5870f6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-bC4XHbKiV82WgC/UOwGyDV9YcPY=
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
lodash.isinteger@^4.0.4:
version "4.0.4"
resolved "https://registry.yarnpkg.com/lodash.isinteger/-/lodash.isinteger-4.0.4.tgz#619c0af3d03f8b04c31f5882840b77b11cd68343"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-YZwK89A/iwTDH1iChAt3sRzWg0M=
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
lodash.isnumber@^3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/lodash.isnumber/-/lodash.isnumber-3.0.3.tgz#3ce76810c5928d03352301ac287317f11c0b1ffc"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-POdoEMWSjQM1IwGsKHMX8RwLH/w=
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
lodash.isplainobject@^4.0.6:
version "4.0.6"
resolved "https://registry.yarnpkg.com/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz#7c526a52d89b45c45cc690b88163be0497f550cb"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-fFJqUtibRcRcxpC4gWO+BJf1UMs=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
lodash.isstring@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/lodash.isstring/-/lodash.isstring-4.0.1.tgz#d527dfb5456eca7cc9bb95d5daeaf88ba54a5451"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-1SfftUVuynzJu5XV2ur4i6VKVFE=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.map@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.map/-/lodash.map-4.6.0.tgz#771ec7839e3473d9c4cde28b19394c3562f4f6d3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-dx7Hg540c9nEzeKLGTlMNWL09tM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
lodash.memoize@^4.1.2:
version "4.1.2"
resolved "https://registry.yarnpkg.com/lodash.memoize/-/lodash.memoize-4.1.2.tgz#bcc6c49a42a2840ed997f323eada5ecd182e0bfe"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-vMbEmkKihA7Zl/Mj6tpezRguC/4=
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency node-jose to v1.1.3
2019-07-02 03:37:57 +03:00
lodash.merge@^4.4.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "4.6.2"
resolved "https://registry.yarnpkg.com/lodash.merge/-/lodash.merge-4.6.2.tgz#558aa53b43b661e1925a0afdfa36a9a1085fe57a"
integrity sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency sanitize-html to v1.22.1
2020-03-16 09:15:10 +03:00
lodash.mergewith@^4.6.2:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "4.6.2"
resolved "https://registry.yarnpkg.com/lodash.mergewith/-/lodash.mergewith-4.6.2.tgz#617121f89ac55f59047c7aec1ccd6654c6590f55"
integrity sha512-GK3g5RPZWTRSeLSpgP8Xhra+pnjBC56q9FZYe1d5RN3TJ35dbkGy3YqBSMbyCrlbi+CM9Z3Jk5yTL7RCsqboyQ==
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
lodash.once@^4.0.0:
version "4.1.1"
resolved "https://registry.yarnpkg.com/lodash.once/-/lodash.once-4.1.1.tgz#0dd3971213c7c56df880977d504c88fb471a97ac"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-DdOXEhPHxW34gJd9UEyI+0cal6w=
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
Update dependency node-jose to v1.1.3
2019-07-02 03:37:57 +03:00
lodash.pick@^4.2.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "4.4.0"
resolved "https://registry.yarnpkg.com/lodash.pick/-/lodash.pick-4.4.0.tgz#52f05610fff9ded422611441ed1fc123a03001b3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-UvBWEP/53tQiYRRB7R/BI6AwAbM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.reduce@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.reduce/-/lodash.reduce-4.6.0.tgz#f1ab6b839299ad48f784abbf476596f03b914d3b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8atrg5KZrUj3hKu/R2WW8DuRTTs=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.reject@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.reject/-/lodash.reject-4.6.0.tgz#80d6492dc1470864bbf583533b651f42a9f52415"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-gNZJLcFHCGS79YNTO2UfQqn1JBU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
lodash.set@^4.0.0:
version "4.3.2"
resolved "https://registry.yarnpkg.com/lodash.set/-/lodash.set-4.3.2.tgz#d8757b1da807dde24816b0d6a84bea1a76230b23"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-2HV7HagH3eJIFrDWqEvqGnYjCyM=
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.some@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.some/-/lodash.some-4.6.0.tgz#1bb9f314ef6b8baded13b549169b2a945eb68e4d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-G7nzFO9ri63tE7VJFpsqlF62jk0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
lodash.sortby@^4.7.0:
version "4.7.0"
resolved "https://registry.yarnpkg.com/lodash.sortby/-/lodash.sortby-4.7.0.tgz#edd14c824e2cc9c1e0b0a1b42bb5210516a42438"
integrity sha1-7dFMgk4sycHgsKG0K7UhBRakJDg=
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
lodash.unescape@^4.0.0, lodash.unescape@^4.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "4.0.1"
resolved "https://registry.yarnpkg.com/lodash.unescape/-/lodash.unescape-4.0.1.tgz#bf2249886ce514cda112fae9218cdc065211fc9c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-vyJJiGzlFM2hEvrpIYzcBlIR/Jw=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
lodash.union@^4.6.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.union/-/lodash.union-4.6.0.tgz#48bb5088409f16f1821666641c44dd1aaae3cd88"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-SLtQiECfFvGCFmZkHETdGqrjzYg=
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
lodash.uniq@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.uniq/-/lodash.uniq-4.5.0.tgz#d0225373aeb652adc1bc82e4945339a842754773"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-0CJTc662Uq3BvILklFM5qEJ1R3M=
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
lodash@4.17.15, lodash@^4.14.2, lodash@^4.15.0, lodash@^4.16.4, lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.12, lodash@^4.17.13, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.7.0, lodash@^4.8.0, lodash@~4.17.10, lodash@~4.17.15, lodash@~4.17.5:
Update dependency lodash to v4.17.15
2019-07-22 03:31:47 +03:00
version "4.17.15"
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.15.tgz#b447f6670a0455bbfeedd11392eff330ea097548"
integrity sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
log-symbols@3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/log-symbols/-/log-symbols-3.0.0.tgz#f3a08516a5dea893336a7dee14d18a1cfdab77c4"
integrity sha512-dSkNGuI7iG3mfvDzUuYZyvk5dD9ocYCYzNU6CYDE6+Xqd+gwme6Z00NS3dUh8mq/73HaEtT7m6W+yUPtU6BZnQ==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
dependencies:
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
chalk "^2.4.2"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
long-timeout@~0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/long-timeout/-/long-timeout-0.1.1.tgz#9721d788b47e0bcb5a24c2e2bee1a0da55dab514"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-lyHXiLR+C8taJMLivuGg2lXatRQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
long@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/long/-/long-4.0.0.tgz#9a7b71cfb7d361a194ea555241c92f7468d5bf28"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-XsP+KhQif4bjX1kbuSiySJFNAehNxgLb6hPRGJ9QsUr8ajHkuXGdrHmFUTUUXhDwVX2R5bY4JNZEwbUiMhV+MA==
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
longest-streak@^2.0.1:
version "2.0.3"
resolved "https://registry.yarnpkg.com/longest-streak/-/longest-streak-2.0.3.tgz#3de7a3f47ee18e9074ded8575b5c091f5d0a4105"
integrity sha512-9lz5IVdpwsKLMzQi0MQ+oD9EA0mIGcWYP7jXMTZVXP8D42PwuAk+M/HBFYQoxt1G5OR8m7aSIgb1UymfWGBWEw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
loud-rejection@^1.0.0:
version "1.6.0"
resolved "https://registry.yarnpkg.com/loud-rejection/-/loud-rejection-1.6.0.tgz#5b46f80147edee578870f086d04821cf998e551f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-W0b4AUft7leIcPCG0Eghz5mOVR8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
currently-unhandled "^0.4.1"
signal-exit "^3.0.0"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
lower-case@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/lower-case/-/lower-case-2.0.1.tgz#39eeb36e396115cc05e29422eaea9e692c9408c7"
integrity sha512-LiWgfDLLb1dwbFQZsSglpRj+1ctGnayXz3Uv0/WO8n558JycT5fg6zkNcnW0G68Nn0aEldTFeEfmjCfmqry/rQ==
dependencies:
tslib "^1.10.0"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
lowercase-keys@^1.0.0, lowercase-keys@^1.0.1:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/lowercase-keys/-/lowercase-keys-1.0.1.tgz#6f9e30b47084d971a7c820ff15a6c5167b74c26f"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
integrity sha512-G2Lj61tXDnVFFOi8VZds+SoQjtQC3dgokKdDG2mTm1tx4m50NUHBOZSBwQQHyy0V12A0JTG4icfZQH+xPyh8VA==
lowercase-keys@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/lowercase-keys/-/lowercase-keys-2.0.0.tgz#2603e78b7b4b0006cbca2fbcc8a3202558ac9479"
integrity sha512-tqNXrS78oMOE73NMxK4EMLQsQowWf8jKooH9g7xPavRT706R6bkQJ6DY2Te7QukaZsulxa30wQ7bk0pm4XiHmA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated express-hbs to 2.1.2 no-issue ronseal.
2019-05-20 13:35:04 +03:00
lru-cache@^4.0.0, lru-cache@^4.0.1, lru-cache@^4.1.5:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "4.1.5"
resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-4.1.5.tgz#8bbe50ea85bed59bc9e33dcab8235ee9bcf443cd"
Updated express-hbs to 2.1.2 no-issue ronseal.
2019-05-20 13:35:04 +03:00
integrity sha512-sWZlbEP2OsHNkXrMl5GYk/jKk70MBng6UU4YI/qGDYbgf6YbP4EvmqISbXCoJiRKs+1bSpFHVgQxvJ17F2li5g==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
pseudomap "^1.0.2"
yallist "^2.1.2"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
lru-cache@^5.1.1:
version "5.1.1"
resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-5.1.1.tgz#1da27e6710271947695daf6848e847f01d84b920"
integrity sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==
dependencies:
yallist "^3.0.2"
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
lru-cache@~4.0.0:
version "4.0.2"
resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-4.0.2.tgz#1d17679c069cda5d040991a09dbc2c0db377e55e"
integrity sha1-HRdnnAac2l0ECZGgnbwsDbN35V4=
dependencies:
pseudomap "^1.0.1"
yallist "^2.0.0"
lru-memoizer@^2.0.1:
version "2.1.0"
resolved "https://registry.yarnpkg.com/lru-memoizer/-/lru-memoizer-2.1.0.tgz#2551b29d5181188695d30f12f6a56fad5b418b61"
integrity sha512-oKjxgJhL+m1wfEkez7/a6iyRZUdohej+2u04qCaAQ7BBfx/qD4RH3jOQhPsd8Y3pcm7IhcNtE3kCEIDCMPiJFQ==
dependencies:
lodash.clonedeep "^4.5.0"
lru-cache "~4.0.0"
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
lru_map@^0.3.3:
version "0.3.3"
resolved "https://registry.yarnpkg.com/lru_map/-/lru_map-0.3.3.tgz#b5c8351b9464cbd750335a79650a0ec0e56118dd"
integrity sha1-tcg1G5Rky9dQM1p5ZQoOwOVhGN0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
mailcomposer@~0.2.10:
version "0.2.12"
resolved "https://registry.yarnpkg.com/mailcomposer/-/mailcomposer-0.2.12.tgz#4d02a604616adcb45fb36d37513f4c1bd0b75681"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-TQKmBGFq3LRfs203UT9MG9C3VoE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
dkim-signer "~0.1.1"
follow-redirects "0.0.3"
he "~0.3.6"
mime "~1.2.11"
mimelib "~0.2.15"
Updated yarn.lock
2019-11-18 14:10:39 +03:00
mailgun-js@0.22.0:
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
version "0.22.0"
resolved "https://registry.yarnpkg.com/mailgun-js/-/mailgun-js-0.22.0.tgz#128942b5e47a364a470791608852bf68c96b3a05"
integrity sha512-a2alg5nuTZA9Psa1pSEIEsbxr1Zrmqx4VkgGCQ30xVh0kIH7Bu57AYILo+0v8QLSdXtCyLaS+KVmdCrQo0uWFA==
dependencies:
async "^2.6.1"
debug "^4.1.0"
form-data "^2.3.3"
inflection "~1.12.0"
is-stream "^1.1.0"
path-proxy "~1.0.0"
promisify-call "^2.0.2"
proxy-agent "^3.0.3"
tsscmp "^1.0.6"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
make-iterator@^1.0.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/make-iterator/-/make-iterator-1.0.1.tgz#29b33f312aa8f547c4a5e490f56afcec99133ad6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-pxiuXh0iVEq7VM7KMIhs5gxsfxCux2URptUQaXo4iZZJxBAzTPOLE2BumO5dbfVYq/hBJFBR/a1mFDmOx5AGmw==
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
kind-of "^6.0.2"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
map-cache@^0.2.0, map-cache@^0.2.2:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
version "0.2.2"
resolved "https://registry.yarnpkg.com/map-cache/-/map-cache-0.2.2.tgz#c32abd0bd6525d9b051645bb4f26ac5dc98a0dbf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-wyq9C9ZSXZsFFkW7TyasXcmKDb8=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
map-obj@^1.0.0, map-obj@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/map-obj/-/map-obj-1.0.1.tgz#d933ceb9205d82bdcf4886f6742bdc2b4dea146d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-2TPOuSBdgr3PSIb2dCvcK03qFG0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
map-visit@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/map-visit/-/map-visit-1.0.0.tgz#ecdca8f13144e660f1b5bd41f12f3479d98dfb8f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-7Nyo8TFE5mDxtb1B8S80edmN+48=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
object-visit "^1.0.0"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
markdown-escapes@^1.0.0:
version "1.0.3"
resolved "https://registry.yarnpkg.com/markdown-escapes/-/markdown-escapes-1.0.3.tgz#6155e10416efaafab665d466ce598216375195f5"
integrity sha512-XUi5HJhhV5R74k8/0H2oCbCiYf/u4cO/rX8tnGkRvrqhsr5BRNU6Mg0yt/8UIx1iIS8220BNJsDb7XnILhLepw==
Extracted markdown-html-renderer to @tryghost/kg-markdown-html-renderer no issue - prep for further extraction of mobiledoc cards and renderer
2020-03-25 16:34:26 +03:00
markdown-it-footnote@^3.0.2:
Update dependency markdown-it-footnote to v3.0.2
2019-07-15 03:28:17 +03:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/markdown-it-footnote/-/markdown-it-footnote-3.0.2.tgz#1575ee7a093648d4e096aa33386b058d92ac8bc1"
integrity sha512-JVW6fCmZWjvMdDQSbOT3nnOQtd9iAXmw7hTSh26+v42BnvXeVyGMDBm5b/EZocMed2MbCAHiTX632vY0FyGB8A==
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
Extracted markdown-html-renderer to @tryghost/kg-markdown-html-renderer no issue - prep for further extraction of mobiledoc cards and renderer
2020-03-25 16:34:26 +03:00
markdown-it-lazy-headers@^0.1.3:
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
version "0.1.3"
resolved "https://registry.yarnpkg.com/markdown-it-lazy-headers/-/markdown-it-lazy-headers-0.1.3.tgz#e70dd4da79c87a9ce82ca4701b8b7c0e2d72297b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-5w3U2nnIepzoLKRwG4t8Di1yKXs=
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
Extracted markdown-html-renderer to @tryghost/kg-markdown-html-renderer no issue - prep for further extraction of mobiledoc cards and renderer
2020-03-25 16:34:26 +03:00
markdown-it-mark@^3.0.0:
Update dependency markdown-it-mark to v3 (#11127)
2019-09-30 23:51:31 +03:00
version "3.0.0"
resolved "https://registry.yarnpkg.com/markdown-it-mark/-/markdown-it-mark-3.0.0.tgz#27c3e39ef3cc310b2dde5375082c9fa912983cda"
integrity sha512-HqMWeKfMMOu4zBO0emmxsoMWmbf2cPKZY1wP6FsTbKmicFfp5y4L3KXAsNeO1rM6NTJVOrNlLKMPjWzriBGspw==
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
Extracted markdown-html-renderer to @tryghost/kg-markdown-html-renderer no issue - prep for further extraction of mobiledoc cards and renderer
2020-03-25 16:34:26 +03:00
markdown-it@^10.0.0:
Update dependency markdown-it to v10 (#11126)
2019-09-30 22:22:08 +03:00
version "10.0.0"
resolved "https://registry.yarnpkg.com/markdown-it/-/markdown-it-10.0.0.tgz#abfc64f141b1722d663402044e43927f1f50a8dc"
integrity sha512-YWOP1j7UbDNz+TumYP1kpwnP0aEa711cJjrAQrzd0UXlbJfc5aAq0F/PZHjiioqDC1NKgvIMX+o+9Bk7yuM2dg==
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
dependencies:
argparse "^1.0.7"
Update dependency markdown-it to v10 (#11126)
2019-09-30 22:22:08 +03:00
entities "~2.0.0"
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
linkify-it "^2.0.0"
mdurl "^1.0.1"
Bump markdown-it to version 8.4.1 (#9484) no issue - which bumps the sub-dependency "uc.micro" to 1.0.5 - this version is now MIT licensed
2018-03-05 12:03:24 +03:00
uc.micro "^1.0.5"
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
markdown-table@^1.1.0:
version "1.1.3"
resolved "https://registry.yarnpkg.com/markdown-table/-/markdown-table-1.1.3.tgz#9fcb69bcfdb8717bfd0398c6ec2d93036ef8de60"
integrity sha512-1RUZVgQlpJSPWYbFSpmudq5nHY1doEIv89gBtF0s4gW1GF2XorxcA/70M5vq7rLv0a6mhOUccRsqkwhwLCIQ2Q==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
maxmin@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/maxmin/-/maxmin-2.1.0.tgz#4d3b220903d95eee7eb7ac7fa864e72dc09a3166"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-TTsiCQPZXu5+t6x/qGTnLcCaMWY=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
chalk "^1.0.0"
figures "^1.0.1"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
gzip-size "^3.0.0"
pretty-bytes "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
md5@^2.2.1:
version "2.2.1"
resolved "https://registry.yarnpkg.com/md5/-/md5-2.2.1.tgz#53ab38d5fe3c8891ba465329ea23fac0540126f9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-U6s41f48iJG6RlMp6iP6wFQBJvk=
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
dependencies:
charenc "~0.0.1"
crypt "~0.0.1"
is-buffer "~1.1.1"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
mdast-util-compact@^1.0.0:
version "1.0.3"
resolved "https://registry.yarnpkg.com/mdast-util-compact/-/mdast-util-compact-1.0.3.tgz#98a25cc8a7865761a41477b3a87d1dcef0b1e79d"
integrity sha512-nRiU5GpNy62rZppDKbLwhhtw5DXoFMqw9UNZFmlPsNaQCZ//WLjGKUwWMdJrUH+Se7UvtO2gXtAMe0g/N+eI5w==
dependencies:
unist-util-visit "^1.1.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
mdn-data@2.0.4:
version "2.0.4"
resolved "https://registry.yarnpkg.com/mdn-data/-/mdn-data-2.0.4.tgz#699b3c38ac6f1d728091a64650b65d388502fd5b"
integrity sha512-iV3XNKw06j5Q7mi6h+9vbx23Tv7JkjEVgKHW4pimwyDGWm0OIQntJJ+u1C6mg6mK1EaTv42XQ7w76yuzH7M2cA==
mdn-data@2.0.6:
version "2.0.6"
resolved "https://registry.yarnpkg.com/mdn-data/-/mdn-data-2.0.6.tgz#852dc60fcaa5daa2e8cf6c9189c440ed3e042978"
integrity sha512-rQvjv71olwNHgiTbfPZFkJtjNMciWgswYeciZhtvWLO8bmX3TnhyA62I6sTWOyZssWHJJjY6/KiWwqQsWWsqOA==
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
mdurl@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/mdurl/-/mdurl-1.0.1.tgz#fe85b2ec75a59037f2adfec100fd6c601761152e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-/oWy7HWlkDfyrf7BAP1sYBdhFS4=
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
media-typer@0.3.0:
version "0.3.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/media-typer/-/media-typer-0.3.0.tgz#8710d7af0aa626f8fffa1ce00168545263255748"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-hxDXrwqmJvj/+hzgAWhUUmMlV0g=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency metascraper to v5.7.14
2019-10-28 03:35:29 +03:00
memoize-one@~5.1.1:
version "5.1.1"
resolved "https://registry.yarnpkg.com/memoize-one/-/memoize-one-5.1.1.tgz#047b6e3199b508eaec03504de71229b8eb1d75c0"
integrity sha512-HKeeBpWvqiVJD57ZUAsJNm71eHTykffzcLZVYWiVfQeI1rJtuEaS7hQiEpWfVVk18donPwJEcFKIkCmPJNOhHA==
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
mensch@^0.3.4:
version "0.3.4"
resolved "https://registry.yarnpkg.com/mensch/-/mensch-0.3.4.tgz#770f91b46cb16ea5b204ee735768c3f0c491fecd"
integrity sha512-IAeFvcOnV9V0Yk+bFhYR07O3yNina9ANIN5MoXBKYJ/RLYPurd2d0yw14MDhpr9/momp0WofT1bPUh3hkzdi/g==
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
meow@^3.3.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "3.7.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/meow/-/meow-3.7.0.tgz#72cb668b425228290abbfa856892587308a801fb"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-cstmi0JSKCkKu/qFaJJYcwioAfs=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
camelcase-keys "^2.0.0"
decamelize "^1.1.2"
loud-rejection "^1.0.0"
map-obj "^1.0.1"
minimist "^1.1.3"
normalize-package-data "^2.3.4"
object-assign "^4.0.1"
read-pkg-up "^1.0.1"
redent "^1.0.0"
trim-newlines "^1.0.0"
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 16:59:06 +03:00
merge-descriptors@1.0.1, merge-descriptors@~1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/merge-descriptors/-/merge-descriptors-1.0.1.tgz#b00aaa556dd8b44568150ec9d1b953f3f90cbb61"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-sAqqVW3YtEVoFQ7J0blT8/kMu2E=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
metascraper-author@5.11.9:
version "5.11.9"
resolved "https://registry.yarnpkg.com/metascraper-author/-/metascraper-author-5.11.9.tgz#7a39b5dd5021a15dc91059317145985584947722"
integrity sha512-mEazosDcUE13nhwB5HTi5T7kBqcpx5dCtULPCTWBOX97XuFjbUFXDKU+2r8GDC2WeiICDH5Rd7UdDnz6spLAOA==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
"@metascraper/helpers" "^5.11.9"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
lodash "~4.17.15"
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
metascraper-description@5.11.9:
version "5.11.9"
resolved "https://registry.yarnpkg.com/metascraper-description/-/metascraper-description-5.11.9.tgz#388517f621e3e0d6abd9c4f68305cf556565499c"
integrity sha512-w7VqtWZ8uGUkyjDPB9MyaeehJALUu+SJ1lzA/TPuSE5moXMMOlfC0FbuyTe58hqpmFgtxeLukG23VSPs5DG+yg==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
"@metascraper/helpers" "^5.11.9"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
metascraper-image@5.11.9:
version "5.11.9"
resolved "https://registry.yarnpkg.com/metascraper-image/-/metascraper-image-5.11.9.tgz#7f51d59d999e61736a3c2a02d1637eb7c51e2af5"
integrity sha512-jvVEPJYsl1yGuTBicacyp8wlyh5XXu6yTP3uu+h/MuRA4eRIuyvkqZ2lqaQG06gsMs24XvoDsg/Vt1RV6NXQkg==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
"@metascraper/helpers" "^5.11.9"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
metascraper-logo-favicon@5.11.9:
version "5.11.9"
resolved "https://registry.yarnpkg.com/metascraper-logo-favicon/-/metascraper-logo-favicon-5.11.9.tgz#09bc43c1ffcdfcc125fe7b7fdfd24e4b8de16ad0"
integrity sha512-NWcA6cxNpcS1ewT7GlsmTC3vXSywB9UrB8vr1MF1jU5AZw/UOqhVdcNQL/NQ0m8LaWP7fb+PpJVA941Xh/Fe4Q==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
"@metascraper/helpers" "^5.11.9"
Update metascraper to v5.11.8
2020-04-06 03:17:00 +03:00
got "~10.7.0"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
lodash "~4.17.15"
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
metascraper-logo@5.11.9:
version "5.11.9"
resolved "https://registry.yarnpkg.com/metascraper-logo/-/metascraper-logo-5.11.9.tgz#ba87234a34421c7c568951a6a441566fcd1555c4"
integrity sha512-qEHiTAUryy9WBlWR/Dz1UK58xC1qbheRR3GeIgYFhGDnVSuuG5FQTWUAlFXL6f+lYUtGTRiMtdFqR+qh2IjK2Q==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
"@metascraper/helpers" "^5.11.9"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
metascraper-publisher@5.11.9:
version "5.11.9"
resolved "https://registry.yarnpkg.com/metascraper-publisher/-/metascraper-publisher-5.11.9.tgz#9842c673b56ce602c4b2ce2564bd85b19787f60f"
integrity sha512-X4qaKR5CDGa/aOX3fuyK4M7fb5mS+4XfFVXKZhTsOWhMiXEXFlK/Uu1yWshko3vDrNNsnIDoLBN9xKNozjKZfQ==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
"@metascraper/helpers" "^5.11.9"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
metascraper-title@5.11.9:
version "5.11.9"
resolved "https://registry.yarnpkg.com/metascraper-title/-/metascraper-title-5.11.9.tgz#d5a9fc96ef82c43ef0fa9be4399d6acaecce83e6"
integrity sha512-66esjrxGvxeXE3+kBbjM+ZS6sRrA2n09I7da7fvrLs9tboOPjJP9zsLIsgF1poEAKckGA/WAWXWUwsYC13tzQw==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
"@metascraper/helpers" "^5.11.9"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
lodash "~4.17.15"
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
metascraper-url@5.11.9:
version "5.11.9"
resolved "https://registry.yarnpkg.com/metascraper-url/-/metascraper-url-5.11.9.tgz#6a5181e1811409a0cc3557b05fff6bd81b6f10a9"
integrity sha512-VQkMMbpuI6vJIJQR0uPRIyywUFN5unUWOg8JY8j4CvpOYgqTw87BkNAkudVBtaUH9DHZ1WKhcjA7KYb5CYs8zQ==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
"@metascraper/helpers" "^5.11.9"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
metascraper@5.11.9:
version "5.11.9"
resolved "https://registry.yarnpkg.com/metascraper/-/metascraper-5.11.9.tgz#dd4cce71a2be9b21828ce10331809009e028d34a"
integrity sha512-KnnW50wSuy6EaLZ7jRXwSKVEmIPDP8Fhx7bt5s539DpO1TzZlr8qj06oZaA2JelLe0Hc5yfBuEvoqc4JhbDz1Q==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update metascraper to v5.11.9
2020-04-14 13:41:21 +03:00
"@metascraper/helpers" "^5.11.9"
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
cheerio "~1.0.0-rc.3"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
cheerio-advanced-selectors "~2.0.1"
lodash "~4.17.15"
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
whoops "~4.1.0"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
methods@^1.1.1, methods@^1.1.2, methods@~1.1.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/methods/-/methods-1.1.2.tgz#5529a4d67654134edcc5266656835b0f851afcee"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-VSmk1nZUE07cxSZmVoNbD4Ua/O4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency gscan to v3.4.1
2020-04-06 20:10:36 +03:00
micromatch@^3.0.4:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
version "3.1.10"
resolved "https://registry.yarnpkg.com/micromatch/-/micromatch-3.1.10.tgz#70859bc95c9840952f359a068a3fc49f9ecfac23"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-MWikgl9n9M3w+bpsY3He8L+w9eF9338xRl8IAO5viDizwSzziFEyUzo2xrrloB64ADbTf8uA8vRqqttDTOmccg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
arr-diff "^4.0.0"
array-unique "^0.3.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
braces "^2.3.1"
define-property "^2.0.2"
extend-shallow "^3.0.2"
extglob "^2.0.4"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
fragment-cache "^0.2.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
kind-of "^6.0.2"
nanomatch "^1.2.9"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
object.pick "^1.3.0"
regex-not "^1.0.0"
snapdragon "^0.8.1"
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
to-regex "^3.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
mime-db@1.40.0:
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
version "1.40.0"
resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.40.0.tgz#a65057e998db090f732a68f6c276d387d4126c32"
integrity sha512-jYdeOMPy9vnxEqFRRo6ZvTZ8d9oPb+k18PKoYNYUe2stVEBPPwsln/qWzdbmaIvnhZ9v2P+CuecK+fpUfsV2mA==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
mime-db@1.43.0:
version "1.43.0"
resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.43.0.tgz#0a12e0502650e473d735535050e7c8f4eb4fae58"
integrity sha512-+5dsGEEovYbT8UY9yD7eE4XTc4UwJ1jBYlgaQQF38ENsKR3wj/8q8RFZrF9WIZpB2V1ArTVFUva8sAul1NzRzQ==
"mime-db@>= 1.40.0 < 2":
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "1.42.0"
resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.42.0.tgz#3e252907b4c7adb906597b4b65636272cf9e7bac"
integrity sha512-UbfJCR4UAVRNgMpfImz05smAXK7+c+ZntjaA26ANtkXLlOe947Aag5zdIcKQULAiF9Cq4WxBi9jUs5zkA84bYQ==
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
mime-db@~1.25.0:
version "1.25.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.25.0.tgz#c18dbd7c73a5dbf6f44a024dc0d165a1e7b1c392"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-wY29fHOl2/b0SgJNwNFloeexw5I=
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
Update moment-timezone to version 0.5.13 🚀 (#8272) * chore(package): update moment-timezone to version 0.5.13 https://greenkeeper.io/ * chore: yarn.lock
2017-04-05 10:56:39 +03:00
mime-types@2.1.13:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.1.13"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/mime-types/-/mime-types-2.1.13.tgz#e07aaa9c6c6b9a7ca3012c69003ad25a39e92a88"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-4HqqnGxrmnyjASxpADrSWjnpKog=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
mime-db "~1.25.0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
mime-types@^2.1.12, mime-types@~2.1.19, mime-types@~2.1.24:
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
version "2.1.24"
resolved "https://registry.yarnpkg.com/mime-types/-/mime-types-2.1.24.tgz#b6f8d0b3e951efb77dedeca194cff6d16f676f81"
integrity sha512-WaFHS3MCl5fapm3oLxU4eYDw77IQM2ACcxQ9RIxfaC3ooc6PFuBMGZZsYpvoXS5D5QTWPieo1jjLdAm3TBP3cQ==
dependencies:
mime-db "1.40.0"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
mime-types@~2.1.26:
version "2.1.26"
resolved "https://registry.yarnpkg.com/mime-types/-/mime-types-2.1.26.tgz#9c921fc09b7e149a65dfdc0da4d20997200b0a06"
integrity sha512-01paPWYgLrkqAyrlDorC1uDwl2p3qZT7yl806vW7DvDoxwXi46jsjFbg+WdwotBIk6/MbEhO/dh5aZ5sNj/dWQ==
Update dependency metascraper-publisher to v5.8.7 (#11374)
2019-11-13 09:45:17 +03:00
dependencies:
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
mime-db "1.43.0"
Update dependency metascraper-publisher to v5.8.7 (#11374)
2019-11-13 09:45:17 +03:00
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
mime@1.6.0, mime@^1.4.1:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.6.0"
resolved "https://registry.yarnpkg.com/mime/-/mime-1.6.0.tgz#32cd9e5c64553bd58d19a568af452acff04981b1"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
integrity sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
mime@~1.2.11:
version "1.2.11"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/mime/-/mime-1.2.11.tgz#58203eed86e3a5ef17aed2b7d9ebd47f0a60dd10"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WCA+7Ybjpe8XrtK32evUfwpg3RA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
mimelib@~0.2.15:
version "0.2.19"
resolved "https://registry.yarnpkg.com/mimelib/-/mimelib-0.2.19.tgz#37ec90a6ac7d00954851d0b2c31618f0a49da0ee"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-N+yQpqx9AJVIUdCywxYY8KSdoO4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
addressparser "~0.3.2"
encoding "~0.1.7"
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
mimer@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/mimer/-/mimer-1.0.0.tgz#32251bef4dc7a63184db3a1082ed9be3abe0f3db"
integrity sha512-4ZJvCzfcwsBgPbkKXUzGoVZMWjv8IDIygkGzVc7uUYhgnK0t2LmGxxjdgH1i+pn0/KQfB5F/VKUJlfyTSOFQjg==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
mimic-fn@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/mimic-fn/-/mimic-fn-2.1.0.tgz#7ed2c2ccccaf84d3ffcb7a69b57711fc2083401b"
integrity sha512-OqbOk5oEQeAZ8WXWydlu9HJjz9WVdEIvamMCcXmuqUYjTknH/sqsWvhQ3vgwKFRR1HpjvNBKQ37nbJgYzGqGcg==
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
mimic-fn@~3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/mimic-fn/-/mimic-fn-3.0.0.tgz#76044cfa8818bbf6999c5c9acadf2d3649b14b4b"
integrity sha512-PiVO95TKvhiwgSwg1IdLYlCTdul38yZxZMIcnDSFIBUm4BNZha2qpQ4GpJ++15bHoKDtrW2D69lMfFwdFYtNZQ==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
mimic-response@^1.0.0, mimic-response@^1.0.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/mimic-response/-/mimic-response-1.0.1.tgz#4923538878eef42063cb8a3e3b0798781487ab1b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-j5EctnkH7amfV/q5Hgmoal1g2QHFJRraOtmx0JpIqkxhBhI/lJSl1nMpQ45hVarwNETOoWEimndZ4QK0RHxuxQ==
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
Update dependency sharp to v0.23.1
2019-09-30 03:35:55 +03:00
mimic-response@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/mimic-response/-/mimic-response-2.0.0.tgz#996a51c60adf12cb8a87d7fb8ef24c2f3d5ebb46"
integrity sha512-8ilDoEapqA4uQ3TwS0jakGONKXVJqpy+RpM+3b7pLdOjghCrEiGp9SRkFbUHAmZW9vdnrENWHjaweIoTIJExSQ==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
mimic-response@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/mimic-response/-/mimic-response-2.1.0.tgz#d13763d35f613d09ec37ebb30bac0469c0ee8f43"
integrity sha512-wXqjST+SLt7R009ySCglWBCFpjUygmCIfD790/kVbiGmUgfYGuB14PiTd5DwVxSV4NcYHjzMkoj5LjQZwTQLEA==
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
mingo@2.2.2:
version "2.2.2"
resolved "https://registry.yarnpkg.com/mingo/-/mingo-2.2.2.tgz#be69d486ae6e0ac54b979dc5f4412db21851f693"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-vmnUhq5uCsVLl53F9EEtshhR9pM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
"minimatch@2 || 3", minimatch@3.0.4, minimatch@^3.0.2, minimatch@^3.0.4, minimatch@~3.0.2:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
