2014-02-09 19:29:23 +04:00
|
|
|
{
|
2015-05-06 02:54:23 +03:00
|
|
|
"name": "ghost",
|
2019-04-30 12:10:02 +03:00
|
|
|
"version": "2.21.1",
|
2017-07-27 11:26:31 +03:00
|
|
|
"description": "The professional publishing platform",
|
2015-05-06 02:54:23 +03:00
|
|
|
"author": "Ghost Foundation",
|
2018-07-21 00:42:39 +03:00
|
|
|
"homepage": "https://ghost.org",
|
2015-05-06 02:54:23 +03:00
|
|
|
"keywords": [
|
|
|
|
|
"ghost",
|
|
|
|
|
"blog",
|
2018-12-03 14:04:05 +03:00
|
|
|
"cms",
|
|
|
|
|
"headless",
|
|
|
|
|
"content",
|
|
|
|
|
"markdown"
|
2015-05-06 02:54:23 +03:00
|
|
|
],
|
|
|
|
|
"repository": {
|
|
|
|
|
"type": "git",
|
|
|
|
|
"url": "git://github.com/TryGhost/Ghost.git"
|
|
|
|
|
},
|
|
|
|
|
"bugs": "https://github.com/TryGhost/Ghost/issues",
|
|
|
|
|
"contributors": "https://github.com/TryGhost/Ghost/graphs/contributors",
|
2015-05-26 07:00:32 +03:00
|
|
|
"license": "MIT",
|
2015-05-06 02:54:23 +03:00
|
|
|
"main": "./core/index",
|
|
|
|
|
"scripts": {
|
|
|
|
|
"start": "node index",
|
2017-08-09 19:20:02 +03:00
|
|
|
"dev": "DEBUG=ghost:* grunt dev",
|
2019-03-11 18:43:47 +03:00
|
|
|
"test": "grunt validate",
|
|
|
|
|
"ci": "grunt validate --verbose",
|
|
|
|
|
"ci:regression": "grunt test-regression --verbose",
|
2018-04-09 14:43:16 +03:00
|
|
|
"setup": "yarn install && knex-migrator init && grunt symlink && grunt init || true",
|
2019-02-11 15:26:06 +03:00
|
|
|
"lint:server": "eslint --ignore-path .eslintignore 'core/server/**/*.js' 'core/*.js' '*.js'",
|
|
|
|
|
"lint:test": "eslint -c core/test/.eslintrc.json --ignore-path core/test/.eslintignore 'core/test/**/*.js'",
|
|
|
|
|
"lint": "yarn lint:server && yarn lint:test",
|
2019-03-11 18:43:47 +03:00
|
|
|
"posttest": "yarn lint",
|
2019-04-23 17:51:30 +03:00
|
|
|
"fixmodulenotdefined": "yarn cache clean && cd core/client && rm -rf node_modules tmp dist && yarn && cd ../../",
|
|
|
|
|
"postinstall": "cp node_modules/@tryghost/members-theme-bindings/build/members-theme-bindings.js core/server/public/"
|
2015-05-06 02:54:23 +03:00
|
|
|
},
|
|
|
|
|
"engines": {
|
2018-11-07 17:43:01 +03:00
|
|
|
"node": "^6.9.0 || ^8.9.0 || ^10.13.0",
|
2018-07-27 16:18:42 +03:00
|
|
|
"cli": "^1.9.0"
|
2015-05-06 02:54:23 +03:00
|
|
|
},
|
|
|
|
|
"dependencies": {
|
🐛 Fixed all known filter limitations (#10159)
refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16
- removed GQL dependency
- replaced GQL with our brand new NQL implementation
- fixed all known filter limitations
- GQL suffered from some underlying filter bugs, which NQL tried to fix
- the bugs were mostly in how we query the database for relation filtering
- the underlying problem was caused by a too simple implementation of querying the relations
- mongo-knex has implemented a more robust and complex filtering mechanism for relations
- replaced logic in our bookshelf filter plugin
- we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex.
