TryGhost/Ghost
1
0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2024-12-16 20:43:01 +03:00
Code Issues Projects Releases Wiki Activity
d3b1f582ab
Ghost/package.json

165 lines
4.3 KiB
JSON
Raw Normal View History

Updated package.json to conform to npm standards fixes #1053 - fleshed out script object - added test and install package.json - updated contributing guide - updates travis.yml to leverage new npm start
2014-02-09 19:29:23 +04:00
{
Add editorconfig
2015-05-06 02:54:23 +03:00
"name": "ghost",
Version bump to 2.2.0
2018-10-02 23:57:14 +03:00
"version": "2.2.0",
Site description fixture update (#8763) No issue
2017-07-27 11:26:31 +03:00
"description": "The professional publishing platform",
Add editorconfig
2015-05-06 02:54:23 +03:00
"author": "Ghost Foundation",
Changed http to https links no issue - use https - replace broken links e.g. docs.ghost.org/themes
2018-07-21 00:42:39 +03:00
"homepage": "https://ghost.org",
Add editorconfig
2015-05-06 02:54:23 +03:00
"keywords": [
"ghost",
"blog",
"cms"
],
"repository": {
"type": "git",
"url": "git://github.com/TryGhost/Ghost.git"
},
"bugs": "https://github.com/TryGhost/Ghost/issues",
"contributors": "https://github.com/TryGhost/Ghost/graphs/contributors",
Update to use SPDX idetifier Per https://docs.npmjs.com/files/package.json#license. Removes warning on install.
2015-05-26 07:00:32 +03:00
"license": "MIT",
Add editorconfig
2015-05-06 02:54:23 +03:00
"main": "./core/index",
"scripts": {
"start": "node index",
🛠 Added `npm run dev` to run grunt dev w/ DEBUG on (#8861) no issue - Most of our other projects have `npm run dev` - In Ghost we use `grunt dev`, but I also want to have DEBUG turned on for development - `npm run dev` is a shortcut for these 2 things - Also cos I keep accidentally typing `npm run dev` anyway 😬
2017-08-09 19:20:02 +03:00
"dev": "DEBUG=ghost:* grunt dev",
📖 Update README installation instructions (#8175) - add contributing workflow link already - i would suggest we merge this PR if the workflow guide was reviewed
2017-03-23 19:02:21 +03:00
"test": "grunt validate --verbose",
Added `yarn lint` to scripts (#9558) no issue - added `yarn lint` to scripts in `package.json`, which runs the existing `grunt lint` task
2018-04-09 14:43:16 +03:00
"setup": "yarn install && knex-migrator init && grunt symlink && grunt init || true",
"lint": "grunt lint"
Add editorconfig
2015-05-06 02:54:23 +03:00
},
"engines": {
🔥 Drop Node v4 Support no issue - support ends today - see https://github.com/nodejs/Release - removed `use strict`
2018-04-30 13:33:36 +03:00
"node": "^6.9.0 || ^8.9.0",
Changed min cli engine version to 1.9 refs https://github.com/TryGhost/Ghost-CLI/issues/759 - to be able to install Ghost 2.0, you have to be on the version Ghost CLI 1.9.0 - 1.9.0 will add a proper support for migrating to a new major version
2018-07-27 16:18:42 +03:00
"cli": "^1.9.0"
Add editorconfig
2015-05-06 02:54:23 +03:00
},
"dependencies": {
✨Added advanced filtering to Dynamic Routing (#9757) refs #9601, refs #9742 - Upgraded NQL to 0.1.0 - The new version of NQL supports aliases e.g. `tag: tags.slug`, which makes it possible to define `filter=tag:support` - Furthermore, this allows us to support advanced filtering like tag:[a,b] - In dynamic routing, we use mingo via NQL which has a slightly different feature set to GQL in the API: - AND NOT, OR and other advanced logic combos DO work on joined tables - Counts are not yet supported - The Dynamic Routing beta docs should describe that API filtering and Dynamic Routing filtering is different
2018-08-03 14:15:16 +03:00
"@nexes/nql": "0.1.0",
Bump Amperize to version 0.3.7 (#9370) no issue - includes updated tests and usage of another user-agent for image requests
2018-01-04 16:44:33 +03:00
"amperize": "0.3.7",
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
"analytics-node": "2.4.1",
chore(package): update archiver to version 1.3.0 (#7782) https://greenkeeper.io/
2017-01-04 15:54:41 +03:00
"archiver": "1.3.0",
Update bcryptjs to version 2.4.3 🚀 (#7949) * chore(package): update bcryptjs to version 2.4.3 https://greenkeeper.io/ * chore: yarn.lock
2017-02-08 20:54:16 +03:00
"bcryptjs": "2.4.3",
Bump dependencies no issue - bluebird@3.5.1 - csv-parser@1.12.0 - gscan@1.2.2 - moment@2.19.2 - nconf@0.9.1 - oauth2orize@1.11.0 - superagent@3.8.1 - eslint@4.11.0 - nock@9.1.0