version "3.0.4"
resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-3.0.4.tgz#5166e286457f03306064be5497e8dbb0c3d32083"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-yJHVQEhyqPLUTgt9B83PXu6W3rx4MvvHvSUvToogpwoGDOUQ+yDrR0HRot+yOCdCO7u4hX3pWft6kWBBcqh0UA==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
brace-expansion "^1.1.7"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
minimist@0.0.8:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.0.8"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/minimist/-/minimist-0.0.8.tgz#857fcabfc3397d2625b8228262e86aa7a011b05d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-hX/Kv8M5fSYluCKCYuhqp6ARsF0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
minimist@^1.1.3, minimist@^1.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.2.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.0.tgz#a35008b20f41383eec1fb914f4cd5df79a264284"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-o1AIsg9BOD7sH7kU9M1d95omQoQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages
2020-03-21 02:17:28 +03:00
minimist@^1.2.5:
version "1.2.5"
resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.5.tgz#67d66014b66a6a8aaa0c083c5fd58df4e4e97602"
integrity sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw==
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
minipass@^2.6.0, minipass@^2.8.6, minipass@^2.9.0:
version "2.9.0"
resolved "https://registry.yarnpkg.com/minipass/-/minipass-2.9.0.tgz#e713762e7d3e32fed803115cf93e04bca9fcc9a6"
integrity sha512-wxfUjg9WebH+CUDX/CdbRlh5SmfZiy/hpkxaRI16Y9W56Pa75sWgd/rvFilSgrauD9NyFymP/+JFV3KwzIsJeg==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
safe-buffer "^5.1.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
yallist "^3.0.0"
Update dependency sharp to v0.23.2
2019-11-04 03:34:39 +03:00
minipass@^3.0.0:
version "3.1.1"
resolved "https://registry.yarnpkg.com/minipass/-/minipass-3.1.1.tgz#7607ce778472a185ad6d89082aa2070f79cedcd5"
integrity sha512-UFqVihv6PQgwj8/yTGvl9kPz7xIAY+R5z6XYjRInD3Gk3qx6QGSD6zEcpeG4Dy/lQnv1J6zv8ejV90hyYIKf3w==
dependencies:
yallist "^4.0.0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
minizlib@^1.2.1:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "1.3.3"
resolved "https://registry.yarnpkg.com/minizlib/-/minizlib-1.3.3.tgz#2290de96818a34c29551c8a8d301216bd65a861d"
integrity sha512-6ZYMOEnmVsdCeTJVE0W9ZD+pVnE8h9Hma/iOwwRDsdQoePpoX56/8B6z3P9VNwppJuBKNRuFDRNRqRWexT9G9Q==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
minipass "^2.9.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Update dependency sharp to v0.23.2
2019-11-04 03:34:39 +03:00
minizlib@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/minizlib/-/minizlib-2.1.0.tgz#fd52c645301ef09a63a2c209697c294c6ce02cf3"
integrity sha512-EzTZN/fjSvifSX0SlqUERCN39o6T40AMarPbv0MrarSFtIITCBh7bi+dU8nxGFHuqs9jdIAeoYoKuQAAASsPPA==
dependencies:
minipass "^3.0.0"
yallist "^4.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
mixin-deep@^1.2.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.3.2"
resolved "https://registry.yarnpkg.com/mixin-deep/-/mixin-deep-1.3.2.tgz#1120b43dc359a785dce65b55b82e257ccf479566"
integrity sha512-WRoDn//mXBiJ1H40rqa3vH0toePwSsGb45iInWlTySa+Uu4k3tYUSxa2v1KqAiLtvlrSzaExqS1gtk96A9zvEA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
for-in "^1.0.2"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
is-extendable "^1.0.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Update Test & linting packages
2020-03-21 02:17:28 +03:00
mkdirp@0.5.3:
version "0.5.3"
resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.3.tgz#5a514b7179259287952881e94410ec5465659f8c"
integrity sha512-P+2gwrFqx8lhew375MQHHeTlY8AuOJSrGf0R5ddkEndUkmwpgUob/vQuBD1V22/Cw1/lJr4x+EjllSezBThzBg==
dependencies:
minimist "^1.2.5"
Update dependency gscan to v3.4.1
2020-04-06 20:10:36 +03:00
mkdirp@^0.5.0, mkdirp@^0.5.1, mkdirp@~0.5.1:
Updated grunt-mocha-cli dependency no issue
2020-03-30 12:52:48 +03:00
version "0.5.1"
resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.1.tgz#30057438eac6cf7f8c4767f38648d6697d75c903"
integrity sha1-MAV0OOrGz3+MR2fzhkjWaX11yQM=
dependencies:
minimist "0.0.8"
Update Test & linting packages
2020-03-21 02:17:28 +03:00
mkdirp@^1.0.3, mkdirp@~1.0.3:
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-1.0.3.tgz#4cf2e30ad45959dddea53ad97d518b6c8205e1ea"
integrity sha512-6uCP4Qc0sWsgMLy1EOqqS/3rjDHOEnsStVr/4vtAIK2Y5i2kA7lFFejYrpIyiN9w0pYf4ckeCYT9f1r1P9KX5g==
Switched to extracted `@tryghost/mobiledoc-dom-renderer` package no issue - moved `mobiledoc.renderers.mobiledocHtmlRenderer` to `mobiledoc.mobiledocHtmlRenderer` so that it's easier for the getter to access the parent objects getters - removed all tests and dependencies that now live in @tryghost/mobiledoc-dom-renderer - kept the `mobiledocHtmlRenderer` test because that's testing that we've correctly wired up our cards and atoms and the output is what we expect
2020-04-08 20:21:15 +03:00
mobiledoc-dom-renderer@0.7.0, mobiledoc-dom-renderer@^0.7.0:
Update dependency mobiledoc-dom-renderer to v0.7.0 (#10937)
2019-09-10 11:36:43 +03:00
version "0.7.0"
resolved "https://registry.yarnpkg.com/mobiledoc-dom-renderer/-/mobiledoc-dom-renderer-0.7.0.tgz#53ab5f14dd612b16f03513390e5cbcc2b89f6979"
integrity sha512-A+gT6D4Ru3DKY7ZYOBRORmwhRJ7rDj2vy75D2dWuZS5NgX0mCmGs0yN7qs48YlxvfCif8RFpYsaaPg6Kc3MdJg==
Update dependency mobiledoc-dom-renderer to v0.6.6
2019-07-02 03:37:17 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
mobiledoc-text-renderer@0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/mobiledoc-text-renderer/-/mobiledoc-text-renderer-0.4.0.tgz#473fbe50aa6cde2c3b449752f3b984834dc824d2"
integrity sha512-+Tzfo0hhUFxS0n5FWZ0nf6WUrvnVmsxaIdq0CyeLYD1lk8oW2ml+6WLdeLlzKM5OYYi3PWV6NR9HCUG01cdvWQ==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Updated grunt-mocha-cli dependency no issue
2020-03-30 12:52:48 +03:00
mocha@7.1.1, mocha@^7.1.0:
Update Test & linting packages
2020-03-21 02:17:28 +03:00
version "7.1.1"
resolved "https://registry.yarnpkg.com/mocha/-/mocha-7.1.1.tgz#89fbb30d09429845b1bb893a830bf5771049a441"
integrity sha512-3qQsu3ijNS3GkWcccT5Zw0hf/rWvu1fTN9sPvEd81hlwsr30GX2GcDSSoBxo24IR8FelmrAydGC6/1J5QQP4WA==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ansi-colors "3.2.3"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
browser-stdout "1.3.1"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
chokidar "3.3.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
debug "3.2.6"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
diff "3.5.0"
escape-string-regexp "1.0.5"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
find-up "3.0.0"
glob "7.1.3"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
growl "1.10.5"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
he "1.2.0"
js-yaml "3.13.1"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
log-symbols "3.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
minimatch "3.0.4"
Update Test & linting packages
2020-03-21 02:17:28 +03:00
mkdirp "0.5.3"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ms "2.1.1"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
node-environment-flags "1.0.6"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
object.assign "4.1.0"
strip-json-comments "2.0.1"
supports-color "6.0.0"
which "1.3.1"
wide-align "1.1.3"
Update Test & linting packages
2020-03-21 02:17:28 +03:00
yargs "13.3.2"
yargs-parser "13.1.2"
Update dependency mocha to v6 (#11171)
2019-09-30 11:31:11 +03:00
yargs-unparser "1.6.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Update dependency mock-knex to v0.4.7
2019-11-11 03:23:15 +03:00
mock-knex@0.4.7:
version "0.4.7"
resolved "https://registry.yarnpkg.com/mock-knex/-/mock-knex-0.4.7.tgz#ec476e14df22773e37ea7a9020959a4573c38c59"
integrity sha512-jg9l4WnIxHaL4SsyrDWxNa7ilo3XgWti8w6zVaXzELFXhlAPY/pUYIjJLdkuCNxQpN8Wq1TMHZsrdf6UkLvTew==
Removed api integration tests (#9940) refs #9866 - moved the tests either to unit tests or routing tests - or removed test case (a lot) - this commit is very big 🤪, it was not rly possible to create clean commits for this - it only changes the test env, no real code is touched Next steps: - optimise folder structure + make v2 testing possible - reduce some more tests from routing and model integeration tests
2018-10-06 23:13:52 +03:00
dependencies:
bluebird "^3.4.1"
lodash "^4.14.2"
semver "^5.3.0"
Update dependency proxyquire to v2.1.1
2019-08-05 06:29:02 +03:00
module-not-found-error@^1.0.1:
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 16:59:06 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/module-not-found-error/-/module-not-found-error-1.0.1.tgz#cf8b4ff4f29640674d6cdd02b0e3bc523c2bbdc0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-z4tP9PKWQGdNbN0CsOO8UjwrvcA=
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 16:59:06 +03:00
Update dependency @tryghost/url-utils to v0.6.14
2020-03-16 09:15:00 +03:00
moment-timezone@0.5.23, moment-timezone@0.5.28:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "0.5.23"
resolved "https://registry.yarnpkg.com/moment-timezone/-/moment-timezone-0.5.23.tgz#7cbb00db2c14c71b19303cb47b0fb0a6d8651463"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-WHFH85DkCfiNMDX5D3X7hpNH3/PUhjTGcD0U1SgfBGZxJ3qUmJh5FdvaFjcClxOvB3rzdfj4oRffbI38jEnC1w==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update moment-timezone to version 0.5.12 🚀 (#8247) * chore(package): update moment-timezone to version 0.5.12 https://greenkeeper.io/ * chore: yarn.lock
2017-04-04 10:37:25 +03:00
moment ">= 2.9.0"
Update dependency @tryghost/url-utils to v0.1.3
2019-07-29 03:28:16 +03:00
Update dependency knex-migrator to v3.4.4
2020-04-14 18:21:50 +03:00
moment@2.24.0, "moment@>= 2.9.0", moment@^2.10.6, moment@^2.15.2, moment@^2.18.1:
Respected peer dependency for bookshelf no issue - need to use knex 0.14.x for now - Bookshelf already bumped the peer dependency in master, but was not released yet
2019-01-22 10:58:28 +03:00
version "2.24.0"
resolved "https://registry.yarnpkg.com/moment/-/moment-2.24.0.tgz#0d055d53f5052aa653c9f6eb68bb5d12bf5c2b5b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-bV7f+6l2QigeBBZSM/6yTNq4P2fNpSWj/0e7jQcy87A8e7o2nAfP/34/2ky5Vw4B9S446EtIhodAzkFCcR4dQg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
⬆️ bump dependencies no issue - gscan@1.1.2 - body-parser@1.17.2 - debug@2.6.8 - express@4.15.3 - html-to-text@3.3.0 - image-size@0.5.5 - uuid@3.1.0
2017-06-22 20:40:56 +03:00
ms@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/ms/-/ms-2.0.0.tgz#5608aeadfc00be6c2901df5f9861788de0d597c8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-VgiurfwAvmwpAd9fmGF4jeDVl8g=
Update debug to version 2.6.4 🚀 (#8367) * chore(package): update debug to version 2.6.4 https://greenkeeper.io/ * chore: yarn.lock
2017-04-24 17:37:02 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
ms@2.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.1.tgz#30a5864eb3ebb0a66f2ebe6d727af06a09d86e0a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-tgp+dl5cGk28utYktBsrFqA7HKgrhgPsg6Z/EfhWI4gl1Hwq8B/GmY/0oXZ6nF8hDVesS/FpnYaD/kOWhYQvyg==
Bump dependencies no issue - ghost-ignition@2.9.4 - fixed log rotation (https://github.com/TryGhost/Ignition/commit/c8f256430a5d03c6bce7872910eecc5576fd4b55) - multer@1.3.1 - uuid@3.3.2 - nock@9.4.0
2018-07-02 13:28:30 +03:00
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
ms@^2.0.0, ms@^2.1.1, ms@^2.1.2:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.2.tgz#d09d1f357b443f493382a8eb3ccd183872ae6009"
integrity sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==
multer@1.4.2, multer@^1.1.0:
Update dependency multer to v1.4.2
2019-07-23 13:26:52 +03:00
version "1.4.2"
resolved "https://registry.yarnpkg.com/multer/-/multer-1.4.2.tgz#2f1f4d12dbaeeba74cb37e623f234bf4d3d2057a"
integrity sha512-xY8pX7V+ybyUpbYMxtjM9KAiD9ixtg5/JkeKUTD6xilfDv0vzzOFcCp4Ljb1UU3tSOM3VTZtKo63OmzOrGi3Cg==
dependencies:
append-field "^1.0.0"
busboy "^0.2.11"
concat-stream "^1.5.2"
mkdirp "^0.5.1"
object-assign "^4.1.1"
on-finished "^2.3.0"
type-is "^1.6.4"
xtend "^4.0.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
mute-stream@0.0.8:
version "0.0.8"
resolved "https://registry.yarnpkg.com/mute-stream/-/mute-stream-0.0.8.tgz#1630c42b2251ff81e2a283de96a5497ea92e5e0d"
integrity sha512-nnbWWOkoWyUsTjKrhgD0dcz22mdkSnpYqbEjIm2nhwhuxlSkpywJmBo8h0ZqJdkp73mb90SssHkN4rsRaBAfAA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
mv@~2:
version "2.1.1"
resolved "https://registry.yarnpkg.com/mv/-/mv-2.1.1.tgz#ae6ce0d6f6d5e0a4f7d893798d03c1ea9559b6a2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-rmzg1vbV4KT32JN5jQPB6pVZtqI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
mkdirp "~0.5.1"
ncp "~2.0.0"
rimraf "~2.4.0"
Update dependency mysql to v2.18.1
2020-02-19 14:11:32 +03:00
mysql@2.18.1:
version "2.18.1"
resolved "https://registry.yarnpkg.com/mysql/-/mysql-2.18.1.tgz#2254143855c5a8c73825e4522baf2ea021766717"
integrity sha512-Bca+gk2YWmqp2Uf6k5NFEurwY/0td0cpebAucFpY/3jhrwrVGuxU2uQFCHjU19SJfje0yQvi+rVWdq78hR5lig==
dependencies:
bignumber.js "9.0.0"
readable-stream "2.3.7"
safe-buffer "5.1.2"
sqlstring "2.3.1"
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
nan@^2.12.1, nan@^2.14.0:
Update dependency sharp to v0.22.1
2019-07-02 03:42:14 +03:00
version "2.14.0"
resolved "https://registry.yarnpkg.com/nan/-/nan-2.14.0.tgz#7818f722027b2459a86f0295d434d1fc2336c52c"
integrity sha512-INOFj37C7k3AfaNTtX8RhsTw7qRy7eLET14cROi9+5HAVbbHuIWUHEauBv5qT4Av2tWasiTY1Jw6puUNqRJXQg==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
nanomatch@^1.2.9:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.2.13"
resolved "https://registry.yarnpkg.com/nanomatch/-/nanomatch-1.2.13.tgz#b87a8aa4fc0de8fe6be88895b38983ff265bd119"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-fpoe2T0RbHwBTBUOftAfBPaDEi06ufaUai0mE6Yn1kacc3SnTErfb/h+X94VXzI64rKFHYImXSvdwGGCmwOqCA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
arr-diff "^4.0.0"
array-unique "^0.3.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
define-property "^2.0.2"
extend-shallow "^3.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
fragment-cache "^0.2.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
is-windows "^1.0.2"
kind-of "^6.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
object.pick "^1.3.0"
regex-not "^1.0.0"
snapdragon "^0.8.1"
to-regex "^3.0.1"
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
napi-build-utils@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/napi-build-utils/-/napi-build-utils-1.0.1.tgz#1381a0f92c39d66bf19852e7873432fc2123e508"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-boQj1WFgQH3v4clhu3mTNfP+vOBxorDlE8EKiMjUlLG3C4qAESnn9AxIOkFgTR2c9LtzNjPrjS60cT27ZKBhaA==
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
natural-compare@^1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/natural-compare/-/natural-compare-1.4.0.tgz#4abebfeed7541f2c27acfb29bdbbd15c8d5ba4f7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Sr6/7tdUHywnrPspvbvRXI1bpPc=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9421) no issue - bookshelf-relations@0.1.5 - ghost-ignition@2.8.18 - sanitize-html@1.17.0 - semver@5.5.0 - uuid@3.2.1 - eslint@4.16.0 - should@13.2.1 - sinon@4.2.1
2018-01-25 00:50:20 +03:00
nconf@0.10.0, nconf@^0.10.0:
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
version "0.10.0"
resolved "https://registry.yarnpkg.com/nconf/-/nconf-0.10.0.tgz#da1285ee95d0a922ca6cee75adcf861f48205ad2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-fKiXMQrpP7CYWJQzKkPPx9hPgmq+YLDyxcG9N8RpiE9FoCkCbzD0NyW0YhE3xn3Aupe7nnDeIx4PFzYehpHT9Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
async "^1.4.0"
ini "^1.3.0"
secure-keys "^1.0.0"
yargs "^3.19.0"
ncp@~2.0.0:
version "2.0.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/ncp/-/ncp-2.0.0.tgz#195a21d6c46e361d2fb1281ba38b91e9df7bdbb3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-GVoh1sRuNh0vsSgbo4uR6d9727M=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ndjson@^1.4.0:
version "1.5.0"
resolved "https://registry.yarnpkg.com/ndjson/-/ndjson-1.5.0.tgz#ae603b36b134bcec347b452422b0bf98d5832ec8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-rmA7NrE0vOw0e0UkIrC/mNWDLsg=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
json-stringify-safe "^5.0.1"
minimist "^1.2.0"
split2 "^2.1.0"
through2 "^2.0.3"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
needle@^2.2.1:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "2.4.0"
resolved "https://registry.yarnpkg.com/needle/-/needle-2.4.0.tgz#6833e74975c444642590e15a750288c5f939b57c"
integrity sha512-4Hnwzr3mi5L97hMYeNl8wRW/Onhy4nUKR/lVemJ8gJedxxUyBLm9kkrDColJvoSfwi0jCNhD+xCdOtiGDQiRZg==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
Lock file maintenance
2019-08-01 08:14:51 +03:00
debug "^3.2.6"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
iconv-lite "^0.4.4"
sax "^1.2.4"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
negotiator@0.6.2:
version "0.6.2"
resolved "https://registry.yarnpkg.com/negotiator/-/negotiator-0.6.2.tgz#feacf7ccf525a77ae9634436a64883ffeca346fb"
integrity sha512-hZXc7K2e+PgeI1eDBe/10Ard4ekbfrrqG8Ep+8Jmf4JID2bNg7NvCPOZN+kfF574pFQI7mum2AUqDidoKqcTOw==
Updated express-hbs to 1.1.1 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:03:23 +03:00
neo-async@^2.6.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "2.6.1"
resolved "https://registry.yarnpkg.com/neo-async/-/neo-async-2.6.1.tgz#ac27ada66167fa8849a6addd837f6b189ad2081c"
integrity sha512-iyam8fBuCUpWeKPGpaNMetEocMt364qkCsfL9JuhjXX6dRnguRVOfk2GZaDpPjcOKiiXCPINZC1GczQ7iTq3Zw==
Updated express-hbs to 1.1.1 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:03:23 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
netjet@1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/netjet/-/netjet-1.3.0.tgz#7e082b49354a30a5b84ffd14fb7f3aa5874a7ce4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-F9OoaBmlK4t8Ff5yIjbgXKh0vQDnDNjEMhyuTWj7DWYEvri2srqEayYwh6IASDqboTB2l7lP85uNnBG7FgAx0A==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bl "^1.0.1"
hijackresponse "^2.0.0"
lodash.defaults "^4.0.0"
lodash.unescape "^4.0.0"
lru-cache "^4.0.0"
posthtml "^0.9.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
netmask@^1.0.6:
version "1.0.6"
resolved "https://registry.yarnpkg.com/netmask/-/netmask-1.0.6.tgz#20297e89d86f6f6400f250d9f4f6b4c1945fcd35"
integrity sha1-ICl+idhvb2QA8lDZ9Pa0wZRfzTU=
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
next-tick@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/next-tick/-/next-tick-1.0.0.tgz#ca86d1fe8828169b0120208e3dc8424b9db8342c"
integrity sha1-yobR/ogoFpsBICCOPchCS524NCw=
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
nice-try@^1.0.4:
version "1.0.5"
resolved "https://registry.yarnpkg.com/nice-try/-/nice-try-1.0.5.tgz#a3378a7696ce7d223e88fc9b764bd7ef1089e366"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-1nh45deeb5olNY7eX82BkPO7SSxR5SSYJiPTrTdFUVYwAl8CKMA5N9PjTYkHiRjisVcxcQ1HXdLhx2qxxJzLNQ==
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
nise@^4.0.1:
version "4.0.2"
resolved "https://registry.yarnpkg.com/nise/-/nise-4.0.2.tgz#727167d9392446a0238b28183b374600ddca42f4"
integrity sha512-ALDnm0pTTyeGdbg5FCpWGd58Nmp3qO8d8x+dU2Fw8lApeJTEBSjkBZZM4S8t6GpKh+czxkfM/TKxpRMroZzwOg==
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
dependencies:
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
"@sinonjs/commons" "^1.7.0"
"@sinonjs/fake-timers" "^6.0.0"
"@sinonjs/formatio" "^5.0.1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
"@sinonjs/text-encoding" "^0.7.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
just-extend "^4.0.2"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
path-to-regexp "^1.7.0"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
no-case@^3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/no-case/-/no-case-3.0.3.tgz#c21b434c1ffe48b39087e86cfb4d2582e9df18f8"
integrity sha512-ehY/mVQCf9BL0gKfsJBvFJen+1V//U+0HQMPrWct40ixE4jnv0bfvxDbWtAHL9EcaPEOJHVVYKoQn1TlZUB8Tw==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
dependencies:
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
lower-case "^2.0.1"
tslib "^1.10.0"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Update Test & linting packages
2020-03-21 02:17:28 +03:00
nock@12.0.3:
version "12.0.3"
resolved "https://registry.yarnpkg.com/nock/-/nock-12.0.3.tgz#83f25076dbc4c9aa82b5cdf54c9604c7a778d1c9"
integrity sha512-QNb/j8kbFnKCiyqi9C5DD0jH/FubFGj5rt9NQFONXwQm3IPB0CULECg/eS3AU1KgZb/6SwUa4/DTRKhVxkGABw==
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 15:57:10 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
debug "^4.1.0"
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 15:57:10 +03:00
json-stringify-safe "^5.0.1"
Update dependency nock to v11 (#11093)
2019-09-10 11:13:26 +03:00
lodash "^4.17.13"
propagate "^2.0.0"
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 15:57:10 +03:00
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
node-abi@^2.7.0:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "2.11.0"
resolved "https://registry.yarnpkg.com/node-abi/-/node-abi-2.11.0.tgz#b7dce18815057544a049be5ae75cd1fdc2e9ea59"
integrity sha512-kuy/aEg75u40v378WRllQ4ZexaXJiCvB68D2scDXclp/I4cRq6togpbOoKhmN07tns9Zldu51NNERo0wehfX9g==
Update dependency sharp to v0.22.1
2019-07-02 03:42:14 +03:00
dependencies:
semver "^5.4.1"
Update dependency sharp to v0.25.1
2020-03-09 03:23:09 +03:00
node-addon-api@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/node-addon-api/-/node-addon-api-2.0.0.tgz#f9afb8d777a91525244b01775ea0ddbe1125483b"
integrity sha512-ASCL5U13as7HhOExbT6OlWJJUV/lLzL2voOSP1UVehpRD8FbSrSDjfScK/KwAvVTI5AS6r4VwbOMlIqtvRidnA==
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
node-environment-flags@1.0.6:
version "1.0.6"
resolved "https://registry.yarnpkg.com/node-environment-flags/-/node-environment-flags-1.0.6.tgz#a30ac13621f6f7d674260a54dede048c3982c088"
integrity sha512-5Evy2epuL+6TM0lCQGpFIj6KwiEsGh1SrHUhTbNX+sLbBtjidPZFAnVK9y5yU1+h//RitLbRHTIMyxQPtxMdHw==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
dependencies:
object.getownpropertydescriptors "^2.0.3"
semver "^5.7.0"
Update dependency oembed-parser to v1.3.5 (#11124)
2019-10-30 19:16:38 +03:00
node-fetch@^2.6.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "2.6.0"
resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.0.tgz#e633456386d4aa55863f676a7ab0daa8fdecb0fd"
integrity sha512-8dG4H5ujfvFiqDmVu9fQ5bOHUC15JMjMY/Zumv26oOvvVJjM67KF8koCWIabKQ1GJIa9r2mMZscBq/TbdOcmNA==
Added /oembed API endpoint refs https://github.com/TryGhost/Ghost/issues/9623 - add `oembed-parser` module for checking provider availability for a url and fetching data from the provider - require it in the `overrides.js` file before the general Promise override so that the `promise-wrt` sub-dependency doesn't attempt to extend the Bluebird promise implementation - add `/oembed` authenticated endpoint - takes `?url=` query parameter to match against known providers - adds safeguard against oembed-parser's providers list not recognising http+https and www+non-www - responds with `ValidationError` if no provider is found - responds with oembed response from matched provider's oembed endpoint if match is found
2018-06-05 17:49:23 +03:00
Update dependency node-jose to v1.1.4
2020-03-26 22:17:47 +03:00
node-forge@^0.8.1, node-forge@^0.8.5:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "0.8.5"
resolved "https://registry.yarnpkg.com/node-forge/-/node-forge-0.8.5.tgz#57906f07614dc72762c84cef442f427c0e1b86ee"
integrity sha512-vFMQIWt+J/7FLNyKouZ9TazT74PRV3wgv9UT4cRjC8BffxFbKXkgIWR42URCPSnHm/QDz6BOlb2Q0U4+VQT67Q==
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
Update dependency node-jose to v1.1.4
2020-03-26 22:17:47 +03:00
node-jose@1.1.4:
version "1.1.4"
resolved "https://registry.yarnpkg.com/node-jose/-/node-jose-1.1.4.tgz#af3f44a392e586d26b123b0e12dc09bef1e9863b"
integrity sha512-L31IFwL3pWWcMHxxidCY51ezqrDXMkvlT/5pLTfNw5sXmmOLJuN6ug7txzF/iuZN55cRpyOmoJrotwBQIoo5Lw==
dependencies:
base64url "^3.0.1"
browserify-zlib "^0.2.0"
buffer "^5.5.0"
es6-promise "^4.2.8"
lodash "^4.17.15"
long "^4.0.0"
node-forge "^0.8.5"
process "^0.11.10"
react-zlib-js "^1.0.4"
uuid "^3.3.3"
node-jose@^1.1.3:
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/node-jose/-/node-jose-1.1.3.tgz#26e6bc563101a356c06fb254c7ef0078e8b49670"
integrity sha512-kupfi4uGWhRjnOmtie2T64cLge5a1TZyalEa8uWWWBgtKBcu41A4IGKpI9twZAxRnmviamEUQRK7LSyfFb2w8A==
dependencies:
base64url "^3.0.1"
es6-promise "^4.2.6"
lodash "^4.17.11"
long "^4.0.0"
node-forge "^0.8.1"
uuid "^3.3.2"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
node-loggly-bulk@^2.2.4:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.2.4"
resolved "https://registry.yarnpkg.com/node-loggly-bulk/-/node-loggly-bulk-2.2.4.tgz#bdd8638d97c43ecf1e1831ca98b250968fa6dee9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-DfhtsDfkSBU6Dp1zvK+H1MgHRcA2yb4z07ctyA6uo+bNwKtv1exhohN910zcWNkdSYq1TImCq+O+3bOTuYHvmQ==
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
json-stringify-safe "5.0.x"
moment "^2.18.1"
request ">=2.76.0 <3.0.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
node-pre-gyp@^0.11.0:
version "0.11.0"
resolved "https://registry.yarnpkg.com/node-pre-gyp/-/node-pre-gyp-0.11.0.tgz#db1f33215272f692cd38f03238e3e9b47c5dd054"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-TwWAOZb0j7e9eGaf9esRx3ZcLaE5tQ2lvYy1pb5IAaG1a2e2Kv5Lms1Y4hpj+ciXJRofIxxlt5haeQ/2ANeE0Q==
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 19:43:08 +03:00
dependencies:
detect-libc "^1.0.2"
mkdirp "^0.5.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
needle "^2.2.1"
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 19:43:08 +03:00
nopt "^4.0.1"
npm-packlist "^1.1.6"
npmlog "^4.0.2"
rc "^1.2.7"
rimraf "^2.6.1"
semver "^5.3.0"
tar "^4"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
node-releases@^1.1.53:
version "1.1.53"
resolved "https://registry.yarnpkg.com/node-releases/-/node-releases-1.1.53.tgz#2d821bfa499ed7c5dffc5e2f28c88e78a08ee3f4"
integrity sha512-wp8zyQVwef2hpZ/dJH7SfSrIPD6YoJz6BDQDpGEkcA0s3LpAQoxBIYmfIq6QAhC1DhwsyCgTaTTcONwX8qzCuQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
nodemailer@0.7.1:
version "0.7.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/nodemailer/-/nodemailer-0.7.1.tgz#1ec819e243622300a00abe746cb5d3389c0f316c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-HsgZ4kNiIwCgCr50bLXTOJwPMWw=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
aws-sdk "2.0.5"
directmail "~0.1.7"
he "~0.3.6"
mailcomposer "~0.2.10"
public-address "~0.1.1"
simplesmtp "~0.2 || ~0.3.30"
optionalDependencies:
readable-stream "~1.1.9"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
noop-logger@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/noop-logger/-/noop-logger-0.1.1.tgz#94a2b1633c4f1317553007d8966fd0e841b6a4c2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-lKKxYzxPExdVMAfYlm/Q6EG2pMI=
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Update dependency gscan to v3.4.1
2020-04-06 20:10:36 +03:00
nopt@^4.0.1:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "4.0.1"
resolved "https://registry.yarnpkg.com/nopt/-/nopt-4.0.1.tgz#d0d4685afd5415193c8c7505602d0d17cd64474d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-0NRoWv1UFRk8jHUFYC0NF81kR00=
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
dependencies:
abbrev "1"
osenv "^0.1.4"
Update dependency express-hbs to v2.3.3
2020-04-06 18:42:24 +03:00
nopt@^4.0.3:
version "4.0.3"
resolved "https://registry.yarnpkg.com/nopt/-/nopt-4.0.3.tgz#a375cad9d02fd921278d954c2254d5aa57e15e48"
integrity sha512-CvaGwVMztSMJLOeXPrez7fyfObdZqNUK1cPAEzLHrTybIua9pMdmmPR5YwtfNftIOMv3DPUhFaxsZMNTQO20Kg==
dependencies:
abbrev "1"
osenv "^0.1.4"
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
nopt@~3.0.6:
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
version "3.0.6"
resolved "https://registry.yarnpkg.com/nopt/-/nopt-3.0.6.tgz#c6465dbf08abcd4db359317f79ac68a646b28ff9"
integrity sha1-xkZdvwirzU2zWTF/eaxopkayj/k=
dependencies:
abbrev "1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
normalize-package-data@^2.3.2, normalize-package-data@^2.3.4:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "2.5.0"
resolved "https://registry.yarnpkg.com/normalize-package-data/-/normalize-package-data-2.5.0.tgz#e66db1838b200c1dfc233225d12cb36520e234a8"
integrity sha512-/5CMN3T0R4XTj4DcGaexo+roZSdSFW/0AOOTROrjxzCG1wrWXEsGbRKevjlIL+ZDE4sZlJr5ED4YW0yqmkK+eA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
hosted-git-info "^2.1.4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
resolve "^1.10.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
semver "2 || 3 || 4 || 5"
validate-npm-package-license "^3.0.1"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
normalize-path@^2.0.0:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/normalize-path/-/normalize-path-2.1.1.tgz#1ab28b556e198363a8c1a6f7e6fa20137fe6aed9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-GrKLVW4Zg2Oowab35vogE3/mrtk=
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
dependencies:
remove-trailing-separator "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
normalize-path@^3.0.0, normalize-path@~3.0.0:
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
version "3.0.0"
resolved "https://registry.yarnpkg.com/normalize-path/-/normalize-path-3.0.0.tgz#0dcd69ff23a1c9b11fd0978316644a0388216a65"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
normalize-url@^3.0.0:
version "3.3.0"
resolved "https://registry.yarnpkg.com/normalize-url/-/normalize-url-3.3.0.tgz#b2e1c4dc4f7c6d57743df733a4f5978d18650559"
integrity sha512-U+JJi7duF1o+u2pynbp2zXDW2/PADgC30f0GsHZtRh+HOcXHnw137TrNlyxxRvWW5fjKd3bcLHPxofWuCjaeZg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
normalize-url@^4.1.0:
Update dependency metascraper-author to v5.7.6 (#11116)
2019-09-30 23:55:44 +03:00
version "4.5.0"
resolved "https://registry.yarnpkg.com/normalize-url/-/normalize-url-4.5.0.tgz#453354087e6ca96957bd8f5baf753f5982142129"
integrity sha512-2s47yzUxdexf1OhyRi4Em83iQk0aPvwTddtFz4hnSSw9dCEsLEGf6SwIO8ss/19S9iBb5sJaOuTvTGDeZI00BQ==
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
normalize-url@~5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/normalize-url/-/normalize-url-5.0.0.tgz#f46c9dc20670495e4e18fbd1b4396e41d199f63c"
integrity sha512-bAEm2fx8Dq/a35Z6PIRkkBBJvR56BbEJvhpNtvCZ4W9FyORSna77fn+xtYFjqk5JpBS+fMnAOG/wFgkQBmB7hw==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
npm-bundled@^1.0.1:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.0.6"
resolved "https://registry.yarnpkg.com/npm-bundled/-/npm-bundled-1.0.6.tgz#e7ba9aadcef962bb61248f91721cd932b3fe6bdd"
integrity sha512-8/JCaftHwbd//k6y2rEWp6k1wxVfpFzB6t1p825+cUb7Ym2XQfhwIC5KwhrvzZRJu+LtDE585zVaS32+CGtf0g==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
npm-packlist@^1.1.6:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.4.4"
resolved "https://registry.yarnpkg.com/npm-packlist/-/npm-packlist-1.4.4.tgz#866224233850ac534b63d1a6e76050092b5d2f44"
integrity sha512-zTLo8UcVYtDU3gdeaFu2Xu0n0EvelfHDGuqtNIn5RO7yQj4H1TqNdBc/yZjxnWA0PVB8D3Woyp0i5B43JwQ6Vw==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
ignore-walk "^3.0.1"
npm-bundled "^1.0.1"
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 21:45:29 +03:00
npm-run-path@^2.0.0:
version "2.0.2"
resolved "https://registry.yarnpkg.com/npm-run-path/-/npm-run-path-2.0.2.tgz#35a9232dfa35d7067b4cb2ddf2357b1871536c5f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-NakjLfo11wZ7TLLd8jV7GHFTbF8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 21:45:29 +03:00
path-key "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
npmlog@^4.0.1, npmlog@^4.0.2, npmlog@^4.1.2:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "4.1.2"