NQL: https://github.com/NexesJS/NQL
mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
|
|
|
"@nexes/nql": "0.2.1",
|
2019-04-17 12:39:25 +03:00
|
|
|
"@tryghost/helpers": "1.1.2",
|
Updated theme layer to use members-ssr (#10676)
* Removed support for cookies in members auth middleware
no-issue
The members middleware will no longer be supporting cookies, the cookie
will be handled by a new middleware specific for serverside rendering,
more informations can be found here:
https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5
* Removed members auth middleware from site app
no-issue
The site app no longer needs the members auth middleware as it doesn't
support cookies, and will be replaced by ssr specific middleware.
https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5
* Added comment for session_secret setting
no-issue
We are going to have multiple concepts of sessions, so adding a comment
here to be specific that this is for the Ghost Admin client
* Added theme_session_secret setting dynamic default
no-issue
Sessions for the theme layer will be signed, so we generate a random hex
string to use as a signing key
* Added getPublicConfig method
* Replaced export of httpHandler with POJO apiInstance
no-issue
This is mainly to reduce the public api, so it's easier to document.
* Renamed memberUserObject -> members
no-issue
Simplifies the interface, and is more inline with what we would want to export as an api library.
* Removed use of require options inside members
no-issue
This was too tight of a coupling between Ghost and Members
* Simplified apiInstance definition
no-issue
* Added getMember method to members api
* Added MembersSSR instance to members service
* Wired up routes for members ssr
* Updated members auth middleware to use getPublicConfig
* Removed publicKey static export from members service
* Used real session secret
no-issue
* Added DELETE /members/ssr handler
no-issue
This allows users to log out of the theme layer
* Fixed missing code property
no-issue
Ignition uses the statusCode property to forward status codes to call sites
* Removed superfluous error middleware
no-issue
Before we used generic JWT middleware which would reject, now the
middleware catches it's own error and doesn't error, thus this
middleware is unecessary.
* Removed console.logs
no-issue
* Updated token expirty to hardcoded 20 minutes
no-issue
This returns to our previous state of using short lived tokens, both for
security and simplicity.
* Removed hardcoded default member settings
no-issue
This is no longer needed, as defaults are in default-settings.json
* Removed stripe from default payment processor
no-issue
* Exported `getSiteUrl` method from url utils
no-issue
This keeps inline with newer naming conventions
* Updated how audience access control works
no-issue
Rather than being passed a function, members api now receives an object
which describes which origins have access to which audiences, and how
long those tokens should be allowed to work for. It also allows syntax
for default tokens where audience === origin requesting it. This can be
set to undefined or null to disable this functionality.
{
"http://site.com": {
"http://site.com": {
tokenLength: '5m'
},
"http://othersite.com": {
tokenLength: '1h'
}
},
"*": {
tokenLength: '30m'
}
}
* Updated members service to use access control feature
no-issue
This also cleans up a lot of unecessary variable definitions, and some
other minor cleanups.
* Added status code to auth pages html response
no-issue
This was missing, probably default but better to be explicit
* Updated gateway to have membersApiUrl from config
no-issue
Previously we were parsing the url, this was not very safe as we can
have Ghost hosted on a subdomain, and this would have failed.
* Added issuer to public config for members
no-issue
This can be used to request SSR tokens in the client
* Fixed path for gateway bundle
no-issue
* Updated settings model tests
no-issue
* Revert "Removed stripe from default payment processor"
This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845.
* Revert "Removed hardcoded default member settings"
This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a.