2017-11-17 18:29:21 +03:00
"bluebird": "3.5.1",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
"body-parser": "1.18.3",
🐛 Fixed `updated_at` not being updated (#9532) closes #9520 - it contains a dependency bump of the latest Bookshelf release - Bookshelf introduced a bug in the last release - see https://github.com/bookshelf/bookshelf/pull/1583 - see https://github.com/bookshelf/bookshelf/pull/1798 - this has caused trouble in Ghost - the `updated_at` attribute was not automatically set anymore --- The bookshelf added one breaking change: it's allow to pass custom `updated_at` and `created_at`. We already have a protection for not being able to override the `created_at` date on update. We had to add another protection to now allow to only change the `updated_at` property. You can only change `updated_at` if you actually change something else e.g. the title of a post. To be able to implement this check i discovered that Bookshelfs `model.changed` object has a tricky behaviour. It remembers **all** attributes, which where changed, doesn't matter if they are valid or invalid model properties. We had to add a line of code to avoid remembering none valid model attributes in this object. e.g. you change `tag.parent` (no valid model attribute). The valid property is `tag.parent_id`. If you pass `tag.parent` but the value has **not** changed (`tag.parent` === `tag.parent_id`), it will output you `tag.changed.parent`. But this is wrong. Bookshelf detects `changed` attributes too early. Or if you think the other way around, Ghost detects valid attributes too late. But the current earliest possible stage is the `onSaving` event, there is no earlier way to pick valid attributes (except of `.forge`, but we don't use this fn ATM). Later: the API should transform `tag.parent` into `tag.parent_id`, but we are not using it ATM, so no need to pre-optimise. The API already transforms `post.author` into `post.author_id`.
2018-03-26 16:12:02 +03:00
"bookshelf": "0.13.3",
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"bookshelf-relations": "0.2.1",
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
"brute-knex": "3.0.0",
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"bson-objectid": "1.2.3",
deps: chalk@1.1.3
2016-04-21 12:19:55 +03:00
"chalk": "1.1.3",
chore(package): update cheerio to version 0.22.0 (#7260) https://greenkeeper.io/
2016-09-19 14:32:40 +03:00
"cheerio": "0.22.0",
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
"compression": "1.7.2",
Upgrading most production dependencies no issue - includes the majority of upgrades to out-of-date dependencies - lodash is being left as it has backwards incompatible changes, as well as causing unmet deps warnings - glob & cherio are being left as upgrading them causes unmet deps warnings - bookshelf & knex should be done together separately
2015-06-03 14:15:11 +03:00
"connect-slashes": "1.3.1",
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
"cookie-session": "1.3.2",
⬆️ Bumb dependencies no issue - compression@1.7.0 - cors@2.8.4 - gscan@1.1.6 - jsonpath@0.2.12 - knex-migrator@2.1.5 - semver@5.4.1
2017-08-03 10:09:03 +03:00
"cors": "2.8.4",
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"csv-parser": "1.12.1",
Add editorconfig
2015-05-06 02:54:23 +03:00
"downsize": "0.0.8",
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
"express": "4.16.3",
Replace memory spam prevention with brute-express (#7579) no issue - removes count from user checks model - uses brute express brute with brute-knex adaptor to store persisted data on spam prevention - implement brute force protection for password/token exchange, password resets and private blogging
2016-11-08 14:33:19 +03:00
"express-brute": "1.0.1",
chore(package): update express-hbs to version 1.0.4 (#7840) https://greenkeeper.io/
2017-01-11 22:40:39 +03:00
"express-hbs": "1.0.4",
🎨Added `absolute_url` flag to public api (#9833) closes #9832 The API _should_ be returning absolute URLs for everything, 3rd party applications require absolute urls to read and display ghost data correctly. Currently they have to concat the blog url and the resource url, which is very uncomfortable. Changing the public api like this would be considered a breaking change however so we've opted to put it behind a query parameter named `absolute_urls`.