resolved "https://registry.yarnpkg.com/npmlog/-/npmlog-4.1.2.tgz#08a7f2a8bf734604779a9efa4ad5cc717abb954b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-2uUqazuKlTaSI/dC8AzicUck7+IrEaOnN/e0jd3Xtt1KcGpwx30v50mL7oPyr/h9bL3E4aZccVwpwP+5W9Vjkg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
are-we-there-yet "~1.1.2"
console-control-strings "~1.1.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
gauge "~2.7.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
set-blocking "~2.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
nth-check@^1.0.2, nth-check@~1.0.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/nth-check/-/nth-check-1.0.2.tgz#b2bd295c37e3dd58a3bf0700376663ba4d9cf05c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-WeBOdju8SnzPN5vTUJYxYUxLeXpCaVP5i5e0LF8fg7WORF2Wd7wFX/pk0tYZk7s8T+J7VLy0Da6J1+wCT0AtHg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
boolbase "~1.0.0"
number-is-nan@^1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/number-is-nan/-/number-is-nan-1.0.1.tgz#097b602b53422a522c1afb8790318336941a011d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-CXtgK1NCKlIsGvuHkDGDNpQaAR0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
nwsapi@^2.2.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/nwsapi/-/nwsapi-2.2.0.tgz#204879a9e3d068ff2a55139c2c772780681a38b7"
integrity sha512-h2AatdwYH+JHiZpv7pt/gSX1XoRGb7L/qSIeuqA6GwYoF9w1vP1cw42TO0aI2pNyshRK5893hNSl+1//vHK7hQ==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
oauth-sign@~0.9.0:
version "0.9.0"
resolved "https://registry.yarnpkg.com/oauth-sign/-/oauth-sign-0.9.0.tgz#47a7b016baa68b5fa0ecf3dee08a85c679ac6455"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-fexhUFFPTGV8ybAtSIGbV6gOkSv8UtRbDBnAyLQw4QPKkgNlsH2ByPGtMUqdWkos6YCRmAqViwgZrJc/mRDzZQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
object-assign@^4, object-assign@^4.0.1, object-assign@^4.1.0, object-assign@^4.1.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "4.1.1"
resolved "https://registry.yarnpkg.com/object-assign/-/object-assign-4.1.1.tgz#2109adc7965887cfc05cbbd442cac8bfbb360863"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IQmtx5ZYh8/AXLvUQsrIv7s2CGM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
object-copy@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/object-copy/-/object-copy-0.1.0.tgz#7e7d858b781bd7c991a41ba975ed3812754e998c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-fn2Fi3gb18mRpBupde04EnVOmYw=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
copy-descriptor "^0.1.0"
define-property "^0.2.5"
kind-of "^3.0.3"
Added member's subscription cancellation helper {{cancel_link}} (#11434) no issue - The helper allows generating HTML needed to cancel or continue the member's subscription depending on subscription state. - Added public members endpoint to allow updating subscription's `cancel_at_period_end` attribute available at: `PUT /api/canary/members/subscriptions/:id/` - Added client-side hook to allow calling subscription cancellation. Allows to create elements with `data-members-cancel-subscription` / `data-members-continue-subscription` attributes which would call subscription update. - Updated schema and added migration for `current_period_end` column - As discussed we only add a single column to subscriptions table to avoid preoptimizing for future cases - Added {{cancel_link}} helper - Added error handling for {{cancel_link}} when members are disabled - Added test coverage for {{cancel_link}} helper - Bumped @tryghost/members-api version to 0.10.2. Needed to use `updateSubscription` middleware - Bumped gscan to 3.2.0. Needed to recognize new {{cancel_link}} helper
2019-12-12 15:59:15 +03:00
object-inspect@^1.7.0:
version "1.7.0"
resolved "https://registry.yarnpkg.com/object-inspect/-/object-inspect-1.7.0.tgz#f4f6bd181ad77f006b5ece60bd0b6f398ff74a67"
integrity sha512-a7pEHdh1xKIAgTySUGgLMx/xwDZskN1Ud6egYYN3EdRW4ZMPNEDUTF+hwy2LUC+Bl+SyLXANnwz/jyh/qutKUw==
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
object-keys@^1.0.11, object-keys@^1.0.12, object-keys@^1.1.1:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/object-keys/-/object-keys-1.1.1.tgz#1c47f272df277f3b1daf061677d9c82e2322c60e"
integrity sha512-NuAESUOUMrlIXOfHKzD6bpPu3tYt3xvjNdRIQ+FeT0lNb4K8WR70CaDxhuNguS2XG+GjkyMwOzsN5ZktImfhLA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
object-visit@^1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/object-visit/-/object-visit-1.0.1.tgz#f79c4493af0c5377b59fe39d395e41042dd045bb"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-95xEk68MU3e1n+OdOV5BBC3QRbs=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
isobject "^3.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
object.assign@4.1.0, object.assign@^4.1.0:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
version "4.1.0"
resolved "https://registry.yarnpkg.com/object.assign/-/object.assign-4.1.0.tgz#968bf1100d7956bb3ca086f006f846b3bc4008da"
integrity sha512-exHJeq6kBKj58mqGyTQ9DFvrZC/eR6OwxzoM9YRoGBqrXYonaFyGiFMuc9VZrXf7DarreEwMpurG3dd+CNyW5w==
dependencies:
define-properties "^1.1.2"
function-bind "^1.1.1"
has-symbols "^1.0.0"
object-keys "^1.0.11"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
object.defaults@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/object.defaults/-/object.defaults-1.1.0.tgz#3a7f868334b407dea06da16d88d5cd29e435fecf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-On+GgzS0B96gbaFtiNXNKeQ1/s8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
array-each "^1.0.1"
array-slice "^1.0.0"
for-own "^1.0.0"
isobject "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
object.getownpropertydescriptors@^2.0.3:
version "2.0.3"
resolved "https://registry.yarnpkg.com/object.getownpropertydescriptors/-/object.getownpropertydescriptors-2.0.3.tgz#8758c846f5b407adab0f236e0986f14b051caa16"
integrity sha1-h1jIRvW0B62rDyNuCYbxSwUcqhY=
dependencies:
define-properties "^1.1.2"
es-abstract "^1.5.1"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
object.getownpropertydescriptors@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/object.getownpropertydescriptors/-/object.getownpropertydescriptors-2.1.0.tgz#369bf1f9592d8ab89d712dced5cb81c7c5352649"
integrity sha512-Z53Oah9A3TdLoblT7VKJaTDdXdT+lQO+cNpKVnya5JDe9uLvzu1YyY1yFDFrcxrlRgWrEFH0jJtD/IbuwjcEVg==
dependencies:
define-properties "^1.1.3"
es-abstract "^1.17.0-next.1"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
object.map@^1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/object.map/-/object.map-1.0.1.tgz#cf83e59dc8fcc0ad5f4250e1f78b3b81bd801d37"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-z4Plncj8wK1fQlDh94s7gb2AHTc=
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
for-own "^1.0.0"
make-iterator "^1.0.0"
object.pick@^1.2.0, object.pick@^1.3.0:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/object.pick/-/object.pick-1.3.0.tgz#87a10ac4c1694bd2e1cbf53591a66141fb5dd747"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-h6EKxMFpS9Lhy/U1kaZhQftd10c=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
isobject "^3.0.1"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
object.values@^1.1.0:
version "1.1.1"
resolved "https://registry.yarnpkg.com/object.values/-/object.values-1.1.1.tgz#68a99ecde356b7e9295a3c5e0ce31dc8c953de5e"
integrity sha512-WTa54g2K8iu0kmS/us18jEmdv1a4Wi//BZ/DTVYEcH0XhLM5NYdpDHja3gt57VrZLcNAO2WGA+KpWsDBaHt6eA==
dependencies:
define-properties "^1.1.3"
es-abstract "^1.17.0-next.1"
function-bind "^1.1.1"
has "^1.0.3"
Update dependency oembed-parser to v1.3.7
2019-12-23 03:19:34 +03:00
oembed-parser@1.3.7:
version "1.3.7"
resolved "https://registry.yarnpkg.com/oembed-parser/-/oembed-parser-1.3.7.tgz#3741c238a383f595e84dc4f4f3f9c5f6f8d95c53"
integrity sha512-u+zIINgVUTMJ5wqs2dpoJhWZ+0yLmChB3wV4NDIT81cZtHlm0xcgR3JuvXdtgJDJK/1diHk3DQtv2zsjhdeEkA==
Added /oembed API endpoint refs https://github.com/TryGhost/Ghost/issues/9623 - add `oembed-parser` module for checking provider availability for a url and fetching data from the provider - require it in the `overrides.js` file before the general Promise override so that the `promise-wrt` sub-dependency doesn't attempt to extend the Bluebird promise implementation - add `/oembed` authenticated endpoint - takes `?url=` query parameter to match against known providers - adds safeguard against oembed-parser's providers list not recognising http+https and www+non-www - responds with `ValidationError` if no provider is found - responds with oembed response from matched provider's oembed endpoint if match is found
2018-06-05 17:49:23 +03:00
dependencies:
Update dependency oembed-parser to v1.3.5 (#11124)
2019-10-30 19:16:38 +03:00
node-fetch "^2.6.0"
Added /oembed API endpoint refs https://github.com/TryGhost/Ghost/issues/9623 - add `oembed-parser` module for checking provider availability for a url and fetching data from the provider - require it in the `overrides.js` file before the general Promise override so that the `promise-wrt` sub-dependency doesn't attempt to extend the Bluebird promise implementation - add `/oembed` authenticated endpoint - takes `?url=` query parameter to match against known providers - adds safeguard against oembed-parser's providers list not recognising http+https and www+non-www - responds with `ValidationError` if no provider is found - responds with oembed response from matched provider's oembed endpoint if match is found
2018-06-05 17:49:23 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
on-finished@^2.3.0, on-finished@~2.3.0:
version "2.3.0"
resolved "https://registry.yarnpkg.com/on-finished/-/on-finished-2.3.0.tgz#20f1336481b083cd75337992a16971aa2d906947"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IPEzZIGwg811M3mSoWlxqi2QaUc=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
ee-first "1.1.1"
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
on-headers@~1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/on-headers/-/on-headers-1.0.2.tgz#772b0ae6aaa525c399e489adfad90c403eb3c28f"
integrity sha512-pZAE+FJLoyITytdqK0U5s+FIpjN0JP3OzFi/u8Rx+EV5/W+JTWGXG8xFzevE7AjBfDqHv/8vL8qQsIhHnqRkrA==
Removed coverage tasks from Gruntfile refs #9441
2019-04-08 17:12:48 +03:00
once@^1.3.0, once@^1.3.1, once@^1.4.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.4.0"
resolved "https://registry.yarnpkg.com/once/-/once-1.4.0.tgz#583b1aa775961d4b113ac17d9c50baef9dd76bd1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WDsap3WWHUsROsF9nFC6753Xa9E=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
wrappy "1"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
onetime@^5.1.0:
version "5.1.0"
resolved "https://registry.yarnpkg.com/onetime/-/onetime-5.1.0.tgz#fff0f3c91617fe62bb50189636e99ac8a6df7be5"
integrity sha512-5NcSkPHhwTVFIQN+TUqXoS5+dlElHXdpAWu9I0HP20YOtIi+aZ0Ct82jdlILDxjLEAWwvm+qj1m6aEtsDVmm6Q==
dependencies:
mimic-fn "^2.1.0"
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
optionator@^0.8.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.8.2"
resolved "https://registry.yarnpkg.com/optionator/-/optionator-0.8.2.tgz#364c5e409d3f4d6301d6c0b4c05bba50180aeb64"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-NkxeQJ0/TWMB1sC0wFu6UBgK62Q=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
deep-is "~0.1.3"
fast-levenshtein "~2.0.4"
levn "~0.3.0"
prelude-ls "~1.1.2"
type-check "~0.3.2"
wordwrap "~1.0.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
optionator@^0.8.3:
version "0.8.3"
resolved "https://registry.yarnpkg.com/optionator/-/optionator-0.8.3.tgz#84fa1d036fe9d3c7e21d99884b601167ec8fb495"
integrity sha512-+IW9pACdk3XWmmTXG8m3upGUJst5XRGzxMRjXzAuJ1XnIFNvfhjjIuYkDvysnPQ7qzqVzLt78BCruntqRhWQbA==
dependencies:
deep-is "~0.1.3"
fast-levenshtein "~2.0.6"
levn "~0.3.0"
prelude-ls "~1.1.2"
type-check "~0.3.2"
word-wrap "~1.2.3"
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
os-homedir@^1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/os-homedir/-/os-homedir-1.0.2.tgz#ffbc4988336e0e833de0c168c7ef152121aa7fb3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-/7xJiDNuDoM94MFox+8VISGqf7M=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
os-locale@^1.4.0:
version "1.4.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/os-locale/-/os-locale-1.4.0.tgz#20f9f17ae29ed345e8bde583b13d2009803c14d9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IPnxeuKe00XoveWDsT0gCYA8FNk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
lcid "^1.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
os-tmpdir@^1.0.0, os-tmpdir@~1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/os-tmpdir/-/os-tmpdir-1.0.2.tgz#bbe67406c79aa85c5cfec766fe5734555dfa1274"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-u+Z0BseaqFxc/sdm/lc0VV36EnQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
osenv@^0.1.4:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "0.1.5"
resolved "https://registry.yarnpkg.com/osenv/-/osenv-0.1.5.tgz#85cdfafaeb28e8677f416e287592b5f3f49ea410"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-0CWcCECdMVc2Rw3U5w9ZjqX6ga6ubk1xDVKxtBQPK7wis/0F2r9T6k4ydGYhecl7YUBxBVxhL5oisPsNxAPe2g==
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
dependencies:
os-homedir "^1.0.0"
os-tmpdir "^1.0.0"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
p-cancelable@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/p-cancelable/-/p-cancelable-1.1.0.tgz#d078d15a3af409220c886f1d9a0ca2e441ab26cc"
integrity sha512-s73XxOZ4zpt1edZYZzvhqFa6uvQc1vwUa0K0BdtIZgQMAJj9IbebH+JkgKZc9h+B05PKHLOTl4ajG1BmNrVZlw==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
p-cancelable@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/p-cancelable/-/p-cancelable-2.0.0.tgz#4a3740f5bdaf5ed5d7c3e34882c6fb5d6b266a6e"
integrity sha512-wvPXDmbMmu2ksjkB4Z3nZWTSkJEb9lqVdMaCKpZUGJG9TMiNp9XcbG3fn9fPKjem04fJMJnXoyFPk2FmgiaiNg==
p-event@^4.0.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/p-event/-/p-event-4.1.0.tgz#e92bb866d7e8e5b732293b1c8269d38e9982bf8e"
integrity sha512-4vAd06GCsgflX4wHN1JqrMzBh/8QZ4j+rzp0cd2scXRwuBEv+QR3wrVA5aLhWDLw4y2WgDKvzWF3CCLmVM1UgA==
dependencies:
p-timeout "^2.0.1"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
p-finally@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/p-finally/-/p-finally-1.0.0.tgz#3fbcfb15b899a44123b34b6dcc18b724336a2cae"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-P7z7FbiZpEEjs0ttzBi3JDNqLK4=
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
p-limit@^1.1.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/p-limit/-/p-limit-1.3.0.tgz#b86bd5f0c25690911c7590fcbfc2010d54b3ccb8"
integrity sha512-vvcXsLAJ9Dr5rQOPk7toZQZJApBl2K4J6dANSsEuh6QI41JYcsS/qhTGa9ErIUUgK3WNQoJYvylxvjqmiqEA9Q==
dependencies:
p-try "^1.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
p-limit@^2.0.0:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "2.2.1"
resolved "https://registry.yarnpkg.com/p-limit/-/p-limit-2.2.1.tgz#aa07a788cc3151c939b5131f63570f0dd2009537"
integrity sha512-85Tk+90UCVWvbDavCLKPOLC9vvY8OwEX/RtKF+/1OADJMVlFfEHOiMTPVyxg7mk/dKa+ipdHm0OUkTvCpMTuwg==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
dependencies:
p-try "^2.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
p-locate@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/p-locate/-/p-locate-2.0.0.tgz#20a0103b222a70c8fd39cc2e580680f3dde5ec43"
integrity sha1-IKAQOyIqcMj9OcwuWAaA893l7EM=
dependencies:
p-limit "^1.1.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
p-locate@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/p-locate/-/p-locate-3.0.0.tgz#322d69a05c0264b25997d9f40cd8a891ab0064a4"
integrity sha512-x+12w/To+4GFfgJhBEpiDcLozRJGegY+Ei7/z0tSLkMmxGZNybVMSfWj9aJn8Z5Fc7dBUNJOOVgPv2H7IwulSQ==
dependencies:
p-limit "^2.0.0"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
p-timeout@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/p-timeout/-/p-timeout-2.0.1.tgz#d8dd1979595d2dc0139e1fe46b8b646cb3cdf038"
integrity sha512-88em58dDVB/KzPEx1X0N3LwFfYZPyDc4B6eF38M1rk9VTZMbxXXgjugz8mmwpS9Ox4BDZ+t6t3QP5+/gazweIA==
dependencies:
p-finally "^1.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
p-try@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/p-try/-/p-try-1.0.0.tgz#cbc79cdbaf8fd4228e13f621f2b1a237c1b207b3"
integrity sha1-y8ec26+P1CKOE/Yh8rGiN8GyB7M=
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
p-try@^2.0.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/p-try/-/p-try-2.2.0.tgz#cb2868540e313d61de58fafbe35ce9004d5540e6"
integrity sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
pac-proxy-agent@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/pac-proxy-agent/-/pac-proxy-agent-3.0.1.tgz#115b1e58f92576cac2eba718593ca7b0e37de2ad"
integrity sha512-44DUg21G/liUZ48dJpUSjZnFfZro/0K5JTyFYLBcmh9+T6Ooi4/i4efwUiEy0+4oQusCBqWdhv16XohIj1GqnQ==
dependencies:
agent-base "^4.2.0"
debug "^4.1.1"
get-uri "^2.0.0"
http-proxy-agent "^2.1.0"
https-proxy-agent "^3.0.0"
pac-resolver "^3.0.0"
raw-body "^2.2.0"
socks-proxy-agent "^4.0.1"
pac-resolver@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/pac-resolver/-/pac-resolver-3.0.0.tgz#6aea30787db0a891704deb7800a722a7615a6f26"
integrity sha512-tcc38bsjuE3XZ5+4vP96OfhOugrX+JcnpUbhfuc4LuXBLQhoTthOstZeoQJBDnQUDYzYmdImKsbz0xSl1/9qeA==
dependencies:
co "^4.6.0"
degenerator "^1.0.4"
ip "^1.1.5"
netmask "^1.0.6"
thunkify "^2.1.2"
Update dependency node-jose to v1.1.4
2020-03-26 22:17:47 +03:00
pako@~1.0.5:
version "1.0.11"
resolved "https://registry.yarnpkg.com/pako/-/pako-1.0.11.tgz#6c9599d340d54dfd3946380252a35705a6b992bf"
integrity sha512-4hLB8Py4zZce5s4yd9XzopqwVv/yGNhV1Bl8NTmCq1763HeK2+EwVTv+leGeL13Dnh2wfbqowVPXCIO0z4taYw==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
parent-module@^1.0.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/parent-module/-/parent-module-1.0.1.tgz#691d2709e78c79fae3a156622452d00762caaaa2"
integrity sha512-GQ2EWRpQV8/o+Aw8YqtfZZPfNRWZYkbidE9k5rpl/hC3vtHHBfGm2Ifi6qWV+coDGkrUKZAxE3Lot5kcsRlh+g==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
callsites "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
parse-entities@^1.0.2, parse-entities@^1.1.0:
version "1.2.2"
resolved "https://registry.yarnpkg.com/parse-entities/-/parse-entities-1.2.2.tgz#c31bf0f653b6661354f8973559cb86dd1d5edf50"
integrity sha512-NzfpbxW/NPrzZ/yYSoQxyqUZMZXIdCfE0OIN4ESsnptHJECoUk3FZktxNuzQf4tjt5UEopnxpYJbvYuxIFDdsg==
dependencies:
character-entities "^1.0.0"
character-entities-legacy "^1.0.0"
character-reference-invalid "^1.0.0"
is-alphanumerical "^1.0.0"
is-decimal "^1.0.0"
is-hexadecimal "^1.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
parse-filepath@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/parse-filepath/-/parse-filepath-1.0.2.tgz#a632127f53aaf3d15876f5872f3ffac763d6c891"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-pjISf1Oq89FYdvWHLz/6x2PWyJE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
is-absolute "^1.0.0"
map-cache "^0.2.0"
path-root "^0.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
parse-json@^2.2.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/parse-json/-/parse-json-2.2.0.tgz#f480f40434ef80741f8469099f8dea18f55a4dc9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-9ID0BDTvgHQfhGkJn43qGPVaTck=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
error-ex "^1.2.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
parse-json@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/parse-json/-/parse-json-4.0.0.tgz#be35f5425be1f7f6c747184f98a788cb99477ee0"
integrity sha1-vjX1Qlvh9/bHRxhPmKeIy5lHfuA=
dependencies:
error-ex "^1.3.1"
json-parse-better-errors "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
parse-passwd@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/parse-passwd/-/parse-passwd-1.0.0.tgz#6d5b934a456993b23d37f40a382d6f1666a8e5c6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-bVuTSkVpk7I9N/QKOC1vFmao5cY=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
parse-uri@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/parse-uri/-/parse-uri-1.0.0.tgz#2872dcc22f1a797acde1583d8a0ac29552ddac20"
integrity sha1-KHLcwi8aeXrN4Vg9igrClVLdrCA=
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
parse5@5.1.1:
version "5.1.1"
resolved "https://registry.yarnpkg.com/parse5/-/parse5-5.1.1.tgz#f68e4e5ba1852ac2cadc00f4555fff6c2abb6178"
integrity sha512-ugq4DFI0Ptb+WWjAdOK16+u/nHfiIrcE+sh8kZMaM0WllQKLI9rOUq6c2b7cwPkXdzfQESqvoqK6ug7U/Yyzug==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
parse5@^3.0.1:
version "3.0.3"
resolved "https://registry.yarnpkg.com/parse5/-/parse5-3.0.3.tgz#042f792ffdd36851551cf4e9e066b3874ab45b5c"
integrity sha512-rgO9Zg5LLLkfJF9E6CCmXlSE4UVceloys8JrFqCcHloC3usd/kJCyPDwH2SOlzix2j3xaP9sUX3e8+kvkuleAA==
dependencies:
"@types/node" "*"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
parseurl@~1.3.3:
version "1.3.3"
resolved "https://registry.yarnpkg.com/parseurl/-/parseurl-1.3.3.tgz#9da19e7bee8d12dff0513ed5b76957793bc2e8d4"
integrity sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
pascalcase@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/pascalcase/-/pascalcase-0.1.1.tgz#b363e55e8006ca6fe21784d2db22bd15d7917f14"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-s2PlXoAGym/iF4TS2yK9FdeRfxQ=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
path-exists@^2.0.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/path-exists/-/path-exists-2.1.0.tgz#0feb6c64f0fc518d9a754dd5efb62c7022761f4b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-D+tsZPD8UY2adU3V77YscCJ2H0s=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
pinkie-promise "^2.0.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
path-exists@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/path-exists/-/path-exists-3.0.0.tgz#ce0ebeaa5f78cb18925ea7d810d7b59b010fd515"
integrity sha1-zg6+ql94yxiSXqfYENe1mwEP1RU=
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
path-is-absolute@^1.0.0, path-is-absolute@~1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/path-is-absolute/-/path-is-absolute-1.0.1.tgz#174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-F0uSaHNVNP+8es5r9TpanhtcX18=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
path-key@^2.0.0, path-key@^2.0.1:
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 21:45:29 +03:00
version "2.0.1"
resolved "https://registry.yarnpkg.com/path-key/-/path-key-2.0.1.tgz#411cadb574c5a140d3a4b1910d40d80cc9f40b40"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-QRyttXTFoUDTpLGRDUDYDMn0C0A=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
path-match@1.2.4:
version "1.2.4"
resolved "https://registry.yarnpkg.com/path-match/-/path-match-1.2.4.tgz#a62747f3c7e0c2514762697f24443585b09100ea"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-pidH88fgwlFHYml/JEQ1hbCRAOo=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
http-errors "~1.4.0"
path-to-regexp "^1.0.0"
Update dependency proxyquire to v2.1.1
2019-08-05 06:29:02 +03:00
path-parse@^1.0.6:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.6"
resolved "https://registry.yarnpkg.com/path-parse/-/path-parse-1.0.6.tgz#d62dbb5679405d72c4737ec58600e9ddcf06d24c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-GSmOT2EbHrINBf9SR7CDELwlJ8AENk3Qn7OikK4nFYAu3Ote2+JYNVvkpAEQm3/TLNEJFD/xZJjzyxg3KBWOzw==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
path-proxy@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/path-proxy/-/path-proxy-1.0.0.tgz#18e8a36859fc9d2f1a53b48dee138543c020de5e"
integrity sha1-GOijaFn8nS8aU7SN7hOFQ8Ag3l4=
dependencies:
inflection "~1.3.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
path-root-regex@^0.1.0:
version "0.1.2"
resolved "https://registry.yarnpkg.com/path-root-regex/-/path-root-regex-0.1.2.tgz#bfccdc8df5b12dc52c8b43ec38d18d72c04ba96d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-v8zcjfWxLcUsi0PsONGNcsBLqW0=
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
path-root@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/path-root/-/path-root-0.1.1.tgz#9a4a6814cac1c0cd73360a95f32083c8ea4745b7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-mkpoFMrBwM1zNgqV8yCDyOpHRbc=
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
path-root-regex "^0.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
path-to-regexp@0.1.7:
version "0.1.7"
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-0.1.7.tgz#df604178005f522f15eb4490e7247a1bfaa67f8c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-32BBeABfUi8V60SQ5yR6G/qmf4w=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
path-to-regexp@^1.0.0, path-to-regexp@^1.7.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.7.0"
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-1.7.0.tgz#59fde0f435badacba103a84e9d3bc64e96b9937d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Wf3g9DW62suhA6hOnTvGTpa5k30=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
isarray "0.0.1"
path-type@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/path-type/-/path-type-1.1.0.tgz#59c44f7ee491da704da415da5a4070ba4f8fe441"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WcRPfuSR2nBNpBXaWkBwuk+P5EE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
graceful-fs "^4.1.2"
pify "^2.0.0"
pinkie-promise "^2.0.0"
pend@~1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/pend/-/pend-1.2.0.tgz#7a57eb550a6783f9115331fcf4663d5c8e007a50"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-elfrVQpng/kRUzH89GY9XI4AelA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
performance-now@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/performance-now/-/performance-now-2.1.0.tgz#6309f4e0e5fa913ec1c69307ae364b4b377c9e7b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Ywn04OX6kT7BxpMHrjZLSzd8nns=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
pg-connection-string@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/pg-connection-string/-/pg-connection-string-2.0.0.tgz#3eefe5997e06d94821e4d502e42b6a1c73f8df82"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Pu/lmX4G2Ugh5NUC5CtqHHP434I=
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
Update dependency knex to v0.19.3
2019-09-02 03:32:28 +03:00
pg-connection-string@2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/pg-connection-string/-/pg-connection-string-2.1.0.tgz#e07258f280476540b24818ebb5dca29e101ca502"
integrity sha512-bhlV7Eq09JrRIvo1eKngpwuqKtJnNhZdpdOlvrPrA4dxqXPjxSrbNrfnIDmTpwMyRszrcV4kU5ZA4mMsQUrjdg==
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
picomatch@^2.0.4:
version "2.2.1"
resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.2.1.tgz#21bac888b6ed8601f831ce7816e335bc779f0a4a"
integrity sha512-ISBaA8xQNmwELC7eOjqFKMESB2VIqt4PPDD0nsS95b/9dZXvVKOlz9keMSnoGGKcOHXfTvDD6WMaRoSc9UuhRA==
Update dependency express-hbs to v2.3.2
2020-04-01 21:04:24 +03:00
picomatch@^2.2.1:
version "2.2.2"
resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.2.2.tgz#21f333e9b6b8eaff02468f5146ea406d345f4dad"
integrity sha512-q0M/9eZHzmr0AulXyPwNfZjtwZ/RBZlbN3K3CErVrk50T2ASYI7Bye0EvekFY3IP1Nt2DHu0re+V2ZHIpMkuWg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
pify@^2.0.0:
version "2.3.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/pify/-/pify-2.3.0.tgz#ed141a6ac043a849ea588498e7dca8b15330e90c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-7RQaasBDqEnqWISY59yosVMw6Qw=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
pinkie-promise@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/pinkie-promise/-/pinkie-promise-2.0.1.tgz#2135d6dfa7a358c069ac9b178776288228450ffa"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ITXW36ejWMBprJsXh3YogihFD/o=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
pinkie "^2.0.0"
pinkie@^2.0.0:
version "2.0.4"
resolved "https://registry.yarnpkg.com/pinkie/-/pinkie-2.0.4.tgz#72556b80cfa0d48a974e80e77248e80ed4f7f870"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-clVrgM+g1IqXToDnckjoDtT3+HA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
pkg-up@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/pkg-up/-/pkg-up-2.0.0.tgz#c819ac728059a461cab1c3889a2be3c49a004d7f"
integrity sha1-yBmscoBZpGHKscOImivjxJoATX8=
dependencies:
find-up "^2.1.0"
Update dependency gscan to v2.6.2
2019-07-02 12:09:26 +03:00
pluralize@^8.0.0:
version "8.0.0"
resolved "https://registry.yarnpkg.com/pluralize/-/pluralize-8.0.0.tgz#1a6fa16a38d12a1901e0320fa017051c539ce3b1"
integrity sha512-Nc3IT5yHzflTfbjgqWcCPpo7DaKy4FnpB0l/zCAW0Tc7jxAiuqSxHasntB3D7887LSrA93kDJ9IXovxJYxyLCA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
posix-character-classes@^0.1.0:
version "0.1.1"
resolved "https://registry.yarnpkg.com/posix-character-classes/-/posix-character-classes-0.1.1.tgz#01eac0fe3b5af71a2a6c02feabb8c1fef7e00eab"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-AerA/jta9xoqbAL+q7jB/vfgDqs=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-calc@^7.0.1:
version "7.0.2"
resolved "https://registry.yarnpkg.com/postcss-calc/-/postcss-calc-7.0.2.tgz#504efcd008ca0273120568b0792b16cdcde8aac1"
integrity sha512-rofZFHUg6ZIrvRwPeFktv06GdbDYLcGqh9EwiMutZg+a0oePCCw1zHOEiji6LCpyRcjTREtPASuUqeAvYlEVvQ==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss "^7.0.27"
postcss-selector-parser "^6.0.2"
postcss-value-parser "^4.0.2"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-colormin@^4.0.3:
version "4.0.3"
resolved "https://registry.yarnpkg.com/postcss-colormin/-/postcss-colormin-4.0.3.tgz#ae060bce93ed794ac71264f08132d550956bd381"
integrity sha512-WyQFAdDZpExQh32j0U0feWisZ0dmOtPl44qYmJKkq9xFWY3p+4qnRzCHeNrkeRhwPHz9bQ3mo0/yVkaply0MNw==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
browserslist "^4.0.0"
color "^3.0.0"
has "^1.0.0"
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-convert-values@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/postcss-convert-values/-/postcss-convert-values-4.0.1.tgz#ca3813ed4da0f812f9d43703584e449ebe189a7f"
integrity sha512-Kisdo1y77KUC0Jmn0OXU/COOJbzM8cImvw1ZFsBgBgMgb1iL23Zs/LXRe3r+EZqM3vGYKdQ2YJVQ5VkJI+zEJQ==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-discard-comments@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/postcss-discard-comments/-/postcss-discard-comments-4.0.2.tgz#1fbabd2c246bff6aaad7997b2b0918f4d7af4033"
integrity sha512-RJutN259iuRf3IW7GZyLM5Sw4GLTOH8FmsXBnv8Ab/Tc2k4SR4qbV4DNbyyY4+Sjo362SyDmW2DQ7lBSChrpkg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss "^7.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-discard-duplicates@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/postcss-discard-duplicates/-/postcss-discard-duplicates-4.0.2.tgz#3fe133cd3c82282e550fc9b239176a9207b784eb"
integrity sha512-ZNQfR1gPNAiXZhgENFfEglF93pciw0WxMkJeVmw8eF+JZBbMD7jp6C67GqJAXVZP2BWbOztKfbsdmMp/k8c6oQ==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss "^7.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-discard-empty@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/postcss-discard-empty/-/postcss-discard-empty-4.0.1.tgz#c8c951e9f73ed9428019458444a02ad90bb9f765"
integrity sha512-B9miTzbznhDjTfjvipfHoqbWKwd0Mj+/fL5s1QOz06wufguil+Xheo4XpOnc4NqKYBCNqqEzgPv2aPBIJLox0w==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss "^7.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-discard-overridden@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/postcss-discard-overridden/-/postcss-discard-overridden-4.0.1.tgz#652aef8a96726f029f5e3e00146ee7a4e755ff57"
integrity sha512-IYY2bEDD7g1XM1IDEsUT4//iEYCxAmP5oDSFMVU/JVvT7gh+l4fmjciLqGgwjdWpQIdb0Che2VX00QObS5+cTg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss "^7.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-merge-longhand@^4.0.11:
version "4.0.11"
resolved "https://registry.yarnpkg.com/postcss-merge-longhand/-/postcss-merge-longhand-4.0.11.tgz#62f49a13e4a0ee04e7b98f42bb16062ca2549e24"
integrity sha512-alx/zmoeXvJjp7L4mxEMjh8lxVlDFX1gqWHzaaQewwMZiVhLo42TEClKaeHbRf6J7j82ZOdTJ808RtN0ZOZwvw==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
css-color-names "0.0.4"
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
stylehacks "^4.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-merge-rules@^4.0.3:
version "4.0.3"
resolved "https://registry.yarnpkg.com/postcss-merge-rules/-/postcss-merge-rules-4.0.3.tgz#362bea4ff5a1f98e4075a713c6cb25aefef9a650"