* Installed @tryghost/members-ssr
* Fixed tests for settings model
2019-04-16 17:50:25 +03:00
|
|
|
"@tryghost/members-ssr": "^0.1.1",
|
2019-04-23 17:49:36 +03:00
|
|
|
"@tryghost/members-theme-bindings": "^0.1.0",
|
2019-02-08 13:40:58 +03:00
|
|
|
"ajv": "6.8.1",
|
2018-10-30 11:45:51 +03:00
|
|
|
"amperize": "0.3.8",
|
2019-01-21 15:36:46 +03:00
|
|
|
"analytics-node": "3.3.0",
|
2019-01-21 16:06:46 +03:00
|
|
|
"archiver": "3.0.0",
|
2017-02-08 20:54:16 +03:00
|
|
|
"bcryptjs": "2.4.3",
|
2019-01-21 15:33:20 +03:00
|
|
|
"bluebird": "3.5.3",
|
2018-06-04 16:47:33 +03:00
|
|
|
"body-parser": "1.18.3",
|
2019-01-21 23:53:11 +03:00
|
|
|
"bookshelf": "0.14.2",
|
2019-04-30 18:11:40 +03:00
|
|
|
"bookshelf-relations": "1.1.1",
|
2019-01-27 20:29:40 +03:00
|
|
|
"brute-knex": "3.0.1",
|
2018-10-30 11:45:51 +03:00
|
|
|
"bson-objectid": "1.2.4",
|
2019-01-21 16:21:13 +03:00
|
|
|
"chalk": "2.4.2",
|
2016-09-19 14:32:40 +03:00
|
|
|
"cheerio": "0.22.0",
|
2018-10-30 11:45:51 +03:00
|
|
|
"compression": "1.7.3",
|
2015-06-03 14:15:11 +03:00
|
|
|
"connect-slashes": "1.3.1",
|
2018-12-10 12:24:42 +03:00
|
|
|
"cookie": "0.3.1",
|
2017-09-25 15:27:14 +03:00
|
|
|
"cookie-session": "1.3.2",
|
2019-01-21 15:33:20 +03:00
|
|
|
"cors": "2.8.5",
|
2019-01-21 16:40:30 +03:00
|
|
|
"csv-parser": "2.1.0",
|
2015-05-06 02:54:23 +03:00
|
|
|
"downsize": "0.0.8",
|
2018-10-30 11:45:51 +03:00
|
|
|
"express": "4.16.4",
|
2016-11-08 14:33:19 +03:00
|
|
|
"express-brute": "1.0.1",
|
2019-04-15 15:03:23 +03:00
|
|
|
"express-hbs": "1.1.1",
|
2018-12-10 12:24:42 +03:00
|
|
|
"express-jwt": "5.3.1",
|
2018-08-31 13:02:39 +03:00
|
|
|
"express-query-boolean": "2.0.0",
|
2018-10-02 11:35:23 +03:00
|
|
|
"express-session": "1.15.6",
|
2018-06-04 16:47:33 +03:00
|
|
|
"extract-zip": "1.6.7",
|
2017-05-10 10:51:54 +03:00
|
|
|
"fs-extra": "3.0.1",
|
2019-04-16 14:02:11 +03:00
|
|
|
"ghost-ignition": "3.1.0",
|
Bump dependencies
no issue
bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig
rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
|
|
|
"ghost-storage-base": "0.0.3",
|
2015-10-14 12:29:08 +03:00
|
|
|
"glob": "5.0.15",
|
2019-01-15 23:35:46 +03:00
|
|
|
"got": "8.3.2",
|
2019-04-15 15:23:43 +03:00
|
|
|
"gscan": "2.5.0",
|
2019-01-21 17:02:52 +03:00
|
|
|
"html-to-text": "4.0.0",
|
2018-06-25 19:43:08 +03:00
|
|
|
"image-size": "0.6.3",
|
2016-09-26 12:13:38 +03:00
|
|
|
"intl": "1.2.5",
|
2016-04-30 00:30:41 +03:00
|
|
|
"intl-messageformat": "1.3.0",
|
2019-01-21 15:33:20 +03:00
|
|
|
"js-yaml": "3.12.1",
|
2017-10-31 14:21:48 +03:00
|
|
|
"jsonpath": "1.0.0",
|
2019-01-21 15:33:20 +03:00
|
|
|
"jsonwebtoken": "8.4.0",
|
2018-12-10 12:24:42 +03:00
|
|
|
"keypair": "1.0.1",
|
2019-01-22 10:58:28 +03:00
|
|
|
"knex": "0.14.6",
|
2019-01-21 23:53:11 +03:00