integrity sha512-U7e3r1SbvYzO0Jr3UT/zKBVgYYyhAz0aitvGIYOYK5CPmkNih+WDSsS5tvPrJ8YMQYlEMvsZIiqmn7HdFUaeEQ==
dependencies:
browserslist "^4.0.0"
caniuse-api "^3.0.0"
cssnano-util-same-parent "^4.0.0"
postcss "^7.0.0"
postcss-selector-parser "^3.0.0"
vendors "^1.0.0"
postcss-minify-font-values@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/postcss-minify-font-values/-/postcss-minify-font-values-4.0.2.tgz#cd4c344cce474343fac5d82206ab2cbcb8afd5a6"
integrity sha512-j85oO6OnRU9zPf04+PZv1LYIYOprWm6IA6zkXkrJXyRveDEuQggG6tvoy8ir8ZwjLxLuGfNkCZEQG7zan+Hbtg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-minify-gradients@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/postcss-minify-gradients/-/postcss-minify-gradients-4.0.2.tgz#93b29c2ff5099c535eecda56c4aa6e665a663471"
integrity sha512-qKPfwlONdcf/AndP1U8SJ/uzIJtowHlMaSioKzebAXSG4iJthlWC9iSWznQcX4f66gIWX44RSA841HTHj3wK+Q==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
cssnano-util-get-arguments "^4.0.0"
is-color-stop "^1.0.0"
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-minify-params@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/postcss-minify-params/-/postcss-minify-params-4.0.2.tgz#6b9cef030c11e35261f95f618c90036d680db874"
integrity sha512-G7eWyzEx0xL4/wiBBJxJOz48zAKV2WG3iZOqVhPet/9geefm/Px5uo1fzlHu+DOjT+m0Mmiz3jkQzVHe6wxAWg==
dependencies:
alphanum-sort "^1.0.0"
browserslist "^4.0.0"
cssnano-util-get-arguments "^4.0.0"
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
uniqs "^2.0.0"
postcss-minify-selectors@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/postcss-minify-selectors/-/postcss-minify-selectors-4.0.2.tgz#e2e5eb40bfee500d0cd9243500f5f8ea4262fbd8"
integrity sha512-D5S1iViljXBj9kflQo4YutWnJmwm8VvIsU1GeXJGiG9j8CIg9zs4voPMdQDUmIxetUOh60VilsNzCiAFTOqu3g==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
alphanum-sort "^1.0.0"
has "^1.0.0"
postcss "^7.0.0"
postcss-selector-parser "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-normalize-charset@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/postcss-normalize-charset/-/postcss-normalize-charset-4.0.1.tgz#8b35add3aee83a136b0471e0d59be58a50285dd4"
integrity sha512-gMXCrrlWh6G27U0hF3vNvR3w8I1s2wOBILvA87iNXaPvSNo5uZAMYsZG7XjCUf1eVxuPfyL4TJ7++SGZLc9A3g==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss "^7.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-normalize-display-values@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/postcss-normalize-display-values/-/postcss-normalize-display-values-4.0.2.tgz#0dbe04a4ce9063d4667ed2be476bb830c825935a"
integrity sha512-3F2jcsaMW7+VtRMAqf/3m4cPFhPD3EFRgNs18u+k3lTJJlVe7d0YPO+bnwqo2xg8YiRpDXJI2u8A0wqJxMsQuQ==
dependencies:
cssnano-util-get-match "^4.0.0"
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-normalize-positions@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/postcss-normalize-positions/-/postcss-normalize-positions-4.0.2.tgz#05f757f84f260437378368a91f8932d4b102917f"
integrity sha512-Dlf3/9AxpxE+NF1fJxYDeggi5WwV35MXGFnnoccP/9qDtFrTArZ0D0R+iKcg5WsUd8nUYMIl8yXDCtcrT8JrdA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
cssnano-util-get-arguments "^4.0.0"
has "^1.0.0"
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-normalize-repeat-style@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/postcss-normalize-repeat-style/-/postcss-normalize-repeat-style-4.0.2.tgz#c4ebbc289f3991a028d44751cbdd11918b17910c"
integrity sha512-qvigdYYMpSuoFs3Is/f5nHdRLJN/ITA7huIoCyqqENJe9PvPmLhNLMu7QTjPdtnVf6OcYYO5SHonx4+fbJE1+Q==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
cssnano-util-get-arguments "^4.0.0"
cssnano-util-get-match "^4.0.0"
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-normalize-string@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/postcss-normalize-string/-/postcss-normalize-string-4.0.2.tgz#cd44c40ab07a0c7a36dc5e99aace1eca4ec2690c"
integrity sha512-RrERod97Dnwqq49WNz8qo66ps0swYZDSb6rM57kN2J+aoyEAJfZ6bMx0sx/F9TIEX0xthPGCmeyiam/jXif0eA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
has "^1.0.0"
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-normalize-timing-functions@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/postcss-normalize-timing-functions/-/postcss-normalize-timing-functions-4.0.2.tgz#8e009ca2a3949cdaf8ad23e6b6ab99cb5e7d28d9"
integrity sha512-acwJY95edP762e++00Ehq9L4sZCEcOPyaHwoaFOhIwWCDfik6YvqsYNxckee65JHLKzuNSSmAdxwD2Cud1Z54A==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
cssnano-util-get-match "^4.0.0"
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-normalize-unicode@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/postcss-normalize-unicode/-/postcss-normalize-unicode-4.0.1.tgz#841bd48fdcf3019ad4baa7493a3d363b52ae1cfb"
integrity sha512-od18Uq2wCYn+vZ/qCOeutvHjB5jm57ToxRaMeNuf0nWVHaP9Hua56QyMF6fs/4FSUnVIw0CBPsU0K4LnBPwYwg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
browserslist "^4.0.0"
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-normalize-url@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/postcss-normalize-url/-/postcss-normalize-url-4.0.1.tgz#10e437f86bc7c7e58f7b9652ed878daaa95faae1"
integrity sha512-p5oVaF4+IHwu7VpMan/SSpmpYxcJMtkGppYf0VbdH5B6hN8YNmVyJLuY9FmLQTzY3fag5ESUUHDqM+heid0UVA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
is-absolute-url "^2.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
normalize-url "^3.0.0"
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-normalize-whitespace@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/postcss-normalize-whitespace/-/postcss-normalize-whitespace-4.0.2.tgz#bf1d4070fe4fcea87d1348e825d8cc0c5faa7d82"
integrity sha512-tO8QIgrsI3p95r8fyqKV+ufKlSHh9hMJqACqbv2XknufqEDhDvbguXGBBqxw9nsQoXWf0qOqppziKJKHMD4GtA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-ordered-values@^4.1.2:
version "4.1.2"
resolved "https://registry.yarnpkg.com/postcss-ordered-values/-/postcss-ordered-values-4.1.2.tgz#0cf75c820ec7d5c4d280189559e0b571ebac0eee"
integrity sha512-2fCObh5UanxvSxeXrtLtlwVThBvHn6MQcu4ksNT2tsaV2Fg76R2CV98W7wNSlX+5/pFwEyaDwKLLoEV7uRybAw==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
cssnano-util-get-arguments "^4.0.0"
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-reduce-initial@^4.0.3:
version "4.0.3"
resolved "https://registry.yarnpkg.com/postcss-reduce-initial/-/postcss-reduce-initial-4.0.3.tgz#7fd42ebea5e9c814609639e2c2e84ae270ba48df"
integrity sha512-gKWmR5aUulSjbzOfD9AlJiHCGH6AEVLaM0AV+aSioxUDd16qXP1PCh8d1/BGVvpdWn8k/HiK7n6TjeoXN1F7DA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
browserslist "^4.0.0"
caniuse-api "^3.0.0"
has "^1.0.0"
postcss "^7.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-reduce-transforms@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/postcss-reduce-transforms/-/postcss-reduce-transforms-4.0.2.tgz#17efa405eacc6e07be3414a5ca2d1074681d4e29"
integrity sha512-EEVig1Q2QJ4ELpJXMZR8Vt5DQx8/mo+dGWSR7vWXqcob2gQLyQGsionYcGKATXvQzMPn6DSN1vTN7yFximdIAg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
cssnano-util-get-match "^4.0.0"
has "^1.0.0"
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-selector-parser@^3.0.0:
version "3.1.2"
resolved "https://registry.yarnpkg.com/postcss-selector-parser/-/postcss-selector-parser-3.1.2.tgz#b310f5c4c0fdaf76f94902bbaa30db6aa84f5270"
integrity sha512-h7fJ/5uWuRVyOtkO45pnt1Ih40CEleeyCHzipqAZO2e5H20g25Y48uYnFUiShvY4rZWNJ/Bib/KVPmanaCtOhA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
dot-prop "^5.2.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
indexes-of "^1.0.1"
uniq "^1.0.1"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-selector-parser@^6.0.2:
version "6.0.2"
resolved "https://registry.yarnpkg.com/postcss-selector-parser/-/postcss-selector-parser-6.0.2.tgz#934cf799d016c83411859e09dcecade01286ec5c"
integrity sha512-36P2QR59jDTOAiIkqEprfJDsoNrvwFei3eCqKd1Y0tUsBimsq39BLp7RD+JWny3WgB1zGhJX8XVePwm9k4wdBg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
cssesc "^3.0.0"
indexes-of "^1.0.1"
uniq "^1.0.1"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-svgo@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/postcss-svgo/-/postcss-svgo-4.0.2.tgz#17b997bc711b333bab143aaed3b8d3d6e3d38258"
integrity sha512-C6wyjo3VwFm0QgBy+Fu7gCYOkCmgmClghO+pjcxvrcBKtiKt0uCF+hvbMO1fyv5BMImRK90SMb+dwUnfbGd+jw==
dependencies:
is-svg "^3.0.0"
postcss "^7.0.0"
postcss-value-parser "^3.0.0"
svgo "^1.0.0"
postcss-unique-selectors@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/postcss-unique-selectors/-/postcss-unique-selectors-4.0.1.tgz#9446911f3289bfd64c6d680f073c03b1f9ee4bac"
integrity sha512-+JanVaryLo9QwZjKrmJgkI4Fn8SBgRO6WXQBJi7KiAVPlmxikB5Jzc4EvXMT2H0/m0RjrVVm9rGNhZddm/8Spg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
alphanum-sort "^1.0.0"
postcss "^7.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
uniqs "^2.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-value-parser@^3.0.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.3.1"
resolved "https://registry.yarnpkg.com/postcss-value-parser/-/postcss-value-parser-3.3.1.tgz#9ff822547e2893213cf1c30efa51ac5fd1ba8281"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-pISE66AbVkp4fDQ7VHBwRNXzAAKJjw4Vw7nWI/+Q3vuly7SNfgYXvm6i5IgFylHGK5sP/xHAbB7N49OS4gWNyQ==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
postcss-value-parser@^4.0.2:
version "4.0.3"
resolved "https://registry.yarnpkg.com/postcss-value-parser/-/postcss-value-parser-4.0.3.tgz#651ff4593aa9eda8d5d0d66593a2417aeaeb325d"
integrity sha512-N7h4pG+Nnu5BEIzyeaaIYWs0LI5XC40OrRh5L60z0QjFsqGWcHcbkBvpe1WYpcIS9yQ8sOi/vIPt1ejQCrMVrg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency @lodder/grunt-postcss to v2.0.2
2020-04-15 17:15:23 +03:00
postcss@^7.0.0, postcss@^7.0.1, postcss@^7.0.27:
Update dependency sanitize-html to v1.22.0
2020-02-24 15:29:02 +03:00
version "7.0.27"
resolved "https://registry.yarnpkg.com/postcss/-/postcss-7.0.27.tgz#cc67cdc6b0daa375105b7c424a85567345fc54d9"
integrity sha512-WuQETPMcW9Uf1/22HWUWP9lgsIC+KEHg2kozMflKjbeUtw9ujvFX6QmIfozaErDkmLWS9WEnEdEe6Uo9/BNTdQ==
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
dependencies:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
chalk "^2.4.2"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
source-map "^0.6.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
supports-color "^6.1.0"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
posthtml-parser@^0.2.0:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "0.2.1"
resolved "https://registry.yarnpkg.com/posthtml-parser/-/posthtml-parser-0.2.1.tgz#35d530de386740c2ba24ff2eb2faf39ccdf271dd"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-NdUw3jhnQMK6JP8usvrznM3ycd0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
htmlparser2 "^3.8.3"
isobject "^2.1.0"
posthtml-render@^1.0.5:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.1.5"
resolved "https://registry.yarnpkg.com/posthtml-render/-/posthtml-render-1.1.5.tgz#387934e85438a3de77085fbc7d264efb00bd0e0f"
integrity sha512-yvt54j0zCBHQVEFAuR+yHld8CZrCa/E1Z/OcFNCV1IEWTLVxT8O7nYnM4IIw1CD4r8kaRd3lc42+0lgCKgm87w==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
posthtml@^0.9.0:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "0.9.2"
resolved "https://registry.yarnpkg.com/posthtml/-/posthtml-0.9.2.tgz#f4c06db9f67b61fd17c4e256e7e3d9515bf726fd"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-9MBtufZ7Yf0XxOJW5+PZUVv3Jv0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
posthtml-parser "^0.2.0"
posthtml-render "^1.0.5"
Update dependency sharp to v0.23.1
2019-09-30 03:35:55 +03:00
prebuild-install@^5.3.2:
version "5.3.2"
resolved "https://registry.yarnpkg.com/prebuild-install/-/prebuild-install-5.3.2.tgz#6392e9541ac0b879ef0f22b3d65037417eb2035e"
integrity sha512-INDfXzTPnhT+WYQemqnAXlP7SvfiFMopMozSgXCZ+RDLb279gKfIuLk4o7PgEawLp3WrMgIYGBpkxpraROHsSA==
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
dependencies:
detect-libc "^1.0.3"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
expand-template "^2.0.3"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
github-from-package "0.0.0"
minimist "^1.2.0"
mkdirp "^0.5.1"
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
napi-build-utils "^1.0.1"
Update dependency sharp to v0.22.1
2019-07-02 03:42:14 +03:00
node-abi "^2.7.0"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
noop-logger "^0.1.1"
npmlog "^4.0.1"
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
pump "^3.0.0"
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
rc "^1.2.7"
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
simple-get "^3.0.3"
tar-fs "^2.0.0"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
tunnel-agent "^0.6.0"
which-pm-runs "^1.0.0"
Update dependency sharp to v0.23.3
2019-11-18 07:24:40 +03:00
prebuild-install@^5.3.3:
version "5.3.3"
resolved "https://registry.yarnpkg.com/prebuild-install/-/prebuild-install-5.3.3.tgz#ef4052baac60d465f5ba6bf003c9c1de79b9da8e"
integrity sha512-GV+nsUXuPW2p8Zy7SarF/2W/oiK8bFQgJcncoJ0d7kRpekEA0ftChjfEaF9/Y+QJEc/wFR7RAEa8lYByuUIe2g==
dependencies:
detect-libc "^1.0.3"
expand-template "^2.0.3"
github-from-package "0.0.0"
minimist "^1.2.0"
mkdirp "^0.5.1"
napi-build-utils "^1.0.1"
node-abi "^2.7.0"
noop-logger "^0.1.1"
npmlog "^4.0.1"
pump "^3.0.0"
rc "^1.2.7"
simple-get "^3.0.3"
tar-fs "^2.0.0"
tunnel-agent "^0.6.0"
which-pm-runs "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
prelude-ls@~1.1.2:
version "1.1.2"
resolved "https://registry.yarnpkg.com/prelude-ls/-/prelude-ls-1.1.2.tgz#21932a549f5e52ffd9a827f570e04be62a97da54"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IZMqVJ9eUv/ZqCf1cOBL5iqX2lQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
prepend-http@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/prepend-http/-/prepend-http-2.0.0.tgz#e92434bfa5ea8c19f41cdfd401d741a3c819d897"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-6SQ0v6XqjBn0HN/UAddBo8gZ2Jc=
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
pretty-bytes@^3.0.0:
version "3.0.1"
resolved "https://registry.yarnpkg.com/pretty-bytes/-/pretty-bytes-3.0.1.tgz#27d0008d778063a0b4811bb35c79f1bd5d5fbccf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-J9AAjXeAY6C0gRuzXHnxvV1fvM8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
number-is-nan "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 21:56:05 +03:00
pretty-bytes@^4.0.2:
version "4.0.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/pretty-bytes/-/pretty-bytes-4.0.2.tgz#b2bf82e7350d65c6c33aa95aaa5a4f6327f61cd9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-sr+C5zUNZcbDOqlaqlpPYyf2HNk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
prettyjson@^1.1.3:
version "1.2.1"
resolved "https://registry.yarnpkg.com/prettyjson/-/prettyjson-1.2.1.tgz#fcffab41d19cab4dfae5e575e64246619b12d289"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-/P+rQdGcq0365eV15kJGYZsS0ok=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
colors "^1.1.2"
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
minimist "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
probe-image-size@5.0.0, probe-image-size@^5.0.0:
Update dependency probe-image-size to v5 (#11128)
2019-09-30 23:35:10 +03:00
version "5.0.0"
resolved "https://registry.yarnpkg.com/probe-image-size/-/probe-image-size-5.0.0.tgz#1b87d20340ab8fcdb4324ec77fbc8a5f53419878"
integrity sha512-V6uBYw5eBc5UVIE7MUZD6Nxg0RYuGDWLDenEn0B1WC6PcTvn1xdQ6HLDDuznefsiExC6rNrCz7mFRBo0f3Xekg==
dependencies:
deepmerge "^4.0.0"
inherits "^2.0.3"
next-tick "^1.0.0"
request "^2.83.0"
stream-parser "~0.3.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
process-nextick-args@~2.0.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "2.0.1"
resolved "https://registry.yarnpkg.com/process-nextick-args/-/process-nextick-args-2.0.1.tgz#7820d9b16120cc55ca9ae7792680ae7dba6d7fe2"
integrity sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Update dependency node-jose to v1.1.4
2020-03-26 22:17:47 +03:00
process@^0.11.10:
version "0.11.10"
resolved "https://registry.yarnpkg.com/process/-/process-0.11.10.tgz#7332300e840161bda3e69a1d1d91a7d4bc16f182"
integrity sha1-czIwDoQBYb2j5podHZGn1LwW8YI=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
progress@^2.0.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "2.0.3"
resolved "https://registry.yarnpkg.com/progress/-/progress-2.0.3.tgz#7e8cf8d8f5b8f239c1bc68beb4eb78567d572ef8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-7PiHtLll5LdnKIMw100I+8xJXR5gW2QwWYkT6iJva0bXitZKa/XMrSbdmg3r2Xnaidz9Qumd0VPaMrZlF9V9sA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
promisify-call@^2.0.2:
version "2.0.4"
resolved "https://registry.yarnpkg.com/promisify-call/-/promisify-call-2.0.4.tgz#d48c2d45652ccccd52801ddecbd533a6d4bd5fba"
integrity sha1-1IwtRWUszM1SgB3ey9UzptS9X7o=
dependencies:
with-callback "^1.0.2"
Update dependency nock to v11 (#11093)
2019-09-10 11:13:26 +03:00
propagate@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/propagate/-/propagate-2.0.1.tgz#40cdedab18085c792334e64f0ac17256d38f9a45"
integrity sha512-vGrhOavPSTz4QVNuBNdcNXePNdNMaO1xj9yBeH1ScQPjk/rhg9sSlCXPhMkFuaNNW/syTvYqsnbIJxMBfRbbag==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
proto-list@~1.2.1:
version "1.2.4"
resolved "https://registry.yarnpkg.com/proto-list/-/proto-list-1.2.4.tgz#212d5bfe1318306a420f6402b8e26ff39647a849"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IS1b/hMYMGpCD2QCuOJv85ZHqEk=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
proxy-addr@~2.0.5:
version "2.0.5"
resolved "https://registry.yarnpkg.com/proxy-addr/-/proxy-addr-2.0.5.tgz#34cbd64a2d81f4b1fd21e76f9f06c8a45299ee34"
integrity sha512-t/7RxHXPH6cJtP0pRG6smSr9QJidhB+3kXu0KgXnbGYMgzEnUxRQ4/LDdfOwZEMyIh3/xHb8PX3t+lfL9z+YVQ==
dependencies:
forwarded "~0.1.2"
ipaddr.js "1.9.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
proxy-agent@^3.0.3:
version "3.1.1"
resolved "https://registry.yarnpkg.com/proxy-agent/-/proxy-agent-3.1.1.tgz#7e04e06bf36afa624a1540be247b47c970bd3014"
integrity sha512-WudaR0eTsDx33O3EJE16PjBRZWcX8GqCEeERw1W3hZJgH/F2a46g7jty6UGty6NeJ4CKQy8ds2CJPMiyeqaTvw==
dependencies:
agent-base "^4.2.0"
debug "4"
http-proxy-agent "^2.1.0"
https-proxy-agent "^3.0.0"
lru-cache "^5.1.1"
pac-proxy-agent "^3.0.1"
proxy-from-env "^1.0.0"
socks-proxy-agent "^4.0.1"
proxy-from-env@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/proxy-from-env/-/proxy-from-env-1.0.0.tgz#33c50398f70ea7eb96d21f7b817630a55791c7ee"
integrity sha1-M8UDmPcOp+uW0h97gXYwpVeRx+4=
Update dependency proxyquire to v2.1.3
2019-08-26 03:29:39 +03:00
proxyquire@2.1.3:
version "2.1.3"
resolved "https://registry.yarnpkg.com/proxyquire/-/proxyquire-2.1.3.tgz#2049a7eefa10a9a953346a18e54aab2b4268df39"
integrity sha512-BQWfCqYM+QINd+yawJz23tbBM40VIGXOdDw3X344KcclI/gtBbdWF6SlQ4nK/bYhF9d27KYug9WzljHC6B9Ysg==
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 16:59:06 +03:00
dependencies:
fill-keys "^1.0.2"
Update dependency proxyquire to v2.1.1
2019-08-05 06:29:02 +03:00
module-not-found-error "^1.0.1"
resolve "^1.11.1"
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 16:59:06 +03:00
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
pseudomap@^1.0.1, pseudomap@^1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/pseudomap/-/pseudomap-1.0.2.tgz#f052a28da70e618917ef0a8ac34c1ae5a68286b3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8FKijacOYYkX7wqKw0wa5aaChrM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
psl@^1.1.24, psl@^1.1.28:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "1.4.0"
resolved "https://registry.yarnpkg.com/psl/-/psl-1.4.0.tgz#5dd26156cdb69fa1fdb8ab1991667d3f80ced7c2"
integrity sha512-HZzqCGPecFLyoRj5HLfuDSKYTJkAfB5thKBIkRHtGjWwY7p1dAyveIbXIq4tO0KYfDF2tHqPUgY9SDnGm00uFw==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
public-address@~0.1.1:
version "0.1.2"
resolved "https://registry.yarnpkg.com/public-address/-/public-address-0.1.2.tgz#f95f3e0cf28b89f965b0f188fd1267ac0856552f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-+V8+DPKLifllsPGI/RJnrAhWVS8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
pump@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/pump/-/pump-3.0.0.tgz#b4a2116815bde2f4e1ea602354e8c75565107a64"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-LwZy+p3SFs1Pytd/jYct4wpv49HiYCqd9Rlc5ZVdk0V+8Yzv6jR5Blk3TRmPL1ft69TxP0IMZGJ+WPFU2BFhww==
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
dependencies:
end-of-stream "^1.1.0"
once "^1.3.1"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
punycode2@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/punycode2/-/punycode2-1.0.0.tgz#e2b4b9a9a8ff157d0b84438e203181ee7892dfd8"
integrity sha1-4rS5qaj/FX0LhEOOIDGB7niS39g=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
punycode@^1.4.1:
version "1.4.1"
resolved "https://registry.yarnpkg.com/punycode/-/punycode-1.4.1.tgz#c0d5a63b2718800ad8e1eb0fa5269c84dd41845e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-wNWmOycYgArY4esPpSachN1BhF4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
punycode@^2.1.0, punycode@^2.1.1:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/punycode/-/punycode-2.1.1.tgz#b58b010ac40c22c5657616c8d2c2c02c7bf479ec"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-XRsRjdf+j5ml+y/6GKHPZbrF/8p2Yga0JPtdqTIY2Xe5ohJPD9saDJJLPvp9+NSBprVvevdXZybnj2cv8OEd0A==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
punycode@~1.2.4:
version "1.2.4"
resolved "https://registry.yarnpkg.com/punycode/-/punycode-1.2.4.tgz#54008ac972aec74175def9cba6df7fa9d3918740"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-VACKyXKux0F13vnLpt9/qdORh0A=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
q@^1.1.2:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.5.1"
resolved "https://registry.yarnpkg.com/q/-/q-1.5.1.tgz#7e32f75b41381291d04611f1bf14109ac00651d7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-fjL3W0E4EpHQRhHxvxQQmsAGUdc=
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
qs@6.7.0:
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
version "6.7.0"
resolved "https://registry.yarnpkg.com/qs/-/qs-6.7.0.tgz#41dc1a015e3d581f1621776be31afb2876a9b1bc"
integrity sha512-VCdBRNFTX1fyE7Nb6FYoURo/SPe62QCaAyzJvUjwRaIsc+NePBEniHlvxFmmX56+HZphIGtV0XeCirBtpDrTyQ==
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
qs@^6.4.0, qs@^6.5.1, qs@^6.6.0:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "6.9.0"
resolved "https://registry.yarnpkg.com/qs/-/qs-6.9.0.tgz#d1297e2a049c53119cb49cca366adbbacc80b409"
integrity sha512-27RP4UotQORTpmNQDX8BHPukOnBP3p1uUJY5UnDhaJB+rMt9iMsok724XL+UHU23bEFOHRMQ2ZhI99qOWUMGFA==
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
qs@~6.5.2:
version "6.5.2"
resolved "https://registry.yarnpkg.com/qs/-/qs-6.5.2.tgz#cb3ae806e8740444584ef154ce8ee98d403f3e36"
integrity sha512-N5ZAX4/LxJmF+7wN74pUD6qAh9/wnvdQcjq9TZjevvXzSUo7bfmw91saqMjzGS2xq91/odN2dW/WOl7qQHNDGA==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
Update dependency image-size to v0.8.3 (#11149)
2019-10-01 00:17:18 +03:00
queue@6.0.1:
version "6.0.1"
resolved "https://registry.yarnpkg.com/queue/-/queue-6.0.1.tgz#abd5a5b0376912f070a25729e0b6a7d565683791"
integrity sha512-AJBQabRCCNr9ANq8v77RJEv73DPbn55cdTb+Giq4X0AVnNVZvMHlYp7XlQiN+1npCZj1DuSmaA2hYVUUDgxFDg==
dependencies:
inherits "~2.0.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
rai@~0.1.11:
version "0.1.12"
resolved "https://registry.yarnpkg.com/rai/-/rai-0.1.12.tgz#8ccfd014d0f9608630dd73c19b8e4b057754a6a6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-jM/QFND5YIYw3XPBm45LBXdUpqY=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency eslint-plugin-ghost to v1.0.1
2020-03-25 21:31:55 +03:00
ramda@^0.27.0:
version "0.27.0"
resolved "https://registry.yarnpkg.com/ramda/-/ramda-0.27.0.tgz#915dc29865c0800bf3f69b8fd6c279898b59de43"
integrity sha512-pVzZdDpWwWqEVVLshWUHjNwuVP7SfcmPraYuqocJp1yo2U1R7P+5QAfDhdItkuoGqIBnBYrtPp7rEPqDn9HlZA==
Updated tests eslint config to use eslint-plugin-ghost@0.5.0 no issue - bump eslint-plugin-ghost to v0.5.0 - update core/test eslint config to use "ghost:test" in place of custom ruleset - apply automated eslint fixes
2019-08-19 14:41:09 +03:00
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
random-bytes@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/random-bytes/-/random-bytes-1.0.0.tgz#4f68a1dc0ae58bd3fb95848c30324db75d64360b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-T2ih3Arli9P7lYSMMDJNt11kNgs=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
range-parser@~1.2.1:
version "1.2.1"
resolved "https://registry.yarnpkg.com/range-parser/-/range-parser-1.2.1.tgz#3cf37023d199e1c24d1a55b84800c2f3e6468031"
integrity sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
raw-body@2.4.0:
version "2.4.0"
resolved "https://registry.yarnpkg.com/raw-body/-/raw-body-2.4.0.tgz#a1ce6fb9c9bc356ca52e89256ab59059e13d0332"
integrity sha512-4Oz8DUIwdvoa5qMJelxipzi/iJIi40O5cGV1wNYp5hvZP8ZN0T+jiNkL0QepXs+EsQ9XJ8ipEDoiH70ySUJP3Q==
dependencies:
bytes "3.1.0"
http-errors "1.7.2"
iconv-lite "0.4.24"
unpipe "1.0.0"
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
raw-body@^2.2.0:
version "2.4.1"
resolved "https://registry.yarnpkg.com/raw-body/-/raw-body-2.4.1.tgz#30ac82f98bb5ae8c152e67149dac8d55153b168c"
integrity sha512-9WmIKF6mkvA0SLmA2Knm9+qj89e+j1zqgyn8aXGd7+nAduPoqgI9lO57SAZNn/Byzo5P7JhXTyg9PzaJbH73bA==
dependencies:
bytes "3.1.0"
http-errors "1.7.3"
iconv-lite "0.4.24"
unpipe "1.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
raw-body@~1.1.0:
version "1.1.7"
resolved "https://registry.yarnpkg.com/raw-body/-/raw-body-1.1.7.tgz#1d027c2bfa116acc6623bca8f00016572a87d425"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-HQJ8K/oRasxmI7yo8AAWVyqH1CU=
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
dependencies:
bytes "1"
string_decoder "0.10"
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
rc@^1.2.7:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.2.8"
resolved "https://registry.yarnpkg.com/rc/-/rc-1.2.8.tgz#cd924bf5200a075b83c188cd6b9e211b7fc0d3ed"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
deep-extend "^0.6.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ini "~1.3.0"
minimist "^1.2.0"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
strip-json-comments "~2.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency node-jose to v1.1.4
2020-03-26 22:17:47 +03:00
react-zlib-js@^1.0.4:
version "1.0.4"
resolved "https://registry.yarnpkg.com/react-zlib-js/-/react-zlib-js-1.0.4.tgz#dd2b9fbf56d5ab224fa7a99affbbedeba9aa3dc7"
integrity sha512-ynXD9DFxpE7vtGoa3ZwBtPmZrkZYw2plzHGbanUjBOSN4RtuXdektSfABykHtTiWEHMh7WdYj45LHtp228ZF1A==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
read-pkg-up@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/read-pkg-up/-/read-pkg-up-1.0.1.tgz#9d63c13276c065918d57f002a57f40a1b643fb02"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-nWPBMnbAZZGNV/ACpX9AobZD+wI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
find-up "^1.0.0"
read-pkg "^1.0.0"
read-pkg@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/read-pkg/-/read-pkg-1.1.0.tgz#f5ffaa5ecd29cb31c0474bca7d756b6bb29e3f28"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-9f+qXs0pyzHAR0vKfXVra7KePyg=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
load-json-file "^1.0.0"
normalize-package-data "^2.3.2"
path-type "^1.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
readable-stream@1.1.x, readable-stream@~1.1.9:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.1.14"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-1.1.14.tgz#7cf4c54ef648e3813084c636dd2079e166c081d9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-fPTFTvZI44EwhMY23SB54WbAgdk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
core-util-is "~1.0.0"
inherits "~2.0.1"
isarray "0.0.1"
string_decoder "~0.10.x"
Update dependency knex-migrator to v3.4.4
2020-04-14 18:21:50 +03:00
readable-stream@2, readable-stream@^2.0.0, readable-stream@^2.0.5, readable-stream@^2.0.6, readable-stream@^2.2.2, readable-stream@^2.3.0, readable-stream@^2.3.5, readable-stream@^2.3.6, readable-stream@~2.3.6:
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
version "2.3.6"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-2.3.6.tgz#b11c27d88b8ff1fbe070643cf94b0c79ae1b0aaf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-tQtKA9WIAhBF3+VLAseyMqZeBjW0AHJoxOtYqSUZNJxauErmLbVm2FW1y+J/YA9dUrAC39ITejlZWhVIwawkKw==
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
dependencies:
core-util-is "~1.0.0"
inherits "~2.0.3"
isarray "~1.0.0"
process-nextick-args "~2.0.0"
safe-buffer "~5.1.1"
string_decoder "~1.1.1"
util-deprecate "~1.0.1"
Update dependency mysql to v2.18.1
2020-02-19 14:11:32 +03:00
readable-stream@2.3.7:
version "2.3.7"
resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-2.3.7.tgz#1eca1cf711aef814c04f62252a36a62f6cb23b57"
integrity sha512-Ebho8K4jIbHAxnuxi7o42OrZgF/ZTNcsZj6nRKyUmkhLFq8CHItp/fy6hQZuZmP/n3yZ9VBUbp4zz/mX8hmYPw==
dependencies:
core-util-is "~1.0.0"
inherits "~2.0.3"
isarray "~1.0.0"
process-nextick-args "~2.0.0"
safe-buffer "~5.1.1"
string_decoder "~1.1.1"
util-deprecate "~1.0.1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
readable-stream@^3.0.1, readable-stream@^3.0.2, readable-stream@^3.1.1, readable-stream@^3.4.0:
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
version "3.4.0"
resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-3.4.0.tgz#a51c26754658e0a3c21dbf59163bd45ba6f447fc"
integrity sha512-jItXPLmrSR8jmTRmRWJXCnGJsfy85mB3Wd/uINMXA65yrnFo0cPClFIUWzo2najVNSl+mx7/4W8ttlLWJe99pQ==
dependencies:
inherits "^2.0.3"
string_decoder "^1.1.1"
util-deprecate "^1.0.1"
Update dependency express-hbs to v2.3.2
2020-04-01 21:04:24 +03:00
readdirp@3.4.0:
version "3.4.0"
resolved "https://registry.yarnpkg.com/readdirp/-/readdirp-3.4.0.tgz#9fdccdf9e9155805449221ac645e8303ab5b9ada"
integrity sha512-0xe001vZBnJEK+uKcj8qOhyAKPzIT+gStxWr3LCB0DwcXR5NZJ3IaC+yGnHCYzB/S7ov3m3EEbZI2zeNvX+hGQ==
dependencies:
picomatch "^2.2.1"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
readdirp@~3.2.0:
version "3.2.0"
resolved "https://registry.yarnpkg.com/readdirp/-/readdirp-3.2.0.tgz#c30c33352b12c96dfb4b895421a49fd5a9593839"
integrity sha512-crk4Qu3pmXwgxdSgGhgA/eXiJAPQiX4GMOZZMXnqKxHX7TaoL+3gQVo/WeuAiogr07DpnfjIMpXXa+PAIvwPGQ==
dependencies:
picomatch "^2.0.4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
rechoir@^0.6.2:
version "0.6.2"
resolved "https://registry.yarnpkg.com/rechoir/-/rechoir-0.6.2.tgz#85204b54dba82d5742e28c96756ef43af50e3384"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-hSBLVNuoLVdC4oyWdW70OvUOM4Q=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
resolve "^1.1.6"
redent@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/redent/-/redent-1.0.0.tgz#cf916ab1fd5f1f16dfb20822dd6ec7f730c2afde"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-z5Fqsf1fHxbfsggi3W7H9zDCr94=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
indent-string "^2.1.0"
strip-indent "^1.0.1"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
regenerator-runtime@^0.13.2:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "0.13.3"
resolved "https://registry.yarnpkg.com/regenerator-runtime/-/regenerator-runtime-0.13.3.tgz#7cf6a77d8f5c6f60eb73c5fc1955b2ceb01e6bf5"
integrity sha512-naKIZz2GQ8JWh///G7L3X6LaQUAMp2lvb1rvwwsURe/VXwD6VMfr+/1NuNw3ag8v2kY1aQ/go5SNn79O9JU7yw==
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
regex-not@^1.0.0, regex-not@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/regex-not/-/regex-not-1.0.2.tgz#1f4ece27e00b0b65e0247a6810e6a85d83a5752c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-J6SDjUgDxQj5NusnOtdFxDwN/+HWykR8GELwctJ7mdqhcyy1xEc4SRFHUXvxTp661YaVKAjfRLZ9cCqS6tn32A==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
extend-shallow "^3.0.2"
safe-regex "^1.1.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
regexpp@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/regexpp/-/regexpp-2.0.1.tgz#8d19d31cf632482b589049f8281f93dbcba4d07f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-lv0M6+TkDVniA3aD1Eg0DVpfU/booSu7Eev3TDO/mZKHBfVjgCGTV4t4buppESEYDtkArYFOxTJWv6S5C+iaNw==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