|
|
|
"knex-migrator": "3.2.5",
|
2018-10-30 11:45:51 +03:00
|
|
|
"lodash": "4.17.11",
|
|
|
|
|
"markdown-it": "8.4.2",
|
replace custom showdown fork with markdown-it (#8451)
refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536
- replace custom showdown fork with markdown-it
- swaps showdown for markdown-it when rendering markdown
- match existing header ID behaviour
- allow headers without a space after the #s
- add duplicate header ID handling
- remove legacy markdown spec
- move markdown-it setup into markdown-converter util
- update mobiledoc specs to match markdown-it newline behaviour
- update data-generator HTML to match markdown-it newline behaviour
- fix Post "converts html to plaintext" test
- update rss spec to match markdown-it newline behaviour
- close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
|
|
|
"markdown-it-footnote": "3.0.1",
|
|
|
|
|
"markdown-it-lazy-headers": "0.1.3",
|
|
|
|
|
"markdown-it-mark": "2.0.0",
|
2017-03-14 21:07:33 +03:00
|
|
|
"mobiledoc-dom-renderer": "0.6.5",
|
2019-01-22 11:11:57 +03:00
|
|
|
"moment": "2.24.0",
|
2019-01-21 15:33:20 +03:00
|
|
|
"moment-timezone": "0.5.23",
|
2018-10-30 11:45:51 +03:00
|
|
|
"multer": "1.4.1",
|
|
|
|
|
"mysql": "2.16.0",
|
2018-01-02 14:08:32 +03:00
|
|
|
"nconf": "0.10.0",
|
2018-03-21 20:49:42 +03:00
|
|
|
"netjet": "1.3.0",
|
2018-12-10 12:24:42 +03:00
|
|
|
"node-jose": "1.1.0",
|
2015-05-06 02:54:23 +03:00
|
|
|
"nodemailer": "0.7.1",
|
2017-11-17 18:29:21 +03:00
|
|
|
"oauth2orize": "1.11.0",
|
2019-02-11 15:13:20 +03:00
|
|
|
"oembed-parser": "1.2.2",
|
2017-09-25 15:27:14 +03:00
|
|
|
"passport": "0.4.0",
|
2015-05-06 02:54:23 +03:00
|
|
|
"passport-http-bearer": "1.0.1",
|
|
|
|
|
"passport-oauth2-client-password": "0.1.2",
|
2016-04-21 12:44:58 +03:00
|
|
|
"path-match": "1.2.4",
|
2017-01-11 22:42:13 +03:00
|
|
|
"rss": "1.2.2",
|
2019-01-21 15:33:20 +03:00
|
|
|
"sanitize-html": "1.20.0",
|
2018-10-30 11:45:51 +03:00
|
|
|
"semver": "5.6.0",
|
2017-03-14 21:07:33 +03:00
|
|
|
"simple-dom": "0.3.2",
|
2018-10-30 11:45:51 +03:00
|
|
|
"simple-html-tokenizer": "0.5.7",
|
2019-02-07 12:41:39 +03:00
|
|
|
"stripe": "^6.22.0",
|
2015-12-08 14:01:49 +03:00
|
|
|
"unidecode": "0.1.8",
|
2018-07-02 13:28:30 +03:00
|
|
|
"uuid": "3.3.2",
|
2017-03-03 17:04:38 +03:00
|
|
|
"validator": "6.3.0",
|
2016-02-09 00:30:57 +03:00
|
|
|
"xml": "1.0.1"
|
2015-05-06 02:54:23 +03:00
|
|
|
},
|
|
|
|
|
"optionalDependencies": {
|
2019-02-25 06:25:56 +03:00
|
|
|
"@tryghost/html-to-mobiledoc": "0.2.4",
|
2019-01-21 15:33:20 +03:00
|
|
|
"sharp": "0.21.3",
|
|
|
|
|
"sqlite3": "4.0.6"
|
2015-05-06 02:54:23 +03:00
|
|
|
},
|
|
|
|
|
"devDependencies": {
|
Bumped major test dependencies (#10403)
refs #9389
- eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2