🐛 Fixed "Incorrectly eaten value" error if markdown footnote has trailing newline whitespace no issue - update `url-utils` dependency which contains a fixed version of remark footnote parsing
2020-03-29 22:24:25 +03:00
remark-footnotes@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/remark-footnotes/-/remark-footnotes-1.0.0.tgz#9c7a97f9a89397858a50033373020b1ea2aad011"
integrity sha512-X9Ncj4cj3/CIvLI2Z9IobHtVi8FVdUrdJkCNaL9kdX8ohfsi18DXHsCVd/A7ssARBdccdDb5ODnt62WuEWaM/g==
🐛 Fixed "unsaved changes" modal displaying when post has been saved refs https://github.com/TryGhost/Ghost/issues/10477 The unsaved changes modal is displaying even when the post has been saved if images have been uploaded because the server is transforming absolute image urls to relative during input of the `mobiledoc` field but not transforming them back to absolute during output. The editor then thinks it's out of sync and shows the warning when trying to leave. - `@tryghost/url-utils` has been updated with new methods for transforming URLs in mobiledoc content - moves absolute->relative transformation from the API input serializers into the Post model - transforms URLs in more fields for a more comprehensive transformation and fewer issues when re-configuring a site's domain - previously there could be problems with internal links between posts not being transformed so you could change the url config to newdomain.com but links in post content would still be pointing to olddomain.com - updates the API post output serializers to transform all modified fields - drops the `?absolute_urls=true` param switch from the `canary` API post output serializer so that all URLs are output as absolute - we're transforming more urls to relative when saving so this is necessary to ensure the unsaved changes modal is not triggered - the query param isn't documented and will disappear in v3
2019-10-07 22:23:45 +03:00
remark-parse@^7.0.0:
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
version "7.0.1"
resolved "https://registry.yarnpkg.com/remark-parse/-/remark-parse-7.0.1.tgz#0c13d67e0d7b82c2ad2d8b6604ec5fae6c333c2b"
integrity sha512-WOZLa545jYXtSy+txza6ACudKWByQac4S2DmGk+tAGO/3XnVTOxwyCIxB7nTcLlk8Aayhcuf3cV1WV6U6L7/DQ==
dependencies:
collapse-white-space "^1.0.2"
is-alphabetical "^1.0.0"
is-decimal "^1.0.0"
is-whitespace-character "^1.0.0"
is-word-character "^1.0.0"
markdown-escapes "^1.0.0"
parse-entities "^1.1.0"
repeat-string "^1.5.4"
state-toggle "^1.0.0"
trim "0.0.1"
trim-trailing-lines "^1.0.0"
unherit "^1.0.4"
unist-util-remove-position "^1.0.0"
vfile-location "^2.0.0"
xtend "^4.0.1"
🐛 Fixed "unsaved changes" modal displaying when post has been saved refs https://github.com/TryGhost/Ghost/issues/10477 The unsaved changes modal is displaying even when the post has been saved if images have been uploaded because the server is transforming absolute image urls to relative during input of the `mobiledoc` field but not transforming them back to absolute during output. The editor then thinks it's out of sync and shows the warning when trying to leave. - `@tryghost/url-utils` has been updated with new methods for transforming URLs in mobiledoc content - moves absolute->relative transformation from the API input serializers into the Post model - transforms URLs in more fields for a more comprehensive transformation and fewer issues when re-configuring a site's domain - previously there could be problems with internal links between posts not being transformed so you could change the url config to newdomain.com but links in post content would still be pointing to olddomain.com - updates the API post output serializers to transform all modified fields - drops the `?absolute_urls=true` param switch from the `canary` API post output serializer so that all URLs are output as absolute - we're transforming more urls to relative when saving so this is necessary to ensure the unsaved changes modal is not triggered - the query param isn't documented and will disappear in v3
2019-10-07 22:23:45 +03:00
remark-stringify@^7.0.0:
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
version "7.0.3"
resolved "https://registry.yarnpkg.com/remark-stringify/-/remark-stringify-7.0.3.tgz#9221e9770b0b395af83a0d5881a44b6fcb9d0a2a"
integrity sha512-+jgmjNjm2kR7y2Ns1BATXRlFr+iQ7sDcpSgytfU77nkw7UCd5yJNArSxB3MU3Uul7HuyYNTCjetoGfy8xLia1A==
dependencies:
ccount "^1.0.0"
is-alphanumeric "^1.0.0"
is-decimal "^1.0.0"
is-whitespace-character "^1.0.0"
longest-streak "^2.0.1"
markdown-escapes "^1.0.0"
markdown-table "^1.1.0"
mdast-util-compact "^1.0.0"
parse-entities "^1.0.2"
repeat-string "^1.5.4"
state-toggle "^1.0.0"
stringify-entities "^2.0.0"
unherit "^1.0.4"
xtend "^4.0.1"
🐛 Fixed "unsaved changes" modal displaying when post has been saved refs https://github.com/TryGhost/Ghost/issues/10477 The unsaved changes modal is displaying even when the post has been saved if images have been uploaded because the server is transforming absolute image urls to relative during input of the `mobiledoc` field but not transforming them back to absolute during output. The editor then thinks it's out of sync and shows the warning when trying to leave. - `@tryghost/url-utils` has been updated with new methods for transforming URLs in mobiledoc content - moves absolute->relative transformation from the API input serializers into the Post model - transforms URLs in more fields for a more comprehensive transformation and fewer issues when re-configuring a site's domain - previously there could be problems with internal links between posts not being transformed so you could change the url config to newdomain.com but links in post content would still be pointing to olddomain.com - updates the API post output serializers to transform all modified fields - drops the `?absolute_urls=true` param switch from the `canary` API post output serializer so that all URLs are output as absolute - we're transforming more urls to relative when saving so this is necessary to ensure the unsaved changes modal is not triggered - the query param isn't documented and will disappear in v3
2019-10-07 22:23:45 +03:00
remark@^11.0.1:
version "11.0.1"
resolved "https://registry.yarnpkg.com/remark/-/remark-11.0.1.tgz#3c16e1ed84c78a661299991bb8d5fa7ee5d18e3c"
integrity sha512-Fl2AvN+yU6sOBAjUz3xNC5iEvLkXV8PZicLOOLifjU8uKGusNvhHfGRCfETsqyvRHZ24JXqEyDY4hRLhoUd30A==
dependencies:
remark-parse "^7.0.0"
remark-stringify "^7.0.0"
unified "^8.2.0"
🐛 Fixed "Incorrectly eaten value" error if markdown footnote has trailing newline whitespace no issue - update `url-utils` dependency which contains a fixed version of remark footnote parsing
2020-03-29 22:24:25 +03:00
remark@^11.0.2:
version "11.0.2"
resolved "https://registry.yarnpkg.com/remark/-/remark-11.0.2.tgz#12b90ea100ac3362b1976fa87a6e4e0ab5968202"
integrity sha512-bh+eJgn8wgmbHmIBOuwJFdTVRVpl3fcVP6HxmpPWO0ULGP9Qkh6INJh0N5Uy7GqlV7DQYGoqaKiEIpM5LLvJ8w==
dependencies:
remark-parse "^7.0.0"
remark-stringify "^7.0.0"
unified "^8.2.0"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
remove-trailing-separator@^1.0.1:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz#c24bce2a283adad5bc3f58e0d48249b92379d8ef"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-wkvOKig62tW8P1jg1IJJuSN52O8=
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
remove-trailing-slash@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/remove-trailing-slash/-/remove-trailing-slash-0.1.0.tgz#1498e5df0984c27e49b76ebf06887ca2d01150d2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-FJjl3wmEwn5Jt26/Boh8otARUNI=
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
repeat-element@^1.1.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/repeat-element/-/repeat-element-1.1.3.tgz#782e0d825c0c5a3bb39731f84efee6b742e6b1ce"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-ahGq0ZnV5m5XtZLMb+vP76kcAM5nkLqk0lpqAuojSKGgQtn4eRi4ZZGm2olo2zKFH+sMsWaqOCW1dqAnOru72g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
repeat-string@^1.5.4, repeat-string@^1.6.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.6.1"
resolved "https://registry.yarnpkg.com/repeat-string/-/repeat-string-1.6.1.tgz#8dcae470e1c88abc2d600fff4a776286da75e637"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-jcrkcOHIirwtYA//Sndihtp15jc=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
repeating@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/repeating/-/repeating-2.0.1.tgz#5214c53a926d3552707527fbab415dbc08d06dda"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-UhTFOpJtNVJwdSf7q0FdvAjQbdo=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
is-finite "^1.0.0"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
replace-ext@1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/replace-ext/-/replace-ext-1.0.0.tgz#de63128373fcbf7c3ccfa4de5a480c45a67958eb"
integrity sha1-3mMSg3P8v3w8z6TeWkgMRaZ5WOs=
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
request-promise-core@1.1.2:
version "1.1.2"
resolved "https://registry.yarnpkg.com/request-promise-core/-/request-promise-core-1.1.2.tgz#339f6aababcafdb31c799ff158700336301d3346"
integrity sha512-UHYyq1MO8GsefGEt7EprS8UrXsm1TxEvFUX1IMTuSLU2Rh7fTIdFtl8xD7JiEYiWU2dl+NYAjCTksTehQUxPag==
dependencies:
lodash "^4.17.11"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
request-promise-core@1.1.3:
version "1.1.3"
resolved "https://registry.yarnpkg.com/request-promise-core/-/request-promise-core-1.1.3.tgz#e9a3c081b51380dfea677336061fea879a829ee9"
integrity sha512-QIs2+ArIGQVp5ZYbWD5ZLCY29D5CfWizP8eWnm8FoGD1TX61veauETVQbrV60662V0oFBkrDOuaBI8XgtuyYAQ==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
lodash "^4.17.15"
request-promise-native@^1.0.8:
version "1.0.8"
resolved "https://registry.yarnpkg.com/request-promise-native/-/request-promise-native-1.0.8.tgz#a455b960b826e44e2bf8999af64dff2bfe58cb36"
integrity sha512-dapwLGqkHtwL5AEbfenuzjTYg35Jd6KPytsC2/TLkVMz8rm+tNt72MGUWT1RP/aYawMpN6HqbNGBQaRcBtjQMQ==
dependencies:
request-promise-core "1.1.3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
stealthy-require "^1.1.1"
tough-cookie "^2.3.3"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
request-promise@^4.2.4:
version "4.2.4"
resolved "https://registry.yarnpkg.com/request-promise/-/request-promise-4.2.4.tgz#1c5ed0d71441e38ad58c7ce4ea4ea5b06d54b310"
integrity sha512-8wgMrvE546PzbR5WbYxUQogUnUDfM0S7QIFZMID+J73vdFARkFy+HElj4T+MWYhpXwlLp0EQ8Zoj8xUA0he4Vg==
dependencies:
bluebird "^3.5.0"
request-promise-core "1.1.2"
stealthy-require "^1.1.1"
tough-cookie "^2.3.3"
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
"request@>=2.76.0 <3.0.0", request@^2.83.0, request@^2.87.0, request@^2.88.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.88.0"
resolved "https://registry.yarnpkg.com/request/-/request-2.88.0.tgz#9c2fca4f7d35b592efe57c7f0a55e81052124fef"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-NAqBSrijGLZdM0WZNsInLJpkJokL72XYjUpnB0iwsRgxh7dB6COrHnTBNwN0E+lHDAJzu7kLAkDeY08z2/A0hg==
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
dependencies:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
aws-sign2 "~0.7.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
aws4 "^1.8.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
caseless "~0.12.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
combined-stream "~1.0.6"
extend "~3.0.2"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
forever-agent "~0.6.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
form-data "~2.3.2"
har-validator "~5.1.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
http-signature "~1.2.0"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
is-typedarray "~1.0.0"
isstream "~0.1.2"
json-stringify-safe "~5.0.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
mime-types "~2.1.19"
oauth-sign "~0.9.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
performance-now "^2.1.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
qs "~6.5.2"
safe-buffer "^5.1.2"
tough-cookie "~2.4.3"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
tunnel-agent "^0.6.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
uuid "^3.3.2"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
request@^2.88.2:
version "2.88.2"
resolved "https://registry.yarnpkg.com/request/-/request-2.88.2.tgz#d73c918731cb5a87da047e207234146f664d12b3"
integrity sha512-MsvtOrfG9ZcrOwAW+Qi+F6HbD0CWXEh9ou77uOb7FM2WPhwT7smM833PzanhJLsgXjN89Ir6V2PczXNnMpwKhw==
dependencies:
aws-sign2 "~0.7.0"
aws4 "^1.8.0"
caseless "~0.12.0"
combined-stream "~1.0.6"
extend "~3.0.2"
forever-agent "~0.6.1"
form-data "~2.3.2"
har-validator "~5.1.3"
http-signature "~1.2.0"
is-typedarray "~1.0.0"
isstream "~0.1.2"
json-stringify-safe "~5.0.1"
mime-types "~2.1.19"
oauth-sign "~0.9.0"
performance-now "^2.1.0"
qs "~6.5.2"
safe-buffer "^5.1.2"
tough-cookie "~2.5.0"
tunnel-agent "^0.6.0"
uuid "^3.3.2"
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
require-dir@^1.0.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/require-dir/-/require-dir-1.2.0.tgz#0d443b75e96012d3ca749cf19f529a789ae74817"
integrity sha512-LY85DTSu+heYgDqq/mK+7zFHWkttVNRXC9NKcKGyuGLdlsfbjEPrIEYdCVrx6hqnJb+xSu3Lzaoo8VnmOhhjNA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
require-directory@^2.1.1:
version "2.1.1"
resolved "https://registry.yarnpkg.com/require-directory/-/require-directory-2.1.1.tgz#8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"
integrity sha1-jGStX9MNqxyXbiNE/+f3kqam30I=
require-main-filename@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/require-main-filename/-/require-main-filename-2.0.0.tgz#d0b329ecc7cc0f61649f62215be69af54aa8989b"
integrity sha512-NKN5kMDylKuldxYLSUfrbo5Tuzh4hd+2E8NPPX02mZtn1VuREQToYe/ZdlJy+J3uCpfaiGF05e7B8W0iXbQHmg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
resolve-dir@^1.0.0, resolve-dir@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/resolve-dir/-/resolve-dir-1.0.1.tgz#79a40644c362be82f26effe739c9bb5382046f43"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-eaQGRMNivoLybv/nOcm7U4IEb0M=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
expand-tilde "^2.0.0"
global-modules "^1.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
resolve-from@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/resolve-from/-/resolve-from-3.0.0.tgz#b22c7af7d9d6881bc8b6e653335eebcb0a188748"
integrity sha1-six699nWiBvItuZTM17rywoYh0g=
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
resolve-from@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/resolve-from/-/resolve-from-4.0.0.tgz#4abcd852ad32dd7baabfe9b40e00a36db5f392e6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-pb/MYmXstAkysRFx8piNI1tGFNQIFA3vkE3Gq4EuA1dF6gHp/+vgZqsCGJapvy8N3Q+4o7FwvquPJcnZ7RYy4g==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
resolve-url@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/resolve-url/-/resolve-url-0.2.1.tgz#2c637fe77c893afd2a663fe21aa9080068e2052a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-LGN/53yJOv0qZj/iGqkIAGjiBSo=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Update dependency knex-migrator to v3.4.4
2020-04-14 18:21:50 +03:00
resolve@1.15.1:
version "1.15.1"
resolved "https://registry.yarnpkg.com/resolve/-/resolve-1.15.1.tgz#27bdcdeffeaf2d6244b95bb0f9f4b4653451f3e8"
integrity sha512-84oo6ZTtoTUpjgNEr5SJyzQhzL72gaRodsSfyxC/AXRvwu0Yse9H8eF9IpGo7b8YetZhlI6v7ZQ6bKBFV/6S7w==
dependencies:
path-parse "^1.0.6"
resolve@^1.1.6, resolve@^1.1.7, resolve@^1.10.0, resolve@^1.11.1:
Update dependency proxyquire to v2.1.1
2019-08-05 06:29:02 +03:00
version "1.12.0"
resolved "https://registry.yarnpkg.com/resolve/-/resolve-1.12.0.tgz#3fc644a35c84a48554609ff26ec52b66fa577df6"
integrity sha512-B/dOmuoAik5bKcD6s6nXDCjzUKnaDvdkRyAk6rsmsKLipWj4797iothd7jmmUhWTfinVMU+wc56rYKsit2Qy4w==
dependencies:
path-parse "^1.0.6"
Removed coverage tasks from Gruntfile refs #9441
2019-04-08 17:12:48 +03:00
resolve@~1.1.0:
version "1.1.7"
resolved "https://registry.yarnpkg.com/resolve/-/resolve-1.1.7.tgz#203114d82ad2c5ed9e8e0411b3932875e889e97b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IDEU2CrSxe2ejgQRs5ModeiJ6Xs=
Removed coverage tasks from Gruntfile refs #9441
2019-04-08 17:12:48 +03:00
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
responselike@^1.0.2:
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/responselike/-/responselike-1.0.2.tgz#918720ef3b631c5642be068f15ade5a46f4ba1e7"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
integrity sha1-kYcg7ztjHFZCvgaPFa3lpG9Loec=
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
lowercase-keys "^1.0.0"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
responselike@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/responselike/-/responselike-2.0.0.tgz#26391bcc3174f750f9a79eacc40a12a5c42d7723"
integrity sha512-xH48u3FTB9VsZw7R+vvgaKeLKzT6jOogbQhEe/jewwnZgzPcnyWui2Av6JpoYZF/91uueC+lqhWqeURw5/qhCw==
dependencies:
lowercase-keys "^2.0.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
restore-cursor@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/restore-cursor/-/restore-cursor-3.1.0.tgz#39f67c54b3a7a58cea5236d95cf0034239631f7e"
integrity sha512-l+sSefzHpj5qimhFSE5a8nufZYAM3sBSVMAPtYkmC+4EH2anSGaEMXSD0izRQbu9nfyQ9y5JrVmp7E8oZrUjvA==
dependencies:
onetime "^5.1.0"
signal-exit "^3.0.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
ret@~0.1.10:
version "0.1.15"
resolved "https://registry.yarnpkg.com/ret/-/ret-0.1.15.tgz#b8a4825d5bdb1fc3f6f53c2bc33f81388681c7bc"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-TTlYpa+OL+vMMNG24xSlQGEJ3B/RzEfUlLct7b5G/ytav+wPrplCpVMFuwzXbkecJrb6IYo1iFb0S9v37754mg==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
rewire@5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/rewire/-/rewire-5.0.0.tgz#c4e6558206863758f6234d8f11321793ada2dbff"
integrity sha512-1zfitNyp9RH5UDyGGLe9/1N0bMlPQ0WrX0Tmg11kMHBpqwPJI4gfPpP7YngFyLbFmhXh19SToAG0sKKEFcOIJA==
Bump rewire to version 3.0.2 no issue - nothing to adapt for the major jump
2017-11-28 21:22:29 +03:00
dependencies:
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
eslint "^6.8.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
rgb-regex@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/rgb-regex/-/rgb-regex-1.0.1.tgz#c0e0d6882df0e23be254a475e8edd41915feaeb1"
integrity sha1-wODWiC3w4jviVKR16O3UGRX+rrE=
rgba-regex@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/rgba-regex/-/rgba-regex-1.0.0.tgz#43374e2e2ca0968b0ef1523460b7d730ff22eeb3"
integrity sha1-QzdOLiyglosO8VI0YLfXMP8i7rM=
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
rimraf@2.6.3, rimraf@~2.6.2:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "2.6.3"
resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-2.6.3.tgz#b2d104fe0d8fb27cf9e0a1cda8262dd3833c6cab"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-mwqeW5XsA2qAejG46gYdENaxXjx9onRNCfn7L0duuP4hCuTIi/QO7PDK07KJfp1d+izWPrzEJDcSqBa0OZQriA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
glob "^7.1.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Reverted tmp to v0.0.33 no issue - Renovate automerged a bump for tmp, but this version has a bug and shouldn't have passed the automated tests - this commit reverts the package back to the working version
2020-02-03 18:20:33 +03:00
rimraf@^2.6.1, rimraf@^2.6.2:
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
version "2.7.1"
resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-2.7.1.tgz#35797f13a7fdadc566142c29d4f07ccad483e3ec"
integrity sha512-uWjbaKIK3T1OSVptzX7Nl6PvQ3qAGtKEtVRjRuazjfL3Bx5eI409VZSqgND+4UNnmzLVdPj9FqFJNPqBZFve4w==
dependencies:
glob "^7.1.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
rimraf@~2.4.0:
version "2.4.5"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-2.4.5.tgz#ee710ce5d93a8fdb856fb5ea8ff0e2d75934b2da"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-7nEM5dk6j9uFb7Xqj/Di11k0sto=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
glob "^6.0.1"
rss@1.2.2:
version "1.2.2"
resolved "https://registry.yarnpkg.com/rss/-/rss-1.2.2.tgz#50a1698876138133a74f9a05d2bdc8db8d27a921"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-UKFpiHYTgTOnT5oF0r3I240nqSE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
mime-types "2.1.13"
xml "1.0.1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
run-async@^2.2.0:
version "2.3.0"
resolved "https://registry.yarnpkg.com/run-async/-/run-async-2.3.0.tgz#0371ab4ae0bdd720d4166d7dfda64ff7a445a6c0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-A3GrSuC91yDUFm19/aZP96RFpsA=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
is-promise "^2.1.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
rxjs@^6.5.3:
version "6.5.4"
resolved "https://registry.yarnpkg.com/rxjs/-/rxjs-6.5.4.tgz#e0777fe0d184cec7872df147f303572d414e211c"
integrity sha512-naMQXcgEo3csAEGvw/NydRA0fuS2nDZJiw1YUWFKU7aPPAPGZEsD4Iimit96qwCieH6y614MCLYwdkrWx7z/7Q==
dependencies:
tslib "^1.9.0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
safe-buffer@5.1.2, safe-buffer@~5.1.0, safe-buffer@~5.1.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "5.1.2"
resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.1.2.tgz#991ec69d296e0313747d59bdfd2b745c35f8828d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==
Update dependency express-session to v1.17.0 (#11238)
2019-10-30 18:41:39 +03:00
safe-buffer@5.2.0, safe-buffer@>=5.1.0, safe-buffer@^5.0.1, safe-buffer@^5.1.1, safe-buffer@^5.1.2, safe-buffer@~5.2.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "5.2.0"
resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.2.0.tgz#b74daec49b1148f88c64b68d49b1e815c1f2f519"
integrity sha512-fZEwUGbVl7kouZs1jCdMLdt95hdIv0ZeHg6L7qPeciMZhZ+/gdesW4wgTARkrFWEpspjEATAzUGPG8N2jJiwbg==
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
safe-json-parse@~1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/safe-json-parse/-/safe-json-parse-1.0.1.tgz#3e76723e38dfdda13c9b1d29a1e07ffee4b30b57"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-PnZyPjjf3aE8mx0poeB//uSzC1c=
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
safe-json-stringify@~1:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/safe-json-stringify/-/safe-json-stringify-1.2.0.tgz#356e44bc98f1f93ce45df14bcd7c01cda86e0afd"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-gH8eh2nZudPQO6TytOvbxnuhYBOvDBBLW52tz5q6X58lJcd/tkmqFR+5Z9adS8aJtURSXWThWy/xJtJwixErvg==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
safe-regex@^1.1.0:
version "1.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/safe-regex/-/safe-regex-1.1.0.tgz#40a3669f3b077d1e943d44629e157dd48023bf2e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-QKNmnzsHfR6UPURinhV91IAjvy4=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
ret "~0.1.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
"safer-buffer@>= 2.1.2 < 3", safer-buffer@^2.0.2, safer-buffer@^2.1.0, safer-buffer@^2.1.2, safer-buffer@~2.1.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/safer-buffer/-/safer-buffer-2.1.2.tgz#44fa161b0187b9549dd84bb91802f9bd8385cd6a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Update dependency sanitize-html to v1.23.0
2020-04-09 20:22:33 +03:00
sanitize-html@1.23.0:
version "1.23.0"
resolved "https://registry.yarnpkg.com/sanitize-html/-/sanitize-html-1.23.0.tgz#e7a5ce7427cd2844dae5b9961cd372e349f91fb5"
integrity sha512-7MgUrbZpaig6zHwuHjpNqhkiuutFPWWoFY/RmdtEnvrFKMLafzSHfFyOozVpKWytkZIUhbYu3VQ/93OmYdo3ag==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
chalk "^2.4.1"
Update dependency sanitize-html to v1.22.0
2020-02-24 15:29:02 +03:00
htmlparser2 "^4.1.0"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
lodash.clonedeep "^4.5.0"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
lodash.escaperegexp "^4.1.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
lodash.isplainobject "^4.0.6"
lodash.isstring "^4.0.1"
Update dependency sanitize-html to v1.22.1
2020-03-16 09:15:10 +03:00
lodash.mergewith "^4.6.2"
Update dependency sanitize-html to v1.22.0
2020-02-24 15:29:02 +03:00
postcss "^7.0.27"
srcset "^2.0.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
xtend "^4.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
sax@0.4.2:
version "0.4.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/sax/-/sax-0.4.2.tgz#39f3b601733d6bec97105b242a2a40fd6978ac3c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-OfO2AXM9a+yXEFskKipA/Wl4rDw=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
sax@^1.2.4, sax@~1.2.4:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.2.4"
resolved "https://registry.yarnpkg.com/sax/-/sax-1.2.4.tgz#2816234e2378bddc4e5354fab5caa895df7100d9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-NqVDv9TpANUjFm0N8uM5GxL36UgKi9/atZw+x7YFnQ8ckwFGKrl4xX4yWtrey3UJm5nP1kUbnYgLopqWNSRhWw==
Update yarn.lock
2017-01-26 21:04:09 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
saxes@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/saxes/-/saxes-5.0.0.tgz#b7d30284d7583a5ca6ad0248b56d8889da53788b"
integrity sha512-LXTZygxhf8lfwKaTP/8N9CsVdjTlea3teze4lL6u37ivbgGbV0GGMuNtS/I9rnD/HC2/txUM7Df4S2LVl1qhiA==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
xmlchars "^2.2.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
secure-keys@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/secure-keys/-/secure-keys-1.0.0.tgz#f0c82d98a3b139a8776a8808050b824431087fca"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-8MgtmKOxOah3aogIBQuCRDEIf8o=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
"semver@2 || 3 || 4 || 5", semver@^5.3.0, semver@^5.4.1, semver@^5.5.0, semver@^5.6.0, semver@^5.7.0:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "5.7.1"
resolved "https://registry.yarnpkg.com/semver/-/semver-5.7.1.tgz#a954f931aeba508d307bbf069eff0c01c96116f7"
integrity sha512-sauaDf/PZdVgrLTNYHRtpXa1iRiKcaebiKQ1BJdpQlWH2lCvexQdX55snPFyK7QzpudqbCI0qXFfOasHdyNDGQ==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
Update dependency semver to v7.3.2
2020-04-14 20:47:18 +03:00
semver@7.3.2:
version "7.3.2"
resolved "https://registry.yarnpkg.com/semver/-/semver-7.3.2.tgz#604962b052b81ed0786aae84389ffba70ffd3938"
integrity sha512-OrOb32TeeambH6UrhtShmF7CRDqhL6/5XpPNp2DuRH6+9QLw/orhp72j87v8Qa1ScDkvrrBNpZcDejAirJmfXQ==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
Update dependency gscan to v3.4.0
2020-03-20 12:27:55 +03:00
semver@^6.1.2:
Updated semver dependency no issue - required code change for new API
2020-02-24 21:01:53 +03:00
version "6.3.0"
resolved "https://registry.yarnpkg.com/semver/-/semver-6.3.0.tgz#ee0a64c8af5e8ceea67687b133761e1becbd1d3d"
integrity sha512-b39TBaTSfV6yBrapU89p5fKekE2m/NwnDocOVruQFS1/veMgdzuPcnOM34M6CwxW8jH/lxEa5rBoDeUwu5HHTw==
Update dependency semver to v7.2.1
2020-04-07 09:25:16 +03:00
semver@^7.0.0, semver@^7.1.3:
version "7.1.3"
resolved "https://registry.yarnpkg.com/semver/-/semver-7.1.3.tgz#e4345ce73071c53f336445cfc19efb1c311df2a6"
integrity sha512-ekM0zfiA9SCBlsKa2X1hxyxiI4L3B6EbVJkkdgQXnSEEaHlGdvyodMruTiulSRWMMB4NeIuYNMC9rTKTz97GxA==
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
send@0.17.1:
version "0.17.1"
resolved "https://registry.yarnpkg.com/send/-/send-0.17.1.tgz#c1d8b059f7900f7466dd4938bdc44e11ddb376c8"
integrity sha512-BsVKsiGcQMFwT8UxypobUKyv7irCNRHk1T0G680vk88yf6LBByGcZJOTJCrTP2xVN6yI+XjPJcNuE3V4fT9sAg==
dependencies:
debug "2.6.9"
depd "~1.1.2"
destroy "~1.0.4"
encodeurl "~1.0.2"
escape-html "~1.0.3"
etag "~1.8.1"
fresh "0.5.2"
http-errors "~1.7.2"
mime "1.6.0"
ms "2.1.1"
on-finished "~2.3.0"
range-parser "~1.2.1"
statuses "~1.5.0"
serve-static@1.14.1:
version "1.14.1"
resolved "https://registry.yarnpkg.com/serve-static/-/serve-static-1.14.1.tgz#666e636dc4f010f7ef29970a88a674320898b2f9"
integrity sha512-JMrvUwE54emCYWlTI+hGrGv5I8dEwmco/00EvkzIIsR7MqrHonbD9pO2MOfFnpFntl7ecpZs+3mW+XbQZu9QCg==
dependencies:
encodeurl "~1.0.2"
escape-html "~1.0.3"
parseurl "~1.3.3"
send "0.17.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
set-blocking@^2.0.0, set-blocking@~2.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.0.0"
resolved "https://registry.yarnpkg.com/set-blocking/-/set-blocking-2.0.0.tgz#045f9782d011ae9a6803ddd382b24392b3d890f7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-BF+XgtARrppoA93TgrJDkrPYkPc=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
set-value@^2.0.0, set-value@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/set-value/-/set-value-2.0.1.tgz#a18d40530e6f07de4228c7defe4227af8cad005b"
integrity sha512-JxHc1weCN68wRY0fhCoXpyK55m/XPHafOmK4UWD7m2CI14GMcFypt4w/0+NV5f/ZMby2F6S2wwA7fgynh9gWSw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
extend-shallow "^2.0.1"
is-extendable "^0.1.1"
is-plain-object "^2.0.3"
split-string "^3.0.1"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
setprototypeof@1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/setprototypeof/-/setprototypeof-1.1.1.tgz#7e95acb24aa92f5885e0abef5ba131330d4ae683"
integrity sha512-JvdAWfbXeIGaZ9cILp38HntZSFSo3mWg6xGcJJsd+d4aRMOqauag1C63dJfDw7OaMYwEbHMOxEZ1lqVRYP2OAw==
Replaced image manipulation w/ @tryghost/image-transform (#11687) - moved image.manipulation lib to a new package called @tryghost/image-transform - new package has an updated API signature, so the method calls have changed but the underlying code is identical - removed the optional sharp dependency from Ghost, as this is now optionally required by the image-transform module
2020-03-25 20:33:03 +03:00
sharp@^0.25.2:
Update dependency sharp to v0.25.2
2020-03-21 00:10:43 +03:00
version "0.25.2"
resolved "https://registry.yarnpkg.com/sharp/-/sharp-0.25.2.tgz#f9003d73be50e9265e98f79f04fe53d8c66a3967"
integrity sha512-l1GN0kFNtJr3U9i9pt7a+vo2Ij0xv4tTKDIPx8W6G9WELhPwrMyZZJKAAQNBSI785XB4uZfS5Wpz8C9jWV4AFQ==
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
dependencies:
Update dependency sharp to v0.23.0 (#10984)
2019-08-06 11:14:50 +03:00
color "^3.1.2"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
detect-libc "^1.0.3"
Update dependency sharp to v0.25.1
2020-03-09 03:23:09 +03:00
node-addon-api "^2.0.0"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
npmlog "^4.1.2"
Update dependency sharp to v0.23.3
2019-11-18 07:24:40 +03:00
prebuild-install "^5.3.3"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
semver "^7.1.3"
Update dependency sharp to v0.23.1
2019-09-30 03:35:55 +03:00
simple-get "^3.1.0"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
tar "^6.0.1"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
tunnel-agent "^0.6.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
shebang-command@^1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/shebang-command/-/shebang-command-1.2.0.tgz#44aac65b695b03398968c39f363fee5deafdf1ea"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-RKrGW2lbAzmJaMOfNj/uXer98eo=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
shebang-regex "^1.0.0"
shebang-regex@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/shebang-regex/-/shebang-regex-1.0.0.tgz#da42f49740c0b42db2ca9728571cb190c98efea3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-2kL0l0DAtC2yypcoVxyxkMmO/qM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 21:41:16 +03:00
should-equal@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/should-equal/-/should-equal-2.0.0.tgz#6072cf83047360867e68e98b09d71143d04ee0c3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-ZP36TMrK9euEuWQYBig9W55WPC7uo37qzAEmbjHz4gfyuXrEUgF8cUvQVO+w+d3OMfPvSRQJ22lSm8MQJ43LTA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 21:41:16 +03:00
should-type "^1.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 21:41:16 +03:00
should-format@^3.0.3:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "3.0.3"
resolved "https://registry.yarnpkg.com/should-format/-/should-format-3.0.3.tgz#9bfc8f74fa39205c53d38c34d717303e277124f1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-m/yPdPo5IFxT04w01xcwPidxJPE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
should-type "^1.3.0"
should-type-adaptors "^1.0.1"
should-type-adaptors@^1.0.1:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/should-type-adaptors/-/should-type-adaptors-1.1.0.tgz#401e7f33b5533033944d5cd8bf2b65027792e27a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-JA4hdoLnN+kebEp2Vs8eBe9g7uy0zbRo+RMcU0EsNy+R+k049Ki+N5tT5Jagst2g7EAja+euFuoXFCa8vIklfA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
should-type "^1.3.0"
should-util "^1.0.0"
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 21:41:16 +03:00
should-type@^1.3.0, should-type@^1.4.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.4.0"
resolved "https://registry.yarnpkg.com/should-type/-/should-type-1.4.0.tgz#0756d8ce846dfd09843a6947719dfa0d4cff5cf3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-B1bYzoRt/QmEOmlHcZ36DUz/XPM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
should-util@^1.0.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/should-util/-/should-util-1.0.1.tgz#fb0d71338f532a3a149213639e2d32cbea8bcb28"
integrity sha512-oXF8tfxx5cDk8r2kYqlkUJzZpDBqVY/II2WhvU0n9Y3XYvAYRmeaf1PvvIvTgPnv4KJ+ES5M0PyDq5Jp+Ygy2g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🐛 Fixed eslint installation error when using node version < 8.10 and < 6.14 closes #10420 - bumped brute-knex > error eslint@5.12.1: The engine “node” is incompatible with this module. Expected version “^6.14.0 || ^8.10.0 || >=9.10.0”. Got “8.9.1”
2019-01-27 20:29:40 +03:00
should@13.2.3:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "13.2.3"
resolved "https://registry.yarnpkg.com/should/-/should-13.2.3.tgz#96d8e5acf3e97b49d89b51feaa5ae8d07ef58f10"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-ggLesLtu2xp+ZxI+ysJTmNjh2U0TsC+rQ/pfED9bUZZ4DKefP27D+7YJVVTvKsmjLpIi9jAa7itwDGkDDmt1GQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 21:41:16 +03:00
should-equal "^2.0.0"
should-format "^3.0.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
should-type "^1.4.0"
should-type-adaptors "^1.0.1"
should-util "^1.0.0"
Respected peer dependency for bookshelf no issue - need to use knex 0.14.x for now - Bookshelf already bumped the peer dependency in master, but was not released yet
2019-01-22 10:58:28 +03:00
sigmund@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/sigmund/-/sigmund-1.0.1.tgz#3ff21f198cad2175f9f3b781853fd94d0d19b590"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-P/IfGYytIXX587eBhT/ZTQ0ZtZA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
signal-exit@^3.0.0, signal-exit@^3.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/signal-exit/-/signal-exit-3.0.2.tgz#b5fdc08f1287ea1178628e415e25132b73646c6d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-tf3AjxKH6hF4Yo5BXiUTK3NkbG0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
simple-concat@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/simple-concat/-/simple-concat-1.0.0.tgz#7344cbb8b6e26fb27d66b2fc86f9f6d5997521c6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-c0TLuLbib7J9ZrL8hvn21Zl1IcY=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Switched to extracted `@tryghost/mobiledoc-dom-renderer` package no issue - moved `mobiledoc.renderers.mobiledocHtmlRenderer` to `mobiledoc.mobiledocHtmlRenderer` so that it's easier for the getter to access the parent objects getters - removed all tests and dependencies that now live in @tryghost/mobiledoc-dom-renderer - kept the `mobiledocHtmlRenderer` test because that's testing that we've correctly wired up our cards and atoms and the output is what we expect
2020-04-08 20:21:15 +03:00
simple-dom@^1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/simple-dom/-/simple-dom-1.4.0.tgz#78ad1f41b8b70d16f82b7e0d458441c9262565b7"
integrity sha512-TnBPkmOyjdaOqyBMb4ick+n8c0Xv9Iwg1PykFV7hz9Se3UCiacTbRb+25cPmvozFNJLBUNvUzX/KsPfXF14ivA==
dependencies:
"@simple-dom/document" "^1.4.0"
"@simple-dom/interface" "^1.4.0"
"@simple-dom/parser" "^1.4.0"
"@simple-dom/serializer" "^1.4.0"
"@simple-dom/void-map" "^1.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
simple-get@^3.0.3, simple-get@^3.1.0:
Update dependency sharp to v0.23.1
2019-09-30 03:35:55 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/simple-get/-/simple-get-3.1.0.tgz#b45be062435e50d159540b576202ceec40b9c6b3"
integrity sha512-bCR6cP+aTdScaQCnQKbPKtJOKDp/hj9EDLJo3Nw4y1QksqaovlW/bnptB6/c1e+qmNIDHRK+oXFDdEqBT8WzUA==
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
dependencies:
Update dependency sharp to v0.23.1
2019-09-30 03:35:55 +03:00
decompress-response "^4.2.0"
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
once "^1.3.1"
simple-concat "^1.0.0"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
simple-swizzle@^0.2.2:
version "0.2.2"
resolved "https://registry.yarnpkg.com/simple-swizzle/-/simple-swizzle-0.2.2.tgz#a4da6b635ffcccca33f70d17cb92592de95e557a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-pNprY1/8zMoz9w0Xy5JZLeleVXo=
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
dependencies:
is-arrayish "^0.3.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
"simplesmtp@~0.2 || ~0.3.30", simplesmtp@~0.3.30:
version "0.3.35"
resolved "https://registry.yarnpkg.com/simplesmtp/-/simplesmtp-0.3.35.tgz#017b1eb8b26317ac36d2a2a8a932631880736a03"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-AXseuLJjF6w20qKoqTJjGIBzagM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
rai "~0.1.11"
xoauth2 "~0.1.8"
Update dependency sinon to v9.0.2
2020-04-08 14:48:38 +03:00
sinon@9.0.2:
version "9.0.2"
resolved "https://registry.yarnpkg.com/sinon/-/sinon-9.0.2.tgz#b9017e24633f4b1c98dfb6e784a5f0509f5fd85d"
integrity sha512-0uF8Q/QHkizNUmbK3LRFqx5cpTttEVXudywY9Uwzy8bTfZUhljZ7ARzSxnRHWYWtVTeh4Cw+tTb3iU21FQVO9A==
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
dependencies:
Update dependency sinon to v9.0.2
2020-04-08 14:48:38 +03:00
"@sinonjs/commons" "^1.7.2"
"@sinonjs/fake-timers" "^6.0.1"
Update Test & linting packages
2020-03-21 02:17:28 +03:00
"@sinonjs/formatio" "^5.0.1"
"@sinonjs/samsam" "^5.0.3"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
diff "^4.0.2"
nise "^4.0.1"
supports-color "^7.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
slice-ansi@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/slice-ansi/-/slice-ansi-2.1.0.tgz#cacd7693461a637a5788d92a7dd4fba068e81636"
integrity sha512-Qu+VC3EwYLldKa1fCxuuvULvSJOKEgk9pi8dZeCVK7TqBfUNTH4sFkk4joj8afVSfAYgJoSOetjx9QWOJ5mYoQ==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
ansi-styles "^3.2.0"
astral-regex "^1.0.0"
is-fullwidth-code-point "^2.0.0"
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
slick@^1.12.2:
version "1.12.2"
resolved "https://registry.yarnpkg.com/slick/-/slick-1.12.2.tgz#bd048ddb74de7d1ca6915faa4a57570b3550c2d7"
integrity sha1-vQSN23TefRymkV+qSldXCzVQwtc=
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
smart-buffer@^4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/smart-buffer/-/smart-buffer-4.1.0.tgz#91605c25d91652f4661ea69ccf45f1b331ca21ba"
integrity sha512-iVICrxOzCynf/SNaBQCw34eM9jROU/s5rzIhpOvzhzuYHfJR/DhZfDkXiZSgKXfgv26HT3Yni3AV/DGw0cGnnw==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
smartquotes@~2.3.1:
version "2.3.1"
resolved "https://registry.yarnpkg.com/smartquotes/-/smartquotes-2.3.1.tgz#01ebb595d6c7a9e24d90e8cb95c17d0e1af49407"
integrity sha1-Aeu1ldbHqeJNkOjLlcF9Dhr0lAc=
Update dependency eslint-plugin-ghost to v1.0.1
2020-03-25 21:31:55 +03:00
snake-case@^3.0.3:
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
version "3.0.3"
resolved "https://registry.yarnpkg.com/snake-case/-/snake-case-3.0.3.tgz#c598b822ab443fcbb145ae8a82c5e43526d5bbee"
integrity sha512-WM1sIXEO+rsAHBKjGf/6R1HBBcgbncKS08d2Aqec/mrDSpU80SiOU41hO7ny6DToHSyrlwTYzQBIK1FPSx4Y3Q==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
dependencies:
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
dot-case "^3.0.3"
tslib "^1.10.0"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
snapdragon-node@^2.0.1:
version "2.1.1"
resolved "https://registry.yarnpkg.com/snapdragon-node/-/snapdragon-node-2.1.1.tgz#6c175f86ff14bdb0724563e8f3c1b021a286853b"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-O27l4xaMYt/RSQ5TR3vpWCAB5Kb/czIcqUFOM/C4fYcLnbZUc1PkjTAMjof2pBWaSTwOUd6qUHcFGVGj7aIwnw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
define-property "^1.0.0"
isobject "^3.0.0"
snapdragon-util "^3.0.1"
snapdragon-util@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/snapdragon-util/-/snapdragon-util-3.0.1.tgz#f956479486f2acd79700693f6f7b805e45ab56e2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-mbKkMdQKsjX4BAL4bRYTj21edOf8cN7XHdYUJEe+Zn99hVEYcMvKPct1IqNe7+AZPirn8BCDOQBHQZknqmKlZQ==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
kind-of "^3.2.0"
snapdragon@^0.8.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "0.8.2"
resolved "https://registry.yarnpkg.com/snapdragon/-/snapdragon-0.8.2.tgz#64922e7c565b0e14204ba1aa7d6964278d25182d"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-FtyOnWN/wCHTVXOMwvSv26d+ko5vWlIDD6zoUJ7LW8vh+ZBC8QdljveRP+crNrtBwioEUWy/4dMtbBjA4ioNlg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
base "^0.11.1"
debug "^2.2.0"
define-property "^0.2.5"
extend-shallow "^2.0.1"
map-cache "^0.2.2"
source-map "^0.5.6"
source-map-resolve "^0.5.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
use "^3.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
socks-proxy-agent@^4.0.1:
version "4.0.2"
resolved "https://registry.yarnpkg.com/socks-proxy-agent/-/socks-proxy-agent-4.0.2.tgz#3c8991f3145b2799e70e11bd5fbc8b1963116386"
integrity sha512-NT6syHhI9LmuEMSK6Kd2V7gNv5KFZoLE7V5udWmn0de+3Mkj3UMA/AJPLyeNUVmElCurSHtUdM3ETpR3z770Wg==
dependencies:
agent-base "~4.2.1"
socks "~2.3.2"
socks@~2.3.2:
version "2.3.3"
resolved "https://registry.yarnpkg.com/socks/-/socks-2.3.3.tgz#01129f0a5d534d2b897712ed8aceab7ee65d78e3"
integrity sha512-o5t52PCNtVdiOvzMry7wU4aOqYWL0PeCXRWBEiJow4/i/wr+wpsJQ9awEu1EonLIqsfGd5qSgDdxEOvCdmBEpA==
dependencies:
ip "1.1.5"
smart-buffer "^4.1.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
source-map-resolve@^0.5.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "0.5.2"
resolved "https://registry.yarnpkg.com/source-map-resolve/-/source-map-resolve-0.5.2.tgz#72e2cc34095543e43b2c62b2c4c10d4a9054f259"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-MjqsvNwyz1s0k81Goz/9vRBe9SZdB09Bdw+/zYyO+3CuPk6fouTaxscHkgtE8jKvf01kVfl8riHzERQ/kefaSA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
atob "^2.1.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
decode-uri-component "^0.2.0"
resolve-url "^0.2.1"
source-map-url "^0.4.0"
urix "^0.1.0"
source-map-url@^0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/source-map-url/-/source-map-url-0.4.0.tgz#3e935d7ddd73631b97659956d55128e87b5084a3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-PpNdfd1zYxuXZZlW1VEo6HtQhKM=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
source-map@^0.5.6:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "0.5.7"
resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.5.7.tgz#8a039d2d1021d22d1ea14c80d8ea468ba2ef3fcc"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-igOdLRAh0i0eoUyA2OpGi6LvP8w=
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
source-map@^0.6.1, source-map@~0.6.1:
version "0.6.1"
resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.6.1.tgz#74722af32e9614e9c287a8d0bbde48b5e2f1a263"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
spdx-correct@^3.0.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/spdx-correct/-/spdx-correct-3.1.0.tgz#fb83e504445268f154b074e218c87c003cd31df4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-lr2EZCctC2BNR7j7WzJ2FpDznxky1sjfxvvYEyzxNyb6lZXHODmEoJeFu4JupYlkfha1KZpJyoqiJ7pgA1qq8Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
spdx-expression-parse "^3.0.0"
spdx-license-ids "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
spdx-exceptions@^2.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.2.0"
resolved "https://registry.yarnpkg.com/spdx-exceptions/-/spdx-exceptions-2.2.0.tgz#2ea450aee74f2a89bfb94519c07fcd6f41322977"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-2XQACfElKi9SlVb1CYadKDXvoajPgBVPn/gOQLrTvHdElaVhr7ZEbqJaRnJLVNeaI4cMEAgVCeBMKF6MWRDCRA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
spdx-expression-parse@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/spdx-expression-parse/-/spdx-expression-parse-3.0.0.tgz#99e119b7a5da00e05491c9fa338b7904823b41d0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Yg6D3XpRD4kkOmTpdgbUiEJFKghJH03fiC1OPll5h/0sO6neh2jqRDVHOQ4o/LMea0tgCkbMgea5ip/e+MkWyg==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
spdx-exceptions "^2.1.0"
spdx-license-ids "^3.0.0"
spdx-license-ids@^3.0.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "3.0.5"
resolved "https://registry.yarnpkg.com/spdx-license-ids/-/spdx-license-ids-3.0.5.tgz#3694b5804567a458d3c8045842a6358632f62654"
integrity sha512-J+FWzZoynJEXGphVIS+XEh3kFSjZX/1i9gFBaWQcB+/tmpe2qUsSBABpcxqxnAxFdiUFEgAX1bjYGQvIZmoz9Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
split-string@^3.0.1, split-string@^3.0.2:
version "3.1.0"
resolved "https://registry.yarnpkg.com/split-string/-/split-string-3.1.0.tgz#7cb09dda3a86585705c64b39a6466038682e8fe2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-NzNVhJDYpwceVVii8/Hu6DKfD2G+NrQHlS/V/qgv763EYudVwEcMQNxd2lh+0VrUByXN/oJkl5grOhYWvQUYiw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
extend-shallow "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
split2@^2.1.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "2.2.0"
resolved "https://registry.yarnpkg.com/split2/-/split2-2.2.0.tgz#186b2575bcf83e85b7d18465756238ee4ee42493"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-RAb22TG39LhI31MbreBgIuKiIKhVsawfTgEGqKHTK87aG+ul/PB8Sqoi3I7kVdRWiCfrKxK3uo4/YUkpNvhPbw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
through2 "^2.0.2"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
sprintf-js@^1.0.3:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/sprintf-js/-/sprintf-js-1.1.2.tgz#da1765262bf8c0f571749f2ad6c26300207ae673"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-VE0SOVEHCk7Qc8ulkWw3ntAzXuqf7S2lvwQaDLRnUeIEaKNQJzV6BwmLKhOqT61aGhfUMrXeaBk+oDGCzvhcug==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
sprintf-js@~1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.3"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/sprintf-js/-/sprintf-js-1.0.3.tgz#04e6926f662895354f3dd015203633b857297e2c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-BOaSb2YolTVPPdAVIDYzuFcpfiw=
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 19:43:08 +03:00
Update dependency sqlite3 to v4.1.1
2019-12-16 13:15:17 +03:00
sqlite3@4.1.1:
version "4.1.1"
resolved "https://registry.yarnpkg.com/sqlite3/-/sqlite3-4.1.1.tgz#539a42e476640796578e22d589b3283c28055242"
integrity sha512-CvT5XY+MWnn0HkbwVKJAyWEMfzpAPwnTiB3TobA5Mri44SrTovmmh499NPQP+gatkeOipqPlBLel7rn4E/PCQg==
dependencies:
nan "^2.12.1"
node-pre-gyp "^0.11.0"
request "^2.87.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
sqlstring@2.3.1:
version "2.3.1"
resolved "https://registry.yarnpkg.com/sqlstring/-/sqlstring-2.3.1.tgz#475393ff9e91479aea62dcaf0ca3d14983a7fb40"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-R1OT/56RR5rqYtyvDKPRSYOn+0A=
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
Update dependency sanitize-html to v1.22.0
2020-02-24 15:29:02 +03:00
srcset@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/srcset/-/srcset-2.0.1.tgz#8f842d357487eb797f413d9c309de7a5149df5ac"
integrity sha512-00kZI87TdRKwt+P8jj8UZxbfp7mK2ufxcIMWvhAOZNJTRROimpHeruWrGvCZneiuVDLqdyHefVp748ECTnyUBQ==
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
sshpk@^1.7.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.16.1"
resolved "https://registry.yarnpkg.com/sshpk/-/sshpk-1.16.1.tgz#fb661c0bef29b39db40769ee39fa70093d6f6877"
integrity sha512-HXXqVUq7+pcKeLqqZj6mHFUMvXtOJt1uoUx09pFW6011inTMxqI8BA8PM95myrIyyKwdnzjdFjLiE6KBPVtJIg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
asn1 "~0.2.3"
assert-plus "^1.0.0"
bcrypt-pbkdf "^1.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dashdash "^1.12.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ecc-jsbn "~0.1.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
getpass "^0.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
jsbn "~0.1.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
safer-buffer "^2.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
tweetnacl "~0.14.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
stable@^0.1.8:
version "0.1.8"
resolved "https://registry.yarnpkg.com/stable/-/stable-0.1.8.tgz#836eb3c8382fe2936feaf544631017ce7d47a3cf"
integrity sha512-ji9qxRnOVfcuLDySj9qzhGSEFVobyt1kIOSkj1qZzYLzq7Tos/oUUWvotUPQLlrsidqsK6tBH89Bc9kL5zHA6w==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
state-toggle@^1.0.0:
version "1.0.2"
resolved "https://registry.yarnpkg.com/state-toggle/-/state-toggle-1.0.2.tgz#75e93a61944116b4959d665c8db2d243631d6ddc"
integrity sha512-8LpelPGR0qQM4PnfLiplOQNJcIN1/r2Gy0xKB2zKnIW2YzPMt2sR4I/+gtPjhN7Svh9kw+zqEg2SFwpBO9iNiw==
Update dependency jsonpath to v1.0.2
2019-07-02 13:28:29 +03:00
static-eval@2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/static-eval/-/static-eval-2.0.2.tgz#2d1759306b1befa688938454c546b7871f806a42"
integrity sha512-N/D219Hcr2bPjLxPiV+TQE++Tsmrady7TqAJugLy7Xk1EumfDWS/f5dtBbkRCGE7wKKXuYockQoj8Rm2/pVKyg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump jsonpath to version 1.0.0 no issue - major bump - we only use jsonpath inside the `get` helper - the functionality still works as expected - includes security fix, see https://github.com/dchester/jsonpath/commit/98464aa5fea65bad09564a5632bad72e31736244
2017-10-31 14:21:48 +03:00
escodegen "^1.8.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
static-extend@^0.1.1:
version "0.1.2"
resolved "https://registry.yarnpkg.com/static-extend/-/static-extend-0.1.2.tgz#60809c39cbff55337226fd5e0b520f341f1fb5c6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-YICcOcv/VTNyJv1eC1IPNB8ftcY=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
define-property "^0.2.5"
object-copy "^0.1.0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
"statuses@>= 1.2.1 < 2", "statuses@>= 1.5.0 < 2", statuses@~1.5.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "1.5.0"
resolved "https://registry.yarnpkg.com/statuses/-/statuses-1.5.0.tgz#161c7dac177659fd9811f43771fa99381478628c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Fhx9rBd2Wf2YEfQ3cfqZOBR4Yow=
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
stealthy-require@^1.1.1:
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/stealthy-require/-/stealthy-require-1.1.1.tgz#35b09875b4ff49f26a777e509b3090a3226bf24b"
integrity sha1-NbCYdbT/SfJqd35QmzCQoyJr8ks=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
stream-buffers@^2.1.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/stream-buffers/-/stream-buffers-2.2.0.tgz#91d5f5130d1cef96dcfa7f726945188741d09ee4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-kdX1Ew0c75bc+n9yaUUYh0HQnuQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
stream-parser@~0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/stream-parser/-/stream-parser-0.3.1.tgz#1618548694420021a1182ff0af1911c129761773"
integrity sha1-FhhUhpRCACGhGC/wrxkRwSl2F3M=
dependencies:
debug "2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
streamsearch@0.1.2:
version "0.1.2"
resolved "https://registry.yarnpkg.com/streamsearch/-/streamsearch-0.1.2.tgz#808b9d0e56fc273d809ba57338e929919a1a9f1a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-gIudDlb8Jz2Am6VzOOkpkZoanxo=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
string-template@~0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/string-template/-/string-template-0.2.1.tgz#42932e598a352d01fc22ec3367d9d84eec6c9add"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-QpMuWYo1LQH8IuwzZ9nYTuxsmt0=
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
string-width@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/string-width/-/string-width-1.0.2.tgz#118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-EYvfW4zcUaKn5w0hHgfisLmxB9M=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
code-point-at "^1.0.0"
is-fullwidth-code-point "^1.0.0"
strip-ansi "^3.0.0"
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
"string-width@^1.0.2 || 2":
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/string-width/-/string-width-2.1.1.tgz#ab93f27a8dc13d28cac815c462143a6d9012ae9e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-nOqH59deCq9SRHlxq1Aw85Jnt4w6KvLKqWVik6oA9ZklXLNIOlqg4F2yrT1MVaTjAqvVwdfeZ7w7aCvJD7ugkw==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
is-fullwidth-code-point "^2.0.0"
strip-ansi "^4.0.0"
Update dependency mocha to v6 (#11171)
2019-09-30 11:31:11 +03:00
string-width@^3.0.0, string-width@^3.1.0:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/string-width/-/string-width-3.1.0.tgz#22767be21b62af1081574306f69ac51b62203961"
integrity sha512-vafcv6KjVZKSgz06oM/H6GDBrAtz8vdhQakGjFIvNrHA6y3HCF1CInLy+QLq8dTJPQ1b+KDUqDFctkdRW44e1w==
dependencies:
emoji-regex "^7.0.1"
is-fullwidth-code-point "^2.0.0"
strip-ansi "^5.1.0"
Update dependency express-hbs to v2.3.3
2020-04-06 18:42:24 +03:00
string-width@^4.1.0:
Update Test & linting packages
2020-02-03 16:44:38 +03:00
version "4.2.0"
resolved "https://registry.yarnpkg.com/string-width/-/string-width-4.2.0.tgz#952182c46cc7b2c313d1596e623992bd163b72b5"
integrity sha512-zUz5JD+tgqtuDjMhwIg5uFVV3dtqZ9yQJlZVfq4I01/K5Paj5UHj7VyrQOJvzawSVlKpObApbfD0Ed6yJc+1eg==
dependencies:
emoji-regex "^8.0.0"
is-fullwidth-code-point "^3.0.0"
strip-ansi "^6.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
string.prototype.trimend@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/string.prototype.trimend/-/string.prototype.trimend-1.0.0.tgz#ee497fd29768646d84be2c9b819e292439614373"
integrity sha512-EEJnGqa/xNfIg05SxiPSqRS7S9qwDhYts1TSLR1BQfYUfPe1stofgGKvwERK9+9yf+PpfBMlpBaCHucXGPQfUA==
dependencies:
define-properties "^1.1.3"
es-abstract "^1.17.5"
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
string.prototype.trimleft@^2.1.0:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "2.1.0"
resolved "https://registry.yarnpkg.com/string.prototype.trimleft/-/string.prototype.trimleft-2.1.0.tgz#6cc47f0d7eb8d62b0f3701611715a3954591d634"
integrity sha512-FJ6b7EgdKxxbDxc79cOlok6Afd++TTs5szo+zJTUyow3ycrRfJVE2pq3vcN53XexvKZu/DJMDfeI/qMiZTrjTw==
Update Test & linting packages
2019-08-16 22:07:23 +03:00
dependencies:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
define-properties "^1.1.3"
function-bind "^1.1.1"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
string.prototype.trimleft@^2.1.1:
version "2.1.2"
resolved "https://registry.yarnpkg.com/string.prototype.trimleft/-/string.prototype.trimleft-2.1.2.tgz#4408aa2e5d6ddd0c9a80739b087fbc067c03b3cc"
integrity sha512-gCA0tza1JBvqr3bfAIFJGqfdRTyPae82+KTnm3coDXkZN9wnuW3HjGgN386D7hfv5CHQYCI022/rJPVlqXyHSw==
dependencies:
define-properties "^1.1.3"
es-abstract "^1.17.5"
string.prototype.trimstart "^1.0.0"
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
string.prototype.trimright@^2.1.0:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "2.1.0"
resolved "https://registry.yarnpkg.com/string.prototype.trimright/-/string.prototype.trimright-2.1.0.tgz#669d164be9df9b6f7559fa8e89945b168a5a6c58"
integrity sha512-fXZTSV55dNBwv16uw+hh5jkghxSnc5oHq+5K/gXgizHwAvMetdAJlHqqoFC1FSDVPYWLkAKl2cxpUT41sV7nSg==
dependencies:
define-properties "^1.1.3"
function-bind "^1.1.1"
Update Test & linting packages
2019-08-16 22:07:23 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
string.prototype.trimright@^2.1.1:
version "2.1.2"
resolved "https://registry.yarnpkg.com/string.prototype.trimright/-/string.prototype.trimright-2.1.2.tgz#c76f1cef30f21bbad8afeb8db1511496cfb0f2a3"
integrity sha512-ZNRQ7sY3KroTaYjRS6EbNiiHrOkjihL9aQE/8gfQ4DtAC/aEBRHFJa44OmoWxGGqXuJlfKkZW4WcXErGr+9ZFg==
dependencies:
define-properties "^1.1.3"
es-abstract "^1.17.5"
string.prototype.trimend "^1.0.0"
string.prototype.trimstart@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/string.prototype.trimstart/-/string.prototype.trimstart-1.0.0.tgz#afe596a7ce9de905496919406c9734845f01a2f2"
integrity sha512-iCP8g01NFYiiBOnwG1Xc3WZLyoo+RuBymwIlWncShXDDJYWN6DbnM3odslBJdgCdRlq94B5s63NWAZlcn2CS4w==
dependencies:
define-properties "^1.1.3"
es-abstract "^1.17.5"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
string_decoder@0.10, string_decoder@~0.10.x:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.10.31"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-0.10.31.tgz#62e203bc41766c6c28c9fc84301dab1c5310fa94"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-YuIDvEF2bGwoyfyEMB2rHFMQ+pQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
string_decoder@^1.1.1:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-1.3.0.tgz#42f114594a46cf1a8e30b0a84f56c78c3edac21e"
integrity sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
dependencies:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
safe-buffer "~5.2.0"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
string_decoder@~1.1.1:
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
version "1.1.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-1.1.1.tgz#9cf1611ba62685d7030ae9e4ba34149c3af03fc8"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
dependencies:
safe-buffer "~5.1.0"
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
stringify-entities@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/stringify-entities/-/stringify-entities-2.0.0.tgz#fa7ca6614b355fb6c28448140a20c4ede7462827"
integrity sha512-fqqhZzXyAM6pGD9lky/GOPq6V4X0SeTAFBl0iXb/BzOegl40gpf/bV3QQP7zULNYvjr6+Dx8SCaDULjVoOru0A==
dependencies:
character-entities-html4 "^1.0.0"
character-entities-legacy "^1.0.0"
is-alphanumerical "^1.0.0"
is-decimal "^1.0.2"
is-hexadecimal "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
strip-ansi@^3.0.0, strip-ansi@^3.0.1:
version "3.0.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-3.0.1.tgz#6a385fb8853d952d5ff05d0e8aaf94278dc63dcf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-ajhfuIU9lS1f8F0Oiq+UJ43GPc8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
ansi-regex "^2.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
strip-ansi@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-4.0.0.tgz#a8479022eb1ac368a871389b635262c505ee368f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-qEeQIusaw2iocTibY1JixQXuNo8=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
ansi-regex "^3.0.0"
Update Test & linting packages
2019-08-16 22:07:23 +03:00
strip-ansi@^5.0.0, strip-ansi@^5.1.0, strip-ansi@^5.2.0:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
version "5.2.0"
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-5.2.0.tgz#8c9a536feb6afc962bdfa5b104a5091c1ad9c0ae"
integrity sha512-DuRs1gKbBqsMKIZlrffwlug8MHkcnpjs5VPmL1PAh+mA30U0DTotfDZ0d2UUsXpPmPmMMJ6W773MaA3J+lbiWA==
dependencies:
ansi-regex "^4.1.0"
Update Test & linting packages
2020-02-03 16:44:38 +03:00
strip-ansi@^6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-6.0.0.tgz#0b1571dd7669ccd4f3e06e14ef1eed26225ae532"
integrity sha512-AuvKTrTfQNYNIctbR1K/YGTR1756GycPsg7b9bdV9Duqur4gv6aKqHXah67Z8ImS7WEz5QVcOtlfW2rZEugt6w==
dependencies:
ansi-regex "^5.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
strip-bom@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/strip-bom/-/strip-bom-2.0.0.tgz#6219a85616520491f35788bdbf1447a99c7e6b0e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-YhmoVhZSBJHzV4i9vxRHqZx+aw4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
is-utf8 "^0.2.0"
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
strip-eof@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/strip-eof/-/strip-eof-1.0.0.tgz#bb43ff5598a6eb05d89b59fcd129c983313606bf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-u0P/VZim6wXYm1n80SnJgzE2Br8=
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
strip-indent@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/strip-indent/-/strip-indent-1.0.1.tgz#0c7962a6adefa7bbd4ac366460a638552ae1a0a2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-DHlipq3vp7vUrDZkYKY4VSrhoKI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
get-stdin "^4.0.1"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
strip-json-comments@2.0.1, strip-json-comments@~2.0.1:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "2.0.1"
resolved "https://registry.yarnpkg.com/strip-json-comments/-/strip-json-comments-2.0.1.tgz#3c531942e908c2697c0ec344858c286c7ca0a60a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-PFMZQukIwml8DsNEhYwobHygpgo=
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
Update Test & linting packages
2019-08-16 22:07:23 +03:00
strip-json-comments@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/strip-json-comments/-/strip-json-comments-3.0.1.tgz#85713975a91fb87bf1b305cca77395e40d2a64a7"
integrity sha512-VTyMAUfdm047mwKl+u79WIdrZxtFtn+nBxHeb844XBQ9uMNTuTHdx2hc5RiAJYqwTj3wc/xe5HLSdJSkJ+WfZw==
Refactored members service logging and errors (#10919) * Installed @tryghost/members-ssr@0.2.1 refs https://github.com/TryGhost/Members/issues/38 This updates allows for dynamic access of the membersApi, which will be used in future when replacing the membersApi instance with a newly configured one. * Set the membersApiInstance logger to use common.logging refs https://github.com/TryGhost/Members/issues/38 Passes the Ghost logger to the members api, so that we can keep an eye on errors produced by the api. * Refactored memberService use to always use getter refs https://github.com/TryGhost/Members/issues/38 This will allow us to switch out the membersApi and the consumers of it to have the updated reference by going through a getter. * Installed @tryghost/members-api@0.3.0 refs https://github.com/TryGhost/Members/issues/38 Adds support for setting the logger * Uninstalled stripe@7.0.0 refs https://github.com/TryGhost/Members/issues/38 The stripe module is now a dep of members-api, as it should be * Updated members service to reconfigure settings refs https://github.com/TryGhost/Members/issues/38 Previously we were unable to stop an invalidly configured members api instance, now that we create a new instance, we can wait for the ready or error event and only switch it out then.
2019-07-18 10:37:11 +03:00
stripe@^7.4.0:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "7.9.1"
resolved "https://registry.yarnpkg.com/stripe/-/stripe-7.9.1.tgz#05c266d48494b512b29ff89ef22e80efc14d35d3"
integrity sha512-8RzWlQD2/X/1YdzHtd5PYG0/GyAicxddW0TL54SIFq2ivaDoeJg3YLn9rxcmrnkmmuW8aU7yeByKjNGI8QrVxw==
Added initial subscription support with stripe to Members API (#10460) These changes introduce a new "service" to the members api, which handles getting and creating subscriptions. This is wired up to get subscription information when creating tokens, and attaching information to the token, so that the Content API can allow/deny access. Behind the subscription service we have a Stripe "payment processor", this holds the logic for creating subscriptions etc... in Stripe. The logic for getting items out of stripe uses a hash of the relevant data as the id to search for, this allows us to forgo keeping stripe data in a db, so that this feature can get out quicker.
2019-02-07 12:41:39 +03:00
dependencies:
Update dependency stripe to v7
2019-07-02 03:44:07 +03:00
qs "^6.6.0"
Added initial subscription support with stripe to Members API (#10460) These changes introduce a new "service" to the members api, which handles getting and creating subscriptions. This is wired up to get subscription information when creating tokens, and attaching information to the token, so that the Content API can allow/deny access. Behind the subscription service we have a Stripe "payment processor", this holds the logic for creating subscriptions etc... in Stripe. The logic for getting items out of stripe uses a hash of the relevant data as the id to search for, this allows us to forgo keeping stripe data in a db, so that this feature can get out quicker.