.0, nock@10.0.6, rewire@4.0.1
All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
|
|
|
"eslint": "5.12.1",
|
|
|
|
|
"eslint-plugin-ghost": "0.1.0",
|
2018-06-04 16:47:33 +03:00
|
|
|
"grunt": "1.0.3",
|
2016-04-06 23:07:55 +03:00
|
|
|
"grunt-bg-shell": "2.3.3",
|
2019-01-21 15:33:20 +03:00
|
|
|
"grunt-cli": "1.3.2",
|
Bumped major test dependencies (#10403)
refs #9389
- eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2
.0, nock@10.0.6, rewire@4.0.1
All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
|
|
|
"grunt-contrib-clean": "2.0.0",
|
2017-07-10 21:56:05 +03:00
|
|
|
"grunt-contrib-compress": "1.4.3",
|
2016-04-06 23:07:55 +03:00
|
|
|
"grunt-contrib-copy": "1.0.0",
|
2017-04-13 10:26:48 +03:00
|
|
|
"grunt-contrib-symlink": "^1.0.0",
|
Bumped major test dependencies (#10403)
refs #9389
- eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2
.0, nock@10.0.6, rewire@4.0.1
All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
|
|
|
"grunt-contrib-uglify": "4.0.0",
|
2018-06-04 16:47:33 +03:00
|
|
|
"grunt-contrib-watch": "1.1.0",
|
2017-04-10 12:30:21 +03:00
|
|
|
"grunt-cssnano": "2.1.0",
|
2018-03-21 20:49:42 +03:00
|
|
|
"grunt-express-server": "0.5.4",
|
Bumped major test dependencies (#10403)
refs #9389
- eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2
.0, nock@10.0.6, rewire@4.0.1
All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
|
|
|
"grunt-mocha-cli": "4.0.0",
|
|
|
|
|
"grunt-shell": "3.0.1",
|
2018-01-02 14:08:32 +03:00
|
|
|
"grunt-subgrunt": "1.3.0",
|
2015-05-28 18:16:09 +03:00
|
|
|
"grunt-update-submodules": "0.4.1",
|
2017-11-28 21:43:33 +03:00
|
|
|
"matchdep": "2.0.0",
|
Bumped major test dependencies (#10403)
refs #9389
- eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2
.0, nock@10.0.6, rewire@4.0.1
All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
|
|
|
"mocha": "5.2.0",
|
2019-01-21 15:33:20 +03:00
|
|
|
"mock-knex": "0.4.3",
|
Bumped major test dependencies (#10403)
refs #9389
- eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2
.0, nock@10.0.6, rewire@4.0.1
All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
|
|
|
"nock": "10.0.6",
|
2018-09-18 16:59:06 +03:00
|
|
|
"proxyquire": "2.1.0",
|
Bumped major test dependencies (#10403)
refs #9389
- eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2
.0, nock@10.0.6, rewire@4.0.1
All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
|
|
|
"rewire": "4.0.1",
|
2018-10-30 11:45:51 +03:00
|
|
|
"should": "13.2.3",
|
2017-04-04 11:12:37 +03:00
|
|
|
"should-http": "0.1.1",
|
2019-01-21 19:53:44 +03:00
|
|
|
"sinon": "7.2.3",
|
2019-01-21 15:33:20 +03:00
|
|
|
"supertest": "3.4.1",
|
2017-09-25 15:27:14 +03:00
|
|
|
"tmp": "0.0.33"
|
2015-05-06 02:54:23 +03:00
|
|
|
}
|
2014-02-09 19:29:23 +04:00
|
|
|
}
|