2019-02-07 12:41:39 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
stylehacks@^4.0.0:
version "4.0.3"
resolved "https://registry.yarnpkg.com/stylehacks/-/stylehacks-4.0.3.tgz#6718fcaf4d1e07d8a1318690881e8d96726a71d5"
integrity sha512-7GlLk9JwlElY4Y6a/rmbH2MhVlTyVmiJd1PfTCqFaIBEGMYNsrO/v3SeGTdhBThLg4Z+NbOk/qFMwCa+J+3p/g==
dependencies:
browserslist "^4.0.0"
postcss "^7.0.0"
postcss-selector-parser "^3.0.0"
Bumped superagent from 3.8.3 to 4.1.0 refs #9389 - https://github.com/visionmedia/superagent/blob/master/History.md#400-2018-11-17 - breaking changes don't really affect us - .end(…) returns undefined instead of the request. If you need the request object after calling .end() (and you probably don't), save it in a variable and call request.end(…). Consider not using .end() at all, and migrating to promises by calling .then() instead. - this could be changed, but it's not required
2019-01-21 17:19:07 +03:00
superagent@^3.8.3:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "3.8.3"
resolved "https://registry.yarnpkg.com/superagent/-/superagent-3.8.3.tgz#460ea0dbdb7d5b11bc4f78deba565f86a178e128"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-GLQtLMCoEIK4eDv6OGtkOoSMt3D+oq0y3dsxMuYuDvaNUvuT8eFBuLmfR0iYYzHC1e8hpzC6ZsxbuP6DIalMFA==
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
dependencies:
component-emitter "^1.2.0"
cookiejar "^2.1.0"
debug "^3.1.0"
extend "^3.0.0"
form-data "^2.3.1"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
formidable "^1.2.0"
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
methods "^1.1.1"
mime "^1.4.1"
qs "^6.5.1"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
readable-stream "^2.3.5"
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
supertest@4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/supertest/-/supertest-4.0.2.tgz#c2234dbdd6dc79b6f15b99c8d6577b90e4ce3f36"
integrity sha512-1BAbvrOZsGA3YTCWqbmh14L0YEq0EGICX/nBnfkfVJn7SrxQV1I3pMYjSzG9y/7ZU2V9dWqyqk2POwxlb09duQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
methods "^1.1.2"
superagent "^3.8.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
supports-color@6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-6.0.0.tgz#76cfe742cf1f41bb9b1c29ad03068c05b4c0e40a"
integrity sha512-on9Kwidc1IUQo+bQdhi8+Tijpo0e1SS6RoGo2guUwn5vdaxw8RXOF9Vb2ws+ihWOmh4JnCJOvaziZWP1VABaLg==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
has-flag "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
supports-color@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-2.0.0.tgz#535d045ce6b6363fa40117084629995e9df324c7"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-U10EXOa2Nj+kARcIRimZXp3zJMc=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
supports-color@^4.0.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-4.5.0.tgz#be7a0de484dec5c5cddf8b3d59125044912f635b"
integrity sha1-vnoN5ITexcXN34s9WRJQRJEvY1s=
dependencies:
has-flag "^2.0.0"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
supports-color@^5.3.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "5.5.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-5.5.0.tgz#e2e69a44ac8772f78a1ec0b35b689df6530efc8f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-QjVjwdXIt408MIiAqCX4oUKsgU2EqAGzs2Ppkm4aQYbjm+ZEWEcW4SfFNTr4uMNZma0ey4f5lgLrkB0aX0QMow==
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
has-flag "^3.0.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
supports-color@^6.1.0:
version "6.1.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-6.1.0.tgz#0764abc69c63d5ac842dd4867e8d025e880df8f3"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-qe1jfm1Mg7Nq/NSh6XE24gPXROEVsWHxC1LIx//XNlD9iw7YZQGjZNjYN7xGaEG6iKdA8EtNFW6R0gjnVXp+wQ==
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
dependencies:
has-flag "^3.0.0"
Update dependency gscan to v2.3.1
2019-12-16 23:15:55 +03:00
supports-color@^7.1.0:
version "7.1.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-7.1.0.tgz#68e32591df73e25ad1c4b49108a2ec507962bfd1"
integrity sha512-oRSIpR8pxT1Wr2FquTNnGet79b3BWljqOuoW/h4oBhxJ/HUbX5nX6JSruTkvXDCFMwDPvsaTTbvMLKZWSy0R5g==
dependencies:
has-flag "^4.0.0"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
svgo@^1.0.0:
version "1.3.2"
resolved "https://registry.yarnpkg.com/svgo/-/svgo-1.3.2.tgz#b6dc511c063346c9e415b81e43401145b96d4167"
integrity sha512-yhy/sQYxR5BkC98CY7o31VGsg014AKLEPxdfhora76l36hD9Rdy5NZA/Ocn6yayNPgSamYdtX2rFJdcv07AYVw==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
chalk "^2.4.1"
coa "^2.0.2"
css-select "^2.0.0"
css-select-base-adapter "^0.1.1"
css-tree "1.0.0-alpha.37"
csso "^4.0.2"
js-yaml "^3.13.1"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
mkdirp "~0.5.1"
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
object.values "^1.1.0"
sax "~1.2.4"
stable "^0.1.8"
unquote "~1.1.1"
util.promisify "~1.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
symbol-tree@^3.2.4:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "3.2.4"
resolved "https://registry.yarnpkg.com/symbol-tree/-/symbol-tree-3.2.4.tgz#430637d248ba77e078883951fb9aa0eed7c63fa2"
integrity sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
sywac@^1.2.1:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.2.2"
resolved "https://registry.yarnpkg.com/sywac/-/sywac-1.2.2.tgz#8d9e7271fc11337de09a38e70b71a264cb74caf0"
integrity sha512-Bfyo0Oddco9b/ifXTevNmMCewmWH2EeE06cPKolsahly7nShbYooZmJYZxJc5EN4WFAXvbR8WOx97PUvaYYMEg==
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
table@^5.2.3:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "5.4.6"
resolved "https://registry.yarnpkg.com/table/-/table-5.4.6.tgz#1292d19500ce3f86053b05f0e8e7e4a3bb21079e"
integrity sha512-wmEc8m4fjnob4gt5riFRtTu/6+4rSe12TpAELNSqHMfF3IqnA+CH37USM6/YR3qRZv7e56kAEAtd6nKZaxe0Ug==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
Lock file maintenance
2019-08-01 08:14:51 +03:00
ajv "^6.10.2"
lodash "^4.17.14"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
slice-ansi "^2.1.0"
string-width "^3.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
tar-fs@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/tar-fs/-/tar-fs-2.0.0.tgz#677700fc0c8b337a78bee3623fdc235f21d7afad"
integrity sha512-vaY0obB6Om/fso8a8vakQBzwholQ7v5+uy+tF3Ozvxv1KNezmVQAiWtcNmMHFSFPqL3dJA8ha6gdtFbfX9mcxA==
dependencies:
chownr "^1.1.1"
mkdirp "^0.5.1"
pump "^3.0.0"
tar-stream "^2.0.0"
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
tar-stream@^1.5.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.6.2"
resolved "https://registry.yarnpkg.com/tar-stream/-/tar-stream-1.6.2.tgz#8ea55dab37972253d9a9af90fdcd559ae435c555"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-rzS0heiNf8Xn7/mpdSVVSMAWAoy9bfb1WOTYC78Z0UQKeKa/CWS8FOq0lKGNa8DWKAn9gxjCvMLYc5PGXYlK2A==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bl "^1.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
buffer-alloc "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
end-of-stream "^1.0.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
fs-constants "^1.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
readable-stream "^2.3.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
to-buffer "^1.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
xtend "^4.0.0"
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
tar-stream@^2.0.0, tar-stream@^2.1.0:
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
version "2.1.0"
resolved "https://registry.yarnpkg.com/tar-stream/-/tar-stream-2.1.0.tgz#d1aaa3661f05b38b5acc9b7020efdca5179a2cc3"
integrity sha512-+DAn4Nb4+gz6WZigRzKEZl1QuJVOLtAwwF+WUxy1fJ6X63CaGaUAxJRD2KEn1OMfcbCjySTYpNC6WmfQoIEOdw==
dependencies:
bl "^3.0.0"
end-of-stream "^1.4.1"
fs-constants "^1.0.0"
inherits "^2.0.3"
readable-stream "^3.1.1"
Update dependency sharp to v0.23.2
2019-11-04 03:34:39 +03:00
tar@^4:
Update dependency sharp to v0.23.1
2019-09-30 03:35:55 +03:00
version "4.4.13"
resolved "https://registry.yarnpkg.com/tar/-/tar-4.4.13.tgz#43b364bc52888d555298637b10d60790254ab525"
integrity sha512-w2VwSrBoHa5BsSyH+KxEqeQBAllHhccyMFVHtGtdMpF4W7IRWfZjFiQceJPChOeTsSDVUpER2T8FA93pr0L+QA==
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
chownr "^1.1.1"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
fs-minipass "^1.2.5"
Update dependency sharp to v0.23.1
2019-09-30 03:35:55 +03:00
minipass "^2.8.6"
Lock file maintenance
2019-08-01 08:14:51 +03:00
minizlib "^1.2.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
mkdirp "^0.5.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
safe-buffer "^5.1.2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
yallist "^3.0.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
tar@^6.0.1:
version "6.0.1"
resolved "https://registry.yarnpkg.com/tar/-/tar-6.0.1.tgz#7b3bd6c313cb6e0153770108f8d70ac298607efa"
integrity sha512-bKhKrrz2FJJj5s7wynxy/fyxpE0CmCjmOQ1KV4KkgXFWOgoIT/NbTMnB1n+LFNrNk0SSBVGGxcK5AGsyC+pW5Q==
Update dependency sharp to v0.23.2
2019-11-04 03:34:39 +03:00
dependencies:
chownr "^1.1.3"
fs-minipass "^2.0.0"
minipass "^3.0.0"
minizlib "^2.1.0"
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
mkdirp "^1.0.3"
Update dependency sharp to v0.23.2
2019-11-04 03:34:39 +03:00
yallist "^4.0.0"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
tarn@^1.1.5:
version "1.1.5"
resolved "https://registry.yarnpkg.com/tarn/-/tarn-1.1.5.tgz#7be88622e951738b9fa3fb77477309242cdddc2d"
integrity sha512-PMtJ3HCLAZeedWjJPgGnCvcphbCOMbtZpjKgLq3qM5Qq9aQud+XHrL0WlrlgnTyS8U+jrjGbEXprFcQrxPy52g==
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
tarn@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/tarn/-/tarn-2.0.0.tgz#c68499f69881f99ae955b4317ca7d212d942fdee"
integrity sha512-7rNMCZd3s9bhQh47ksAQd92ADFcJUjjbyOvyFjNLwTPpGieFHMC84S+LOzw0fx1uh6hnDz/19r8CPMnIjJlMMA==
Update dependency rewire to v5
2020-03-16 12:00:44 +03:00
text-table@^0.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.2.0"
resolved "https://registry.yarnpkg.com/text-table/-/text-table-0.2.0.tgz#7f5ee823ae805207c00af2df4a84ec3fcfa570b4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-f17oI66AUgfACvLfSoTsP8+lcLQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Removed run-sequence dev dependency no issue - not used
2017-11-28 21:34:43 +03:00
through2@^2.0.2, through2@^2.0.3:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "2.0.5"
resolved "https://registry.yarnpkg.com/through2/-/through2-2.0.5.tgz#01c1e39eb31d07cb7d03a96a70823260b23132cd"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-/mrRod8xqpA+IHSLyGCQ2s8SPHiCDEeQJSep1jqLYeEUClOFG2Qsh+4FU6G9VeqpZnGW/Su8LQGc4YKni5rYSQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
readable-stream "~2.3.6"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
xtend "~4.0.1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
through@^2.3.6:
version "2.3.8"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/through/-/through-2.3.8.tgz#0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-DdTJ/6q8NXlgsbckEV1+Doai4fU=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
thunkify@^2.1.2:
version "2.1.2"
resolved "https://registry.yarnpkg.com/thunkify/-/thunkify-2.1.2.tgz#faa0e9d230c51acc95ca13a361ac05ca7e04553d"
integrity sha1-+qDp0jDFGsyVyhOjYawFyn4EVT0=
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
tildify@1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/tildify/-/tildify-1.2.0.tgz#dcec03f55dca9b7aa3e5b04f21817eb56e63588a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-3OwD9V3Km3qj5bBPIYF+tW5jWIo=
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
dependencies:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
os-homedir "^1.0.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
tildify@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/tildify/-/tildify-2.0.0.tgz#f205f3674d677ce698b7067a99e949ce03b4754a"
integrity sha512-Cc+OraorugtXNfs50hU9KS369rFXCfgGLpfCfvlc+Ud5u6VWmUQsOAa9HbTvheQdYnrdJqqv1e5oIqXppMYnSw==
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
timsort@^0.3.0:
version "0.3.0"
resolved "https://registry.yarnpkg.com/timsort/-/timsort-0.3.0.tgz#405411a8e7e6339fe64db9a234de11dc31e02bd4"
integrity sha1-QFQRqOfmM5/mTbmiNN4R3DHgK9Q=
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
tiny-lr@^1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/tiny-lr/-/tiny-lr-1.1.1.tgz#9fa547412f238fedb068ee295af8b682c98b2aab"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-44yhA3tsaRoMOjQQ+5v5mVdqef+kH6Qze9jTpqtVufgYjYt08zyZAwNwwVBj3i1rJMnR52IxOW0LK0vBzgAkuA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
body "^5.1.0"
debug "^3.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
faye-websocket "~0.10.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
livereload-js "^2.3.0"
object-assign "^4.1.0"
qs "^6.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update metascraper to v5.11.8
2020-04-06 03:17:00 +03:00
title@~3.4.2:
version "3.4.2"
resolved "https://registry.yarnpkg.com/title/-/title-3.4.2.tgz#1c0acd159c6437296cc73ec743a4b9f7510c6a6f"
integrity sha512-cSNFZ/ChKlX2SfF+k9XvvXkjVa1JrzdGt6v/hoxVig5VaDGRmNHANfawcAdW2mfkd7y+uBHH6n9EHAxJmkO5Hw==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
arg "1.0.0"
chalk "2.3.0"
clipboardy "1.2.2"
titleize "1.0.0"
titleize@1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/titleize/-/titleize-1.0.0.tgz#7d350722061830ba6617631e0cfd3ea08398d95a"
integrity sha1-fTUHIgYYMLpmF2MeDP0+oIOY2Vo=
tlds@^1.203.0:
version "1.203.1"
resolved "https://registry.yarnpkg.com/tlds/-/tlds-1.203.1.tgz#4dc9b02f53de3315bc98b80665e13de3edfc1dfc"
integrity sha512-7MUlYyGJ6rSitEZ3r1Q1QNV8uSIzapS8SmmhSusBuIc7uIxPPwsKllEP0GRp1NS6Ik6F+fRZvnjDWm3ecv2hDw==
Reverted tmp to v0.0.33 no issue - Renovate automerged a bump for tmp, but this version has a bug and shouldn't have passed the automated tests - this commit reverts the package back to the working version
2020-02-03 18:20:33 +03:00
tmp@0.0.33, tmp@^0.0.33:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
version "0.0.33"
resolved "https://registry.yarnpkg.com/tmp/-/tmp-0.0.33.tgz#6d34335889768d21b2bcda0aa277ced3b1bfadf9"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-jRCJlojKnZ3addtTOjdIqoRuPEKBvNXcGYqzO6zWZX8KfKEpnGY5jfggJQ3EjKuu8D4bJRr0y+cYJFmYbImXGw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
os-tmpdir "~1.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
to-buffer@^1.1.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/to-buffer/-/to-buffer-1.1.1.tgz#493bd48f62d7c43fcded313a03dcadb2e1213a80"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-lx9B5iv7msuFYE3dytT+KE5tap+rNYw+K4jVkb9R/asAb+pbBSM17jtunHplhBe6RRJdZx3Pn2Jph24O32mOVg==
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
to-object-path@^0.3.0:
version "0.3.0"
resolved "https://registry.yarnpkg.com/to-object-path/-/to-object-path-0.3.0.tgz#297588b7b0e7e0ac08e04e672f85c1f4999e17af"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-KXWIt7Dn4KwI4E5nL4XB9JmeF68=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
kind-of "^3.0.2"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
to-readable-stream@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/to-readable-stream/-/to-readable-stream-1.0.0.tgz#ce0aa0c2f3df6adf852efb404a783e77c0475771"
integrity sha512-Iq25XBt6zD5npPhlLVXGFN3/gyR2/qODcKNNyTMd4vbm39HUaOiAM4PMq0eMVC/Tkxz+Zjdsc55g9yyz+Yq00Q==
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
to-readable-stream@^2.0.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/to-readable-stream/-/to-readable-stream-2.1.0.tgz#82880316121bea662cdc226adb30addb50cb06e8"
integrity sha512-o3Qa6DGg1CEXshSdvWNX2sN4QHqg03SPq7U6jPXRahlQdl5dK8oXjkU/2/sGrnOZKeGV1zLSO8qPwyKklPPE7w==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
to-regex-range@^2.1.0:
version "2.1.1"
resolved "https://registry.yarnpkg.com/to-regex-range/-/to-regex-range-2.1.1.tgz#7c80c17b9dfebe599e27367e0d4dd5590141db38"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-fIDBe53+vlmeJzZ+DU3VWQFB2zg=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
is-number "^3.0.0"
repeat-string "^1.6.1"
Update dependency mocha to v7
2020-03-02 06:20:31 +03:00
to-regex-range@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/to-regex-range/-/to-regex-range-5.0.1.tgz#1648c44aae7c8d988a326018ed72f5b4dd0392e4"
integrity sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==
dependencies:
is-number "^7.0.0"
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
to-regex@^3.0.1, to-regex@^3.0.2:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/to-regex/-/to-regex-3.0.2.tgz#13cfdd9b336552f30b51f33a8ae1b42a7a7599ce"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-FWtleNAtZ/Ki2qtqej2CXTOayOH9bHDQF+Q48VpWyDXjbYxA4Yz8iDB31zXOBUlOHHKidDbqGVrTUvQMPmBGBw==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
define-property "^2.0.2"
extend-shallow "^3.0.2"
regex-not "^1.0.2"
safe-regex "^1.1.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
toidentifier@1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/toidentifier/-/toidentifier-1.0.0.tgz#7e1be3470f1e77948bc43d94a3c8f4d7752ba553"
integrity sha512-yaOH/Pk/VEhBWWTlhI+qXxDFXlejDGcQipMlyxda9nthulaxLZUNcUqFxokp0vcYnvteJln5FNQDRrxj3YcbVw==
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
tough-cookie@^2.3.3, tough-cookie@~2.5.0:
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
version "2.5.0"
resolved "https://registry.yarnpkg.com/tough-cookie/-/tough-cookie-2.5.0.tgz#cd9fb2a0aa1d5a12b473bd9fb96fa3dcff65ade2"
integrity sha512-nlLsUzgm1kfLXSXfRZMc1KLAugd4hqJHDTvc2hDIwS3mZAfMEuMbc03SujMF+GEcpaX/qboeycw6iO8JwVv2+g==
dependencies:
psl "^1.1.28"
punycode "^2.1.1"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
tough-cookie@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/tough-cookie/-/tough-cookie-3.0.1.tgz#9df4f57e739c26930a018184887f4adb7dca73b2"
integrity sha512-yQyJ0u4pZsv9D4clxO69OEjLWYw+jbgspjTue4lTQZLfV0c5l1VmK2y1JK8E9ahdpltPOaAThPcp5nKPUgSnsg==
dependencies:
ip-regex "^2.1.0"
psl "^1.1.28"
punycode "^2.1.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
tough-cookie@~2.4.3:
version "2.4.3"
resolved "https://registry.yarnpkg.com/tough-cookie/-/tough-cookie-2.4.3.tgz#53f36da3f47783b0925afa06ff9f3b165280f781"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-Q5srk/4vDM54WJsJio3XNn6K2sCG+CQ8G5Wz6bZhRZoAe/+TxjWB/GlFAnYEbkYVlON9FMk/fE3h2RLpPXo4lQ==
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
psl "^1.1.24"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
punycode "^1.4.1"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
tr46@^2.0.0:
version "2.0.2"
resolved "https://registry.yarnpkg.com/tr46/-/tr46-2.0.2.tgz#03273586def1595ae08fedb38d7733cee91d2479"
integrity sha512-3n1qG+/5kg+jrbTzwAykB5yRYtQCTqOGKq5U5PE3b0a1/mzo6snDhjGS0zJVJunO0NrT3Dg1MLy5TjWP/UJppg==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
punycode "^2.1.1"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
trim-newlines@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/trim-newlines/-/trim-newlines-1.0.0.tgz#5887966bb582a4503a41eb524f7d35011815a613"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WIeWa7WCpFA6QetST301ARgVphM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
trim-trailing-lines@^1.0.0:
version "1.1.2"
resolved "https://registry.yarnpkg.com/trim-trailing-lines/-/trim-trailing-lines-1.1.2.tgz#d2f1e153161152e9f02fabc670fb40bec2ea2e3a"
integrity sha512-MUjYItdrqqj2zpcHFTkMa9WAv4JHTI6gnRQGPFLrt5L9a6tRMiDnIqYl8JBvu2d2Tc3lWJKQwlGCp0K8AvCM+Q==
trim@0.0.1:
version "0.0.1"
resolved "https://registry.yarnpkg.com/trim/-/trim-0.0.1.tgz#5858547f6b290757ee95cccc666fb50084c460dd"
integrity sha1-WFhUf2spB1fulczMZm+1AITEYN0=
trough@^1.0.0:
version "1.0.4"
resolved "https://registry.yarnpkg.com/trough/-/trough-1.0.4.tgz#3b52b1f13924f460c3fbfd0df69b587dbcbc762e"
integrity sha512-tdzBRDGWcI1OpPVmChbdSKhvSVurznZ8X36AYURAcl+0o2ldlCY2XPzyXNNxwJwwyIU+rIglTCG4kxtNKBQH7Q==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
truncate@~2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/truncate/-/truncate-2.1.0.tgz#391183563a25cffbd4d613a1d00ae5844c9e55d3"
integrity sha512-em3E3SUDONOjTBcZ36DTm3RvDded3IRU9rX32oHwwXNt3rJD5MVaFlJTQvs8tJoHRoeYP36OuQ1eL/Q7bNEWIQ==
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
tslib@^1.10.0:
version "1.11.0"
resolved "https://registry.yarnpkg.com/tslib/-/tslib-1.11.0.tgz#f1f3528301621a53220d58373ae510ff747a66bc"
integrity sha512-BmndXUtiTn/VDDrJzQE7Mm22Ix3PxgLltW9bSNLoeCY31gnG2OPx0QqJnuc9oMIKioYrz487i6K9o4Pdn0j+Kg==
Integrated Sentry error tracking no issue - this allows tracking of application errors within Sentry - only enabled for HTTP 500 errors for now - it is disabled by default
2020-01-29 15:09:21 +03:00
tslib@^1.9.0, tslib@^1.9.3:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.10.0"
resolved "https://registry.yarnpkg.com/tslib/-/tslib-1.10.0.tgz#c3c19f95973fb0a62973fb09d90d961ee43e5c8a"
integrity sha512-qOebF53frne81cf0S9B41ByenJ3/IuH8yJKngAX35CmiZySA0khhkovshKK+jGCaMnVomla7gVlIcc3EvKPbTQ==
Bump rewire to version 3.0.2 no issue - nothing to adapt for the major jump
2017-11-28 21:22:29 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
tsscmp@1.0.6, tsscmp@^1.0.6:
Installed @tryghost/members-api@0.8.3 no-issue This improves logging for webhook signature validation
2019-10-30 13:24:04 +03:00
version "1.0.6"
resolved "https://registry.yarnpkg.com/tsscmp/-/tsscmp-1.0.6.tgz#85b99583ac3589ec4bfef825b5000aa911d605eb"
integrity sha512-LxhtAkPDTkVCMQjt2h6eBVY28KCjikZqZfMcC15YBeNjkgUpdCfBu5HoiOTDu86v6smE8yOjyEktJ8hlbANHQA==
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
tunnel-agent@^0.6.0:
version "0.6.0"
resolved "https://registry.yarnpkg.com/tunnel-agent/-/tunnel-agent-0.6.0.tgz#27a5dea06b36b04a0a9966774b290868f0fc40fd"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-J6XeoGs2sEoKmWZ3SykIaPD8QP0=
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
dependencies:
safe-buffer "^5.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
tweetnacl@^0.14.3, tweetnacl@~0.14.0:
version "0.14.5"
resolved "https://registry.yarnpkg.com/tweetnacl/-/tweetnacl-0.14.5.tgz#5ae68177f192d4456269d108afa93ff8743f4f64"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WuaBd/GS1EViadEIr6k/+HQ/T2Q=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
type-check@~0.3.2:
version "0.3.2"
resolved "https://registry.yarnpkg.com/type-check/-/type-check-0.3.2.tgz#5884cab512cf1d355e3fb784f30804b2b520db72"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-WITKtRLPHTVeP7eE8wgEsrUg23I=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
prelude-ls "~1.1.2"
Updated test dependencies no issue
2020-02-24 22:16:38 +03:00
type-detect@4.0.8, type-detect@^4.0.8:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "4.0.8"
resolved "https://registry.yarnpkg.com/type-detect/-/type-detect-4.0.8.tgz#7646fb5f18871cfbb7749e69bd39a6388eb7450c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-0fr/mIH1dlO+x7TlcMy+bIDqKPsw/70tVyeHW787goQjhmqaZe10uwLujubK9q9Lg6Fiho1KUKDYz0Z7k7g5/g==
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
Updated dependencies no issue - now Node v8 has been dropped, several dependencies can be updated
2020-02-22 16:03:41 +03:00
type-fest@^0.10.0:
version "0.10.0"
resolved "https://registry.yarnpkg.com/type-fest/-/type-fest-0.10.0.tgz#7f06b2b9fbfc581068d1341ffabd0349ceafc642"
integrity sha512-EUV9jo4sffrwlg8s0zDhP0T2WD3pru5Xi0+HTE3zTUmBaZNhfkite9PdSJwdXLwPVW0jnAHT56pZHIOYckPEiw==
Update Test & linting packages
2020-02-03 16:44:38 +03:00
type-fest@^0.8.1:
version "0.8.1"
resolved "https://registry.yarnpkg.com/type-fest/-/type-fest-0.8.1.tgz#09e249ebde851d3b1e48d27c105444667f17b83d"
integrity sha512-4dbzIzqvjtgiM5rw1k5rEHtBANKmdudhGyBEajN01fEyhaAIhsoKNy6y7+IN93IfpFtwY9iqi7kD+xwKhQsNJA==
Lock file maintenance
2019-08-01 08:14:51 +03:00
type-is@^1.6.4, type-is@~1.6.17, type-is@~1.6.18:
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
version "1.6.18"
resolved "https://registry.yarnpkg.com/type-is/-/type-is-1.6.18.tgz#4e552cd05df09467dcbc4ef739de89f2cf37c131"
integrity sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==
dependencies:
media-typer "0.3.0"
mime-types "~2.1.24"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
typedarray@^0.0.6:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.0.6"
resolved "https://registry.yarnpkg.com/typedarray/-/typedarray-0.0.6.tgz#867ac74e3864187b1d3d47d996a78ec5c8830777"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-hnrHTjhkGHsdPUfZlqeOxciDB3c=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
uc.micro@^1.0.1, uc.micro@^1.0.5:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.0.6"
resolved "https://registry.yarnpkg.com/uc.micro/-/uc.micro-1.0.6.tgz#9c411a802a409a91fc6cf74081baba34b24499ac"
integrity sha512-8Y75pvTYkLJW2hWQHXxoqRgV7qb9B+9vFEtidML+7koHUFapnVJAZ6cKs+Qjz5Aw3aZWHMC6u0wJE3At+nSGwA==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
Lock file maintenance
2019-08-01 08:14:51 +03:00
uglify-js@^3.1.4, uglify-js@^3.5.0:
Merge branch 'master' into v3
2019-10-08 15:58:08 +03:00
version "3.6.1"
resolved "https://registry.yarnpkg.com/uglify-js/-/uglify-js-3.6.1.tgz#ae7688c50e1bdcf2f70a0e162410003cf9798311"
integrity sha512-+dSJLJpXBb6oMHP+Yvw8hUgElz4gLTh82XuX68QiJVTXaE5ibl6buzhNkQdYhBlIhozWOC9ge16wyRmjG4TwVQ==
Update Build Tool
2019-07-02 03:34:50 +03:00
dependencies:
Merge branch 'master' into v3
2019-10-08 15:58:08 +03:00
commander "2.20.0"
Update Build Tool
2019-07-02 03:34:50 +03:00
source-map "~0.6.1"
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
uid-safe@~2.1.5:
version "2.1.5"
resolved "https://registry.yarnpkg.com/uid-safe/-/uid-safe-2.1.5.tgz#2b3d5c7240e8fc2e58f8aa269e5ee49c0857bd3a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-KPHm4VL5dDXKz01UuEd88Df+KzynaohSL9fBh096KWAxSKZQDI2uBrVqtvRM4rwrIrRRKsdLNML/lnaaVSRioA==
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
dependencies:
random-bytes "~1.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
unc-path-regex@^0.1.2:
version "0.1.2"
resolved "https://registry.yarnpkg.com/unc-path-regex/-/unc-path-regex-0.1.2.tgz#e73dd3d7b0d7c5ed86fbac6b0ae7d8c6a69d50fa"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-5z3T17DXxe2G+6xrCufYxqadUPo=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped html-to-text from 3.3.0 to 4.0.0 refs #9389 - https://github.com/werk85/node-html-to-text/blob/master/CHANGELOG.md#version-400 - breaking change does not affect us
2019-01-21 17:02:52 +03:00
underscore.string@~3.3.4:
version "3.3.5"
resolved "https://registry.yarnpkg.com/underscore.string/-/underscore.string-3.3.5.tgz#fc2ad255b8bd309e239cbc5816fd23a9b7ea4023"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-g+dpmgn+XBneLmXXo+sGlW5xQEt4ErkS3mgeN2GFbremYeMBSJKr9Wf2KJplQVaiPY/f7FN6atosWYNm9ovrYg==
Bumped html-to-text from 3.3.0 to 4.0.0 refs #9389 - https://github.com/werk85/node-html-to-text/blob/master/CHANGELOG.md#version-400 - breaking change does not affect us
2019-01-21 17:02:52 +03:00
dependencies:
sprintf-js "^1.0.3"
util-deprecate "^1.0.2"
underscore@:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.9.1"
resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.9.1.tgz#06dce34a0e68a7babc29b365b8e74b8925203961"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-5/4etnCkd9c8gwgowi5/om/mYO5ajCaOgdzj/oW+0eQV9WxKBDZw5+ycmKmeaTXjInS/W0BzpGLo2xR2aBwZdg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Respected peer dependency for bookshelf no issue - need to use knex 0.14.x for now - Bookshelf already bumped the peer dependency in master, but was not released yet
2019-01-22 10:58:28 +03:00
underscore@1.7.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.7.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.7.0.tgz#6bbaf0877500d36be34ecaa584e0db9fef035209"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-a7rwh3UA02vjTsqlhODbn+8DUgk=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
underscore@~1.8.3:
version "1.8.3"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.8.3.tgz#4f3fb53b106e6097fcf9cb4109f2a5e9bdfa5022"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Tz+1OxBuYJf8+ctBCfKl6b36UCI=
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
unherit@^1.0.4:
version "1.1.2"
resolved "https://registry.yarnpkg.com/unherit/-/unherit-1.1.2.tgz#14f1f397253ee4ec95cec167762e77df83678449"
integrity sha512-W3tMnpaMG7ZY6xe/moK04U9fBhi6wEiCYHUW5Mop/wQHf12+79EQGwxYejNdhEz2mkqkBlGwm7pxmgBKMVUj0w==
dependencies:
inherits "^2.0.1"
xtend "^4.0.1"
Updated to use slugify method from SDK for safe string refs #10618 - Updated lib safe string security method
2019-05-07 07:48:28 +03:00
unidecode@^0.1.8:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.1.8"
resolved "https://registry.yarnpkg.com/unidecode/-/unidecode-0.1.8.tgz#efbb301538bc45246a9ac8c559d72f015305053e"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-77swFTi8RSRqmsjFWdcvAVMFBT4=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🐛 Fixed "unsaved changes" modal displaying when post has been saved refs https://github.com/TryGhost/Ghost/issues/10477 The unsaved changes modal is displaying even when the post has been saved if images have been uploaded because the server is transforming absolute image urls to relative during input of the `mobiledoc` field but not transforming them back to absolute during output. The editor then thinks it's out of sync and shows the warning when trying to leave. - `@tryghost/url-utils` has been updated with new methods for transforming URLs in mobiledoc content - moves absolute->relative transformation from the API input serializers into the Post model - transforms URLs in more fields for a more comprehensive transformation and fewer issues when re-configuring a site's domain - previously there could be problems with internal links between posts not being transformed so you could change the url config to newdomain.com but links in post content would still be pointing to olddomain.com - updates the API post output serializers to transform all modified fields - drops the `?absolute_urls=true` param switch from the `canary` API post output serializer so that all URLs are output as absolute - we're transforming more urls to relative when saving so this is necessary to ensure the unsaved changes modal is not triggered - the query param isn't documented and will disappear in v3
2019-10-07 22:23:45 +03:00
unified@^8.2.0:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "8.4.1"
resolved "https://registry.yarnpkg.com/unified/-/unified-8.4.1.tgz#99bd0393f58a139eaa51832cfbcc0e7f6573a1e1"
integrity sha512-YPj/uIIZSO7mMIZQj/5Z3hDl4lshWYRQGs5TgUCjHTVdklUWH+O94mK5Cy77SEcmEUwGhnUcudMuH/zIwporqw==
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
dependencies:
bail "^1.0.0"
extend "^3.0.0"
is-plain-obj "^2.0.0"
trough "^1.0.0"
vfile "^4.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
union-value@^1.0.0:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/union-value/-/union-value-1.0.1.tgz#0b6fe7b835aecda61c6ea4d4f02c14221e109847"
integrity sha512-tJfXmxMeWYnczCVs7XAEvIV7ieppALdyepWMkHkwciRpZraG/xwT+s2JN8+pr1+8jCRf80FFzvr+MpQeeoF4Xg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
arr-union "^3.1.0"
get-value "^2.0.6"
is-extendable "^0.1.1"
Lock file maintenance
2019-08-01 08:14:51 +03:00
set-value "^2.0.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
uniq@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/uniq/-/uniq-1.0.1.tgz#b31c5ae8254844a3a8281541ce2b04b865a734ff"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-sxxa6CVIRKOoKBVBzisEuGWnNP8=
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
uniqs@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/uniqs/-/uniqs-2.0.0.tgz#ffede4b36b25290696e6e165d4a59edb998e6b02"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-/+3ks2slKQaW5uFl1KWe25mOawI=
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
unist-util-is@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/unist-util-is/-/unist-util-is-3.0.0.tgz#d9e84381c2468e82629e4a5be9d7d05a2dd324cd"
integrity sha512-sVZZX3+kspVNmLWBPAB6r+7D9ZgAFPNWm66f7YNb420RlQSbn+n8rG8dGZSkrER7ZIXGQYNm5pqC3v3HopH24A==
unist-util-is@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/unist-util-is/-/unist-util-is-4.0.0.tgz#85672993f0d88a8bffb45137aba003ee8da11a38"
integrity sha512-E5JLUKRQlAYiJmN2PVBdSz01R3rUKRSM00X+0DB/yLqxdLu6wZZkRdTIsxDp9X+bkxh8Eq+O2YYRbZvLZtQT1A==
unist-util-remove-position@^1.0.0:
version "1.1.3"
resolved "https://registry.yarnpkg.com/unist-util-remove-position/-/unist-util-remove-position-1.1.3.tgz#d91aa8b89b30cb38bad2924da11072faa64fd972"
integrity sha512-CtszTlOjP2sBGYc2zcKA/CvNdTdEs3ozbiJ63IPBxh8iZg42SCCb8m04f8z2+V1aSk5a7BxbZKEdoDjadmBkWA==
dependencies:
unist-util-visit "^1.1.0"
unist-util-stringify-position@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/unist-util-stringify-position/-/unist-util-stringify-position-2.0.1.tgz#de2a2bc8d3febfa606652673a91455b6a36fb9f3"
integrity sha512-Zqlf6+FRI39Bah8Q6ZnNGrEHUhwJOkHde2MHVk96lLyftfJJckaPslKgzhVcviXj8KcE9UJM9F+a4JEiBUTYgA==
dependencies:
"@types/unist" "^2.0.2"
unist-util-visit-parents@^2.0.0:
version "2.1.2"
resolved "https://registry.yarnpkg.com/unist-util-visit-parents/-/unist-util-visit-parents-2.1.2.tgz#25e43e55312166f3348cae6743588781d112c1e9"
integrity sha512-DyN5vD4NE3aSeB+PXYNKxzGsfocxp6asDc2XXE3b0ekO2BaRUpBicbbUygfSvYfUz1IkmjFR1YF7dPklraMZ2g==
dependencies:
unist-util-is "^3.0.0"
unist-util-visit-parents@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/unist-util-visit-parents/-/unist-util-visit-parents-3.0.0.tgz#dd4cdcd86d505ec7a81bdc01bc790f9def742bee"
integrity sha512-H3K8d81S4V3XVXVwLvrLGk+R5VILryfUotD06/R/rLsTsPLGjkn6gIP8qEEVITcuIySNYj0ocJLsePjm9F/Vcg==
dependencies:
"@types/unist" "^2.0.3"
unist-util-is "^4.0.0"
unist-util-visit@^1.1.0:
version "1.4.1"
resolved "https://registry.yarnpkg.com/unist-util-visit/-/unist-util-visit-1.4.1.tgz#4724aaa8486e6ee6e26d7ff3c8685960d560b1e3"
integrity sha512-AvGNk7Bb//EmJZyhtRUnNMEpId/AZ5Ph/KUpTI09WHQuDZHKovQ1oEv3mfmKpWKtoMzyMC4GLBm1Zy5k12fjIw==
dependencies:
unist-util-visit-parents "^2.0.0"
unist-util-visit@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/unist-util-visit/-/unist-util-visit-2.0.0.tgz#1fdae5ea88251651bfe49b7e84390d664fc227c5"
integrity sha512-kiTpWKsF54u/78L/UU/i7lxrnqGiEWBgqCpaIZBYP0gwUC+Akq0Ajm4U8JiNIoQNfAioBdsyarnOcTEAb9mLeQ==
dependencies:
"@types/unist" "^2.0.0"
unist-util-is "^4.0.0"
unist-util-visit-parents "^3.0.0"
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 10:51:54 +03:00
universalify@^0.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/universalify/-/universalify-0.1.2.tgz#b646f69be3942dabcecc9d6639c80dc105efaa66"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-rBJeI5CXAlmy1pV+617WB9J63U6XcazHHF2f2dbJix4XzpUF0RS3Zbj0FGIOCAva5P/d/GBOYaACQ1w+0azUkg==
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 10:51:54 +03:00
Update dependency fs-extra to v9
2020-03-19 18:40:31 +03:00
universalify@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/universalify/-/universalify-1.0.0.tgz#b61a1da173e8435b2fe3c67d29b9adf8594bd16d"
integrity sha512-rb6X1W158d7pRQBg5gkR8uPaSfiids68LTJQYOtEUhoJUWBdaQHsuT/EUduxXYxcrt4r5PJ4fuHW1MHT6p0qug==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
unpipe@1.0.0, unpipe@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/unpipe/-/unpipe-1.0.0.tgz#b2bf4ee8514aae6165b4817829d21b2ef49904ec"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-sr9O6FFKrmFltIF4KdIbLvSZBOw=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
unquote@~1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/unquote/-/unquote-1.1.1.tgz#8fded7324ec6e88a0ff8b905e7c098cdc086d544"
integrity sha1-j97XMk7G6IoP+LkF58CYzcCG1UQ=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
unset-value@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/unset-value/-/unset-value-1.0.0.tgz#8376873f7d2335179ffb1e6fc3a8ed0dfc8ab559"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-g3aHP30jNRef+x5vw6jtDfyKtVk=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
has-value "^0.3.1"
isobject "^3.0.0"
Bumped gscan version to 2.4.0 no issue - Updated theme fixtures to be in line with new deprecation rules for {{lang}} and {{@blog.*}} helpers introduced with https://github.com/TryGhost/gscan/pull/180
2019-04-02 07:59:16 +03:00
upath@^1.1.0:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/upath/-/upath-1.2.0.tgz#8f66dbcd55a883acdae4408af8b035a5044c1894"
integrity sha512-aZwGpamFO61g3OlfT7OQCHqhGnW43ieH9WZeP7QxN/G/jS4jfqUkZxoryvJgVPEcrl5NL/ggHsSmLMHuH64Lhg==
Bumped gscan version to 2.4.0 no issue - Updated theme fixtures to be in line with new deprecation rules for {{lang}} and {{@blog.*}} helpers introduced with https://github.com/TryGhost/gscan/pull/180
2019-04-02 07:59:16 +03:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
uri-js@^4.2.2:
version "4.2.2"
resolved "https://registry.yarnpkg.com/uri-js/-/uri-js-4.2.2.tgz#94c540e1ff772956e2299507c010aea6c8838eb0"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-KY9Frmirql91X2Qgjry0Wd4Y+YTdrdZheS8TFwvkbLWf/G5KNJDCh6pKL5OZctEW4+0Baa5idK2ZQuELRwPznQ==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
dependencies:
punycode "^2.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
uri-path@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/uri-path/-/uri-path-1.0.0.tgz#9747f018358933c31de0fccfd82d138e67262e32"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-l0fwGDWJM8Md4PzP2C0TjmcmLjI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
urix@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/urix/-/urix-0.1.0.tgz#da937f7a62e21fec1fd18d49b35c2935067a6c72"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-2pN/emLiH+wf0Y1Js1wpNQZ6bHI=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
url-parse-lax@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/url-parse-lax/-/url-parse-lax-3.0.0.tgz#16b5cafc07dbe3676c1b1999177823d6503acb0c"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-FrXK/Afb42dsGxmZF3gj1lA6yww=
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
prepend-http "^2.0.0"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
url-regex@~5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/url-regex/-/url-regex-5.0.0.tgz#8f5456ab83d898d18b2f91753a702649b873273a"
integrity sha512-O08GjTiAFNsSlrUWfqF1jH0H1W3m35ZyadHrGv5krdnmPPoxP27oDTqux/579PtaroiSGm5yma6KT1mHFH6Y/g==
dependencies:
ip-regex "^4.1.0"
tlds "^1.203.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
use@^3.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.1.1"
resolved "https://registry.yarnpkg.com/use/-/use-3.1.1.tgz#d50c8cac79a19fbc20f2911f56eb973f4e10070f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-cwESVXlO3url9YWlFW/TA9cshCEhtu7IKJ/p5soJ/gGpj7vbvFrAY/eIioQ6Dw23KjZhYgiIo8HOs1nQ2vr/oQ==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
util-deprecate@^1.0.1, util-deprecate@^1.0.2, util-deprecate@~1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/util-deprecate/-/util-deprecate-1.0.2.tgz#450d4dc9fa70de732762fbd2d4a28981419a0ccf"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-RQ1Nyfpw3nMnYvvS1KKJgUGaDM8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
util.promisify@~1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/util.promisify/-/util.promisify-1.0.1.tgz#6baf7774b80eeb0f7520d8b81d07982a59abbaee"
integrity sha512-g9JpC/3He3bm38zsLupWryXHoEcS22YHthuPQSJdMy6KNrzIRzWqcsHzD/WUnqe45whVou4VIsPew37DoXWNrA==
dependencies:
define-properties "^1.1.3"
es-abstract "^1.17.2"
has-symbols "^1.0.1"
object.getownpropertydescriptors "^2.1.0"
Removed misc unused dependencies
2020-04-01 17:38:26 +03:00
utils-merge@1.0.1:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/utils-merge/-/utils-merge-1.0.1.tgz#9f95710f50a267947b2ccc124741c1028427e713"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-n5VxD1CiZ5R7LMwSR0HBAoQn5xM=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Update dependency uuid to v7.0.3
2020-04-01 15:49:34 +03:00
uuid@7.0.3:
version "7.0.3"
resolved "https://registry.yarnpkg.com/uuid/-/uuid-7.0.3.tgz#c5c9f2c8cf25dc0a372c4df1441c41f5bd0c680b"
integrity sha512-DPSke0pXhTZgoF/d+WSt2QaKMCFSfx7QegxEWT+JOuHF5aWrKEn0G+ztjuJg/gG8/ItK+rbPCD/yNv8yyih6Cg==
Update dependency uuid to v3.4.0
2020-02-18 23:07:26 +03:00
uuid@^3.0.0, uuid@^3.2.1, uuid@^3.3.2, uuid@^3.3.3:
Update dependency uuid to v3.3.3
2019-08-26 03:29:49 +03:00
version "3.3.3"
resolved "https://registry.yarnpkg.com/uuid/-/uuid-3.3.3.tgz#4568f0216e78760ee1dbf3a4d2cf53e224112866"
integrity sha512-pW0No1RGHgzlpHJO1nsVrHKpOEIxkGg1xB+v0ZmdNH5OAeAwzAVrCnI2/6Mtx+Uys6iaylxa+D3g4j63IKKjSQ==
Update dependency uuid to v7.0.2
2020-03-09 03:22:46 +03:00
uuid@^7.0.1:
version "7.0.1"
resolved "https://registry.yarnpkg.com/uuid/-/uuid-7.0.1.tgz#95ed6ff3d8c881cbf85f0f05cc3915ef994818ef"
integrity sha512-yqjRXZzSJm9Dbl84H2VDHpM3zMjzSJQ+hn6C4zqd5ilW+7P4ZmLEEqwho9LjP+tGuZlF4xrHQXT0h9QZUS/pWA==
Update Test & linting packages
2019-08-16 22:07:23 +03:00
v8-compile-cache@^2.0.3:
version "2.1.0"
resolved "https://registry.yarnpkg.com/v8-compile-cache/-/v8-compile-cache-2.1.0.tgz#e14de37b31a6d194f5690d67efc4e7f6fc6ab30e"
integrity sha512-usZBT3PW+LOjM25wbqIlZwPeJV+3OSz3M1k1Ws8snlW39dZyYL9lOGC5FgPVHfk0jKmjiDV8Z0mIbVQPiwFs7g==
Update dependency knex-migrator to v3.4.3
2020-04-08 09:43:10 +03:00
v8flags@^3.1.3:
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
version "3.1.3"
resolved "https://registry.yarnpkg.com/v8flags/-/v8flags-3.1.3.tgz#fc9dc23521ca20c5433f81cc4eb9b3033bb105d8"
integrity sha512-amh9CCg3ZxkzQ48Mhcb8iX7xpAfYJgePHxWMQCBWECpOSqJUXgY26ncA61UTV0BkPqfhcy6mzwCIoP4ygxpW8w==
dependencies:
homedir-polyfill "^1.0.1"
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
valid-data-url@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/valid-data-url/-/valid-data-url-2.0.0.tgz#2220fa9f8d4e761ebd3f3bb02770f1212b810537"
integrity sha512-dyCZnv3aCey7yfTgIqdZanKl7xWAEEKCbgmR7SKqyK6QT/Z07ROactrgD1eA37C69ODRj7rNOjzKWVPh0EUjBA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
validate-npm-package-license@^3.0.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.0.4"
resolved "https://registry.yarnpkg.com/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz#fc91f6b9c7ba15c857f4cb2c5defeec39d4f410a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-DpKm2Ui/xN7/HQKCtpZxoRWBhZ9Z0kqtygG8XCgNQ8ZlDnxuQmWhj566j8fN4Cu3/JmbhsDo7fcAJq4s9h27Ew==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
spdx-correct "^3.0.0"
spdx-expression-parse "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency gscan to v3.4.0
2020-03-20 12:27:55 +03:00
validator@12.2.0, validator@^12.0.0:
Update dependency amperize to v0.6.1
2020-03-02 03:20:46 +03:00
version "12.2.0"
resolved "https://registry.yarnpkg.com/validator/-/validator-12.2.0.tgz#660d47e96267033fd070096c3b1a6f2db4380a0a"
integrity sha512-jJfE/DW6tIK1Ek8nCfNFqt8Wb3nzMoAbocBF6/Icgg1ZFSBpObdnwVY2jQj6qUqzhx5jc71fpvBWyLGO7Xl+nQ==
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 12:12:03 +03:00
Update dependency gscan to v3.4.0
2020-03-20 12:27:55 +03:00
validator@6.3.0:
version "6.3.0"
resolved "https://registry.yarnpkg.com/validator/-/validator-6.3.0.tgz#47ce23ed8d4eaddfa9d4b8ef0071b6cf1078d7c8"
integrity sha1-R84j7Y1Ord+p1LjvAHG2zxB418g=
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
vary@^1, vary@~1.1.2:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/vary/-/vary-1.1.2.tgz#2299f02c6ded30d4a5961b0b9f74524a18f634fc"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-IpnwLG3tMNSllhsLn3RSShj2NPw=
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
vendors@^1.0.0:
Swapped grunt-cssnano for grunt-postcss+cssnano - The grunt-cssnano plugin is old and no longer maintained - It uses insecure dependencies that don't really impact us, but we want to get rid of warnings - Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
2020-04-01 15:01:03 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/vendors/-/vendors-1.0.4.tgz#e2b800a53e7a29b93506c3cf41100d16c4c4ad8e"
integrity sha512-/juG65kTL4Cy2su4P8HjtkTxk6VmJDiOPBufWniqQ6wknac6jNiXS9vU+hO3wgusiyqWlzTbVHi0dyJqRONg3w==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
verror@1.10.0:
version "1.10.0"
resolved "https://registry.yarnpkg.com/verror/-/verror-1.10.0.tgz#3a105ca17053af55d6e270c1f8288682e18da400"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-OhBcoXBTr1XW4nDB+CiGguGNpAA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
assert-plus "^1.0.0"
core-util-is "1.0.2"
extsprintf "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated dependency @tryghost/url-utils to v0.6.0 no issue - has refactored relativeToAbsolute utility - has bugfixes for subdirectory handling and deduplication - includes new utilities for transforming urls in markdown and mobiledoc
2019-10-02 15:06:40 +03:00
vfile-location@^2.0.0:
version "2.0.5"
resolved "https://registry.yarnpkg.com/vfile-location/-/vfile-location-2.0.5.tgz#c83eb02f8040228a8d2b3f10e485be3e3433e0a2"
integrity sha512-Pa1ey0OzYBkLPxPZI3d9E+S4BmvfVwNAAXrrqGbwTVXWaX2p9kM1zZ+n35UtVM06shmWKH4RPRN8KI80qE3wNQ==
vfile-message@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/vfile-message/-/vfile-message-2.0.1.tgz#951881861c22fc1eb39f873c0b93e336a64e8f6d"
integrity sha512-KtasSV+uVU7RWhUn4Lw+wW1Zl/nW8JWx7JCPps10Y9JRRIDeDXf8wfBLoOSsJLyo27DqMyAi54C6Jf/d6Kr2Bw==
dependencies:
"@types/unist" "^2.0.2"
unist-util-stringify-position "^2.0.0"
vfile@^4.0.0:
version "4.0.1"
resolved "https://registry.yarnpkg.com/vfile/-/vfile-4.0.1.tgz#fc3d43a1c71916034216bf65926d5ee3c64ed60c"
integrity sha512-lRHFCuC4SQBFr7Uq91oJDJxlnftoTLQ7eKIpMdubhYcVMho4781a8MWXLy3qZrZ0/STD1kRiKc0cQOHm4OkPeA==
dependencies:
"@types/unist" "^2.0.0"
is-buffer "^2.0.0"
replace-ext "1.0.0"
unist-util-stringify-position "^2.0.0"
vfile-message "^2.0.0"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
video-extensions@~1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/video-extensions/-/video-extensions-1.1.0.tgz#eaa86b45f29a853c2b873e9d8e23b513712997d6"
integrity sha1-6qhrRfKahTwrhz6djiO1E3Epl9Y=
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
w3c-hr-time@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/w3c-hr-time/-/w3c-hr-time-1.0.2.tgz#0a89cdf5cc15822df9c360543676963e0cc308cd"
integrity sha512-z8P5DvDNjKDoFIHK7q8r8lackT6l+jo/Ye3HOle7l9nICP9lf1Ci25fy9vHd0JOWewkIFzXIEig3TdKT7JQ5fQ==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
Update dependency @tryghost/html-to-mobiledoc to v0.6.5
2020-03-27 02:17:01 +03:00
browser-process-hrtime "^1.0.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
w3c-xmlserializer@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/w3c-xmlserializer/-/w3c-xmlserializer-2.0.0.tgz#3e7104a05b75146cc60f564380b7f683acf1020a"
integrity sha512-4tzD0mF8iSiMiNs30BiLO3EpfGLZUT2MSX/G+o7ZywDzliWQ3OPtTZ0PTC3B3ca1UAf4cJMHB+2Bf56EriJuRA==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
xml-name-validator "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
walkdir@^0.0.11:
version "0.0.11"
resolved "https://registry.yarnpkg.com/walkdir/-/walkdir-0.0.11.tgz#a16d025eb931bd03b52f308caed0f40fcebe9532"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-oW0CXrkxvQO1LzCMrtD0D86+lTI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
web-resource-inliner@^4.3.3:
version "4.3.4"
resolved "https://registry.yarnpkg.com/web-resource-inliner/-/web-resource-inliner-4.3.4.tgz#07e1b4bcbcbee1021251b018e902bac5713f1be0"
integrity sha512-agVAgRhOOi4GVlvKK34oM23tDgH8390HfLnZY2HZl8OFBwKNvUJkH7t89AT2iluQP8w9VHAAKX6Z8EN7/9tqKA==
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
dependencies:
async "^3.1.0"
chalk "^2.4.2"
datauri "^2.0.0"
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
htmlparser2 "^4.0.0"
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
lodash.unescape "^4.0.1"
Update dependency juice to v6 (#11429)
2019-12-16 07:55:32 +03:00
request "^2.88.0"
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
safer-buffer "^2.1.2"
valid-data-url "^2.0.0"
xtend "^4.0.2"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
webidl-conversions@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/webidl-conversions/-/webidl-conversions-5.0.0.tgz#ae59c8a00b121543a2acc65c0434f57b0fc11aff"
integrity sha512-VlZwKPCkYKxQgeSbH5EyngOmRp7Ww7I9rQLERETtf5ofd9pGeswWiOtogpEO850jziPRarreGxn5QIiTqpb2wA==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Updated Ghost-SDK packages no issue
2020-04-03 12:43:35 +03:00
webidl-conversions@^6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/webidl-conversions/-/webidl-conversions-6.0.0.tgz#ff41d921371f43e772dba311b146ab6c0ef0ead4"
integrity sha512-jTZAeJnc6D+yAOjygbJOs33kVQIk5H6fj9SFDOhIKjsf9HiAzL/c+tAJsc8ASWafvhNkH+wJZms47pmajkhatA==
🔥 remove gulp (#8159) * remove gulpfile * remove gulp dependencies * Update README.md
2017-03-14 17:20:53 +03:00
websocket-driver@>=0.5.1:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "0.7.3"
resolved "https://registry.yarnpkg.com/websocket-driver/-/websocket-driver-0.7.3.tgz#a2d4e0d4f4f116f1e6297eba58b05d430100e9f9"
integrity sha512-bpxWlvbbB459Mlipc5GBzzZwhoZgGEZLuqPaR0INBGnPAY1vdBX6hPnoFXiw+3yWxDuHyQjO2oXTMyS8A5haFg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Lock file maintenance
2019-08-01 08:14:51 +03:00
http-parser-js ">=0.4.0 <0.4.11"
safe-buffer ">=5.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
websocket-extensions ">=0.1.1"
websocket-extensions@>=0.1.1:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "0.1.3"
resolved "https://registry.yarnpkg.com/websocket-extensions/-/websocket-extensions-0.1.3.tgz#5d2ff22977003ec687a4b87073dfbbac146ccf29"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-nqHUnMXmBzT0w570r2JpJxfiSD1IzoI+HGVdd3aZ0yNi3ngvQ4jv1dtHt5VGxfI2yj5yqImPhOK4vmIh2xMbGg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
whatwg-encoding@^1.0.5:
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
version "1.0.5"
resolved "https://registry.yarnpkg.com/whatwg-encoding/-/whatwg-encoding-1.0.5.tgz#5abacf777c32166a51d085d6b4f3e7d27113ddb0"
integrity sha512-b5lim54JOPN9HtzvK9HFXvBma/rnfFeqsic0hSpjtDbVxR3dJKLc+KB4V6GgiGOvl7CY/KNh8rxSo9DKQrnUEw==
dependencies:
iconv-lite "0.4.24"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
whatwg-mimetype@^2.3.0:
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
version "2.3.0"
resolved "https://registry.yarnpkg.com/whatwg-mimetype/-/whatwg-mimetype-2.3.0.tgz#3d4b1e0312d2079879f826aff18dbeeca5960fbf"
integrity sha512-M4yMwr6mAnQz76TbJm914+gPpB/nCwvZbJU28cUD6dR004SAxDLOOSUaB1JDRqLtaOV/vi0IC5lEAGFgrjGv/g==
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
whatwg-url@^8.0.0:
version "8.0.0"
resolved "https://registry.yarnpkg.com/whatwg-url/-/whatwg-url-8.0.0.tgz#37f256cb746398e19b107bd6ef820b4ae2d15871"
integrity sha512-41ou2Dugpij8/LPO5Pq64K5q++MnRCBpEHvQr26/mArEKTkCV5aoXIqyhuYtE0pkqScXwhf2JP57rkRTYM29lQ==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
lodash.sortby "^4.7.0"
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
tr46 "^2.0.0"
webidl-conversions "^5.0.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
which-module@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/which-module/-/which-module-2.0.0.tgz#d9ef07dce77b9902b8a3a8fa4b31c3e3f7e6e87a"
integrity sha1-2e8H3Od7mQK4o6j6SzHD4/fm6Ho=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
which-pm-runs@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/which-pm-runs/-/which-pm-runs-1.0.0.tgz#670b3afbc552e0b55df6b7780ca74615f23ad1cb"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-Zws6+8VS4LVd9rd4DKdGFfI60cs=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Update dependency grunt-contrib-compress to v1.6.0 (#11293)
2019-10-30 18:38:32 +03:00
which@1.3.1, which@^1.2.14, which@^1.2.9, which@~1.3.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.3.1"
resolved "https://registry.yarnpkg.com/which/-/which-1.3.1.tgz#a45043d54f5805316da8d62f9f50918d3da70b0a"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-HxJdYWq1MTIQbJ3nw0cqssHoTNU267KlrDuGZ1WYlxDStUtKUhOaJmh112/TZmHxxUfuJqPXSOm7tDyas0OSIQ==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
isexe "^2.0.0"
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
whoops@~4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/whoops/-/whoops-4.1.0.tgz#f42e51514c7af19a9491a44cabf2712292c6a8e1"
integrity sha512-42soctqvFs9FaU1r4ZadCy2F6A9dUc4SN3ud+tbDEdmyZDTeYBgKKqtIdo6NiQlnZnJegWRCyKLk2edYH9DsHA==
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
dependencies:
Update dependency metascraper to v5.8.13
2019-12-23 03:17:46 +03:00
clean-stack "~2.2.0"
mimic-fn "~3.0.0"
Added support for bookmark card (#11024) requires https://github.com/TryGhost/Ghost-Admin/pull/1293 - updates `oembed` endpoint behaviour - if an oembed provider is not found then we use `metascraper` to populate a metadata object - when metadata is returned rather than an oembed response the payload will look like this: ```json { "url": "...", "type": "bookmark", "metadata": { "url": "...", "title": "...", "description": "...", "author": "...", "publisher": "...", "thumbnail": "...", "icon": "..." } } ``` - adds a `bookmark` card which generates output for the bookmark card: ```html <figure class="kg-card kg-bookmark-card"> <a href="[URL]" class="kg-bookmark-container"> <div class="kg-bookmark-content"> <div class="kg-bookmark-title">[TITLE]</div> <div class="kg-bookmark-description">[DESCRIPTION]</div> <div class="kg-bookmark-metadata"> <img src="[ICON]" class="kg-bookmark-icon"> <span class="kg-bookmark-author">[AUTHOR]</span> <span class="kg-bookmark-publisher">[PUBLISHER]</span> </div> </div> <div class="kg-bookmark-thumbnail"> <img src="[THUMBNAIL]"> </div> </a> </figure> ``` - if a particular bit of data does not exist then the associated html element will not be present
2019-08-27 17:01:02 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
wide-align@1.1.3, wide-align@^1.1.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/wide-align/-/wide-align-1.1.3.tgz#ae074e6bdc0c14a431e804e624549c633b000457"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha512-QGkOQc8XL6Bt5PwnsExKBPuMKBxnGxWWW3fU55Xt4feHozMUhdUMaBCk290qpm/wG5u/RSKzwdAC4i51YigihA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
string-width "^1.0.2 || 2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 21:07:33 +03:00
window-size@^0.1.4:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.1.4"
resolved "https://registry.yarnpkg.com/window-size/-/window-size-0.1.4.tgz#f8e1aa1ee5a53ec5bf151ffa09742a6ad7697876"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-+OGqHuWlPsW/FR/6CXQqatdpeHY=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
with-callback@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/with-callback/-/with-callback-1.0.2.tgz#a09629b9a920028d721404fb435bdcff5c91bc21"
integrity sha1-oJYpuakgAo1yFAT7Q1vc/1yRvCE=
Update Test & linting packages
2020-02-03 16:44:38 +03:00
word-wrap@~1.2.3:
version "1.2.3"
resolved "https://registry.yarnpkg.com/word-wrap/-/word-wrap-1.2.3.tgz#610636f6b1f703891bd34771ccb17fb93b47079c"
integrity sha512-Hz/mrNwitNRh/HUAtM/VT/5VH+ygD6DV7mYKZAtHOrbs8U7lvPS6xf7EJKMF0uW1KJCl0H701g3ZGus+muE5vQ==
Update dependency express-hbs to v2.3.3
2020-04-06 18:42:24 +03:00
wordwrap@^1.0.0, wordwrap@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/wordwrap/-/wordwrap-1.0.0.tgz#27584810891456a4171c8d0226441ade90cbcaeb"
integrity sha1-J1hIEIkUVqQXHI0CJkQa3pDLyus=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
wrap-ansi@^2.0.0:
version "2.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/wrap-ansi/-/wrap-ansi-2.1.0.tgz#d8fc3d284dd05794fe84973caecdd1cf824fdd85"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-2Pw9KE3QV5T+hJc8rs3Rz4JP3YU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
string-width "^1.0.1"
strip-ansi "^3.0.1"
Update dependency mocha to v6 (#11171)
2019-09-30 11:31:11 +03:00
wrap-ansi@^5.1.0:
version "5.1.0"
resolved "https://registry.yarnpkg.com/wrap-ansi/-/wrap-ansi-5.1.0.tgz#1fd1f67235d5b6d0fee781056001bfb694c03b09"
integrity sha512-QC1/iN/2/RPVJ5jYK8BGttj5z83LmSKmvbvrXPNCLZSEb32KKVDJDl/MOt2N01qU2H/FkzEa9PKto1BqDjtd7Q==
dependencies:
ansi-styles "^3.2.0"
string-width "^3.0.0"
strip-ansi "^5.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
wrappy@1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/wrappy/-/wrappy-1.0.2.tgz#b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-tSQ9jz7BqjXxNkYFvA0QNuMKtp8=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
write@1.0.3:
version "1.0.3"
resolved "https://registry.yarnpkg.com/write/-/write-1.0.3.tgz#0800e14523b923a387e415123c865616aae0f5c3"
integrity sha512-/lg70HAjtkUgWPVZhZcm+T4hkL8Zbtp1nFNOn3lRrxnlv50SRBv7cR7RqR+GMsd3hUXy9hWBo4CHTbFTcOYwig==
dependencies:
mkdirp "^0.5.1"
Updated Ghost-SDK packages no issue
2020-04-03 12:43:35 +03:00
ws@^7.2.3:
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
version "7.2.3"
resolved "https://registry.yarnpkg.com/ws/-/ws-7.2.3.tgz#a5411e1fb04d5ed0efee76d26d5c46d830c39b46"
integrity sha512-HTDl9G9hbkNDk98naoR/cHDws7+EyYMOdL1BmjsZXRUjf7d+MficC4B7HLUPlSiho0vg+CWKrGIt/VJBd1xunQ==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
xml-name-validator@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/xml-name-validator/-/xml-name-validator-3.0.0.tgz#6ae73e06de4d8c6e47f9fb181f78d648ad457c6a"
integrity sha512-A5CUptxDsvxKJEU3yO6DuWBSJz/qizqzJKOMIfUJHETbBw/sFaDxgd6fxm1ewUaM0jZ444Fc5vC5ROYurg/4Pw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
xml2js@0.2.6:
version "0.2.6"
resolved "https://registry.yarnpkg.com/xml2js/-/xml2js-0.2.6.tgz#d209c4e4dda1fc9c452141ef41c077f5adfdf6c4"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-0gnE5N2h/JxFIUHvQcB39a399sQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
sax "0.4.2"
xml@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/xml/-/xml-1.0.1.tgz#78ba72020029c5bc87b8a81a3cfcd74b4a2fc1e5"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-eLpyAgApxbyHuKgaPPzXS0ovweU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
xmlbuilder@0.4.2:
version "0.4.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/xmlbuilder/-/xmlbuilder-0.4.2.tgz#1776d65f3fdbad470a08d8604cdeb1c4e540ff83"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-F3bWXz/brUcKCNhgTN6xxOVA/4M=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency @tryghost/html-to-mobiledoc to v0.6.4 no issue - includes fixes for html->mobiledoc conversion - fixes multiple spaces appearing in text content if source content is indented and has newlines - fixes crash if source content has `<li>` elements containing headers - fixes crash if source content has non-`<li>` top-level elements inside a list - fixes `blockquote>p` markup in source content losing blockquote styling
2020-03-12 21:57:06 +03:00
xmlchars@^2.2.0:
Lock file maintenance (#11061)
2019-09-10 11:45:45 +03:00
version "2.2.0"
resolved "https://registry.yarnpkg.com/xmlchars/-/xmlchars-2.2.0.tgz#060fe1bcb7f9c76fe2a17db86a9bc3ab894210cb"
integrity sha512-JZnDKK8B0RCDw84FNdDAIpZK+JuJw+s7Lz8nksI7SIuU3UXJJslUthsi+uWBUYOwPFwW7W7PRLRfUKpxjtjFCw==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
xoauth2@~0.1.8:
version "0.1.8"
resolved "https://registry.yarnpkg.com/xoauth2/-/xoauth2-0.1.8.tgz#b916ff10ecfb54320f16f24a3e975120653ab0d2"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-uRb/EOz7VDIPFvJKPpdRIGU6sNI=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
xregexp@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/xregexp/-/xregexp-2.0.0.tgz#52a63e56ca0b84a7f3a5f3d61872f126ad7a5943"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-UqY+VsoLhKfzpfPWGHLxJq16WUM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added basic HTML template support to MEGA (#11336) no issue - Sends formatted email to members - Added css inlining support for MEGA template - Migrated MEGA service to use API serializers - Service needs to be compliant with the API to be able to serve absolute URLs for resources like images - Fixed send email check for previously sent mails
2019-11-04 13:53:42 +03:00
xtend@^4.0.0, xtend@^4.0.1, xtend@^4.0.2, xtend@~4.0.1:
Lock file maintenance
2019-08-01 08:14:51 +03:00
version "4.0.2"
resolved "https://registry.yarnpkg.com/xtend/-/xtend-4.0.2.tgz#bb72779f5fa465186b1f438f674fa347fdb5db54"
integrity sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
y18n@^3.2.0:
version "3.2.1"
resolved "https://registry.yarnpkg.com/y18n/-/y18n-3.2.1.tgz#6d15fba884c08679c0d77e88e7759e811e07fa41"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-bRX7qITAhnnA136I53WegR4H+kE=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency mocha to v6 (#11171)
2019-09-30 11:31:11 +03:00
y18n@^4.0.0:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
version "4.0.0"
resolved "https://registry.yarnpkg.com/y18n/-/y18n-4.0.0.tgz#95ef94f85ecc81d007c264e190a120f0a3c8566b"
integrity sha512-r9S/ZyXu/Xu9q1tYlpsLIsa3EeLXXk0VwlxqTcFRfg9EhMW+17kbt9G0NrgCmhGb5vT2hyhJZLfDGx+7+5Uj/w==
Implemented externally verifiable identity tokens no-issue This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing a public key, and one on the canary api /identities, which allows the Owner user to fetch a JWT. This token can then be used by external services to verify the domain * Added ghost_{public,private}_key settings This key can be used for generating tokens for communicating with external services on behalf of Ghost * Added .well-known directory to /ghost/.well-known We add a jwks.json file to the .well-known directory which exposes a public JWK which can be used to verify the signatures of JWT's created by Ghost This is added to the /ghost/ path so that it can live on the admin domain, rather than the frontend. This is because most of its uses/functions will be in relation to the admin domain. * Improved settings model tests This removes hardcoded positions in favour of testing that a particular event wasn't emitted which is less brittle and more precise about what's being tested * Fixed parent app unit tests for well-known This updates the parent app unit tests to check that the well-known route is mounted. We all change proxyquire to use `noCallThru` which ensures that the ubderlying modules are not required. This stops the initialisation logic in ./well-known erroring in tests https://github.com/thlorenz/proxyquire/issues/215 * Moved jwt signature to a separate 'token' propery This structure corresponds to other resources and allows to exptend with additional properties in future if needed
2020-01-20 14:45:58 +03:00
yallist@^2.0.0, yallist@^2.1.2:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/yallist/-/yallist-2.1.2.tgz#1c11f9218f076089a47dd512f93c6699a6a81d52"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-HBH5IY8HYImkfdUS+TxmmaaoHVI=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Installed mailgun-js@0.22.0 no-issue
2019-11-07 11:26:17 +03:00
yallist@^3.0.0, yallist@^3.0.2, yallist@^3.0.3:
Lock file maintenance (#11175)
2019-10-07 10:23:34 +03:00
version "3.1.1"
resolved "https://registry.yarnpkg.com/yallist/-/yallist-3.1.1.tgz#dbb7daf9bfd8bac9ab45ebf602b8cbad0d5d08fd"
integrity sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency sharp to v0.23.2
2019-11-04 03:34:39 +03:00
yallist@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/yallist/-/yallist-4.0.0.tgz#9bb92790d9c0effec63be73519e11a35019a3a72"
integrity sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==
Update Test & linting packages
2020-03-21 02:17:28 +03:00
yargs-parser@13.1.2, yargs-parser@^13.1.2:
version "13.1.2"
resolved "https://registry.yarnpkg.com/yargs-parser/-/yargs-parser-13.1.2.tgz#130f09702ebaeef2650d54ce6e3e5706f7a4fb38"
integrity sha512-3lbsNRf/j+A4QuSZfDRA7HRSfWrzO0YjqTJd5kjAq37Zep1CEgaYmrH9Q3GwPiB9cHyd1Y1UwggGhJGoxipbzg==
dependencies:
camelcase "^5.0.0"
decamelize "^1.2.0"
yargs-parser@^13.1.1:
Update dependency mocha to v6 (#11171)
2019-09-30 11:31:11 +03:00
version "13.1.1"
resolved "https://registry.yarnpkg.com/yargs-parser/-/yargs-parser-13.1.1.tgz#d26058532aa06d365fe091f6a1fc06b2f7e5eca0"
integrity sha512-oVAVsHz6uFrg3XQheFII8ESO2ssAf9luWuAd6Wexsu4F3OtIW0o8IribPXYrD4WC24LWtPrJlGy87y5udK+dxQ==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
dependencies:
camelcase "^5.0.0"
decamelize "^1.2.0"
Update dependency mocha to v6 (#11171)
2019-09-30 11:31:11 +03:00
yargs-unparser@1.6.0:
version "1.6.0"
resolved "https://registry.yarnpkg.com/yargs-unparser/-/yargs-unparser-1.6.0.tgz#ef25c2c769ff6bd09e4b0f9d7c605fb27846ea9f"
integrity sha512-W9tKgmSn0DpSatfri0nx52Joq5hVXgeLiqR/5G0sZNDoLZFOr/xjBUDcShCOGNsBnEMNo1KAMBkTej1Hm62HTw==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
dependencies:
flat "^4.1.0"
Update dependency mocha to v6 (#11171)
2019-09-30 11:31:11 +03:00
lodash "^4.17.15"
yargs "^13.3.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
Update Test & linting packages
2020-03-21 02:17:28 +03:00
yargs@13.3.2:
version "13.3.2"
resolved "https://registry.yarnpkg.com/yargs/-/yargs-13.3.2.tgz#ad7ffefec1aa59565ac915f82dccb38a9c31a2dd"
integrity sha512-AX3Zw5iPruN5ie6xGRIDgqkT+ZhnRlZMLMHAs8tg7nRruy2Nb+i5o9bwghAogtM08q1dpr2LVoS8KSTMYpWXUw==
dependencies:
cliui "^5.0.0"
find-up "^3.0.0"
get-caller-file "^2.0.1"
require-directory "^2.1.1"
require-main-filename "^2.0.0"
set-blocking "^2.0.0"
string-width "^3.0.0"
which-module "^2.0.0"
y18n "^4.0.0"
yargs-parser "^13.1.2"
yargs@^13.3.0:
Update dependency mocha to v6 (#11171)
2019-09-30 11:31:11 +03:00
version "13.3.0"
resolved "https://registry.yarnpkg.com/yargs/-/yargs-13.3.0.tgz#4c657a55e07e5f2cf947f8a366567c04a0dedc83"
integrity sha512-2eehun/8ALW8TLoIl7MVaRUrg+yCnenu8B4kBlRxj3GJGDKU1Og7sMXPNm1BYyM1DOJmTZ4YeN/Nwxv+8XJsUA==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
dependencies:
Update dependency mocha to v6 (#11171)
2019-09-30 11:31:11 +03:00
cliui "^5.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
find-up "^3.0.0"
get-caller-file "^2.0.1"
require-directory "^2.1.1"
require-main-filename "^2.0.0"
set-blocking "^2.0.0"
string-width "^3.0.0"
which-module "^2.0.0"
y18n "^4.0.0"
Update dependency mocha to v6 (#11171)
2019-09-30 11:31:11 +03:00
yargs-parser "^13.1.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
🔥 remove gulp (#8159) * remove gulpfile * remove gulp dependencies * Update README.md
2017-03-14 17:20:53 +03:00
yargs@^3.19.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "3.32.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/yargs/-/yargs-3.32.0.tgz#03088e9ebf9e756b69751611d2a5ef591482c995"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-AwiOnr+edWtpdRYR0qXvWRSCyZU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
camelcase "^2.0.1"
cliui "^3.0.3"
decamelize "^1.1.1"
os-locale "^1.4.0"
string-width "^1.0.1"
window-size "^0.1.4"
y18n "^3.2.0"
Update dependency @tryghost/zip to v1
2020-04-08 14:57:26 +03:00
yauzl@^2.10.0:
version "2.10.0"
resolved "https://registry.yarnpkg.com/yauzl/-/yauzl-2.10.0.tgz#c7eb17c93e112cb1086fa6d8e51fb0667b79a5f9"
integrity sha1-x+sXyT4RLLEIb6bY5R+wZnt5pfk=
dependencies:
buffer-crc32 "~0.2.3"
fd-slicer "~1.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
zip-stream@^1.1.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/zip-stream/-/zip-stream-1.2.0.tgz#a8bc45f4c1b49699c6b90198baacaacdbcd4ba04"
Lock file maintenance
2019-08-01 08:14:51 +03:00
integrity sha1-qLxF9MG0lpnGuQGYuqyqzbzUugQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
archiver-utils "^1.3.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
compress-commons "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash "^4.8.0"
readable-stream "^2.0.0"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
Update dependency archiver to v3.1.1 (#10981)
2019-08-06 11:16:08 +03:00
zip-stream@^2.1.2:
version "2.1.2"
resolved "https://registry.yarnpkg.com/zip-stream/-/zip-stream-2.1.2.tgz#841efd23214b602ff49c497cba1a85d8b5fbc39c"
integrity sha512-ykebHGa2+uzth/R4HZLkZh3XFJzivhVsjJt8bN3GvBzLaqqrUdRacu+c4QtnUgjkkQfsOuNE1JgLKMCPNmkKgg==
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
dependencies:
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
archiver-utils "^2.1.0"
Update dependency archiver to v3.1.1 (#10981)
2019-08-06 11:16:08 +03:00
compress-commons "^2.1.1"
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
readable-stream "^3.4.0"
Reference in New Issue Copy Permalink