2018-08-31 13:02:39 +03:00
"express-query-boolean": "2.0.0",
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
"express-session": "1.15.6",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
"extract-zip": "1.6.7",
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 10:51:54 +03:00
"fs-extra": "3.0.1",
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"ghost-gql": "0.0.10",
Bumped ghost-ignition to version 2.9.6
2018-09-25 12:41:37 +03:00
"ghost-ignition": "2.9.6",
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"ghost-storage-base": "0.0.3",
deps: glob@5.0.15
2015-10-14 12:29:08 +03:00
"glob": "5.0.15",
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
"got": "7.1.0",
Bump gscan to version 2.2.1 closes #9851
2018-09-06 13:24:17 +03:00
"gscan": "2.2.1",
⬆️ bump dependencies no issue - gscan@1.1.2 - body-parser@1.17.2 - debug@2.6.8 - express@4.15.3 - html-to-text@3.3.0 - image-size@0.5.5 - uuid@3.1.0
2017-06-22 20:40:56 +03:00
"html-to-text": "3.3.0",
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 19:43:08 +03:00
"image-size": "0.6.3",
chore(package): update intl to version 1.2.5 (#7411) https://greenkeeper.io/
2016-09-26 12:13:38 +03:00
"intl": "1.2.5",
chore(package): update dependencies https://greenkeeper.io/
2016-04-30 00:30:41 +03:00
"intl-messageformat": "1.3.0",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
"js-yaml": "3.12.0",
Bump jsonpath to version 1.0.0 no issue - major bump - we only use jsonpath inside the `get` helper - the functionality still works as expected - includes security fix, see https://github.com/dchester/jsonpath/commit/98464aa5fea65bad09564a5632bad72e31736244
2017-10-31 14:21:48 +03:00
"jsonpath": "1.0.0",
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"knex": "0.14.6",
Bump knex-migrator to version 3.2.3 no issue
2018-08-15 03:40:46 +03:00
"knex-migrator": "3.2.3",
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"lodash": "4.17.10",
Bump markdown-it to version 8.4.1 (#9484) no issue - which bumps the sub-dependency "uc.micro" to 1.0.5 - this version is now MIT licensed
2018-03-05 12:03:24 +03:00
"markdown-it": "8.4.1",
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
"markdown-it-footnote": "3.0.1",
"markdown-it-lazy-headers": "0.1.3",
"markdown-it-mark": "2.0.0",
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 21:07:33 +03:00
"mobiledoc-dom-renderer": "0.6.5",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
"moment": "2.22.2",
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 19:43:08 +03:00
"moment-timezone": "0.5.21",
Bump dependencies no issue - ghost-ignition@2.9.4 - fixed log rotation (https://github.com/TryGhost/Ignition/commit/c8f256430a5d03c6bce7872910eecc5576fd4b55) - multer@1.3.1 - uuid@3.3.2 - nock@9.4.0
2018-07-02 13:28:30 +03:00
"multer": "1.3.1",
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
"mysql": "2.15.0",
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
"nconf": "0.10.0",
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
"netjet": "1.3.0",
Add editorconfig
2015-05-06 02:54:23 +03:00
"nodemailer": "0.7.1",
Bump dependencies no issue - bluebird@3.5.1 - csv-parser@1.12.0 - gscan@1.2.2 - moment@2.19.2 - nconf@0.9.1 - oauth2orize@1.11.0 - superagent@3.8.1 - eslint@4.11.0 - nock@9.1.0
2017-11-17 18:29:21 +03:00
"oauth2orize": "1.11.0",
Bump forked oembed-parser dependency no issue - removes bellajs sub-dependency that wasn't pinned because it's latest version restricts the usable node version
2018-09-18 12:33:04 +03:00
"oembed-parser": "https://github.com/kevinansfield/oembed-parser/tarball/80af3dc41059bcc0caa80db010265a811a4267c7",
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
"passport": "0.4.0",
Add editorconfig
2015-05-06 02:54:23 +03:00
"passport-http-bearer": "1.0.1",
"passport-oauth2-client-password": "0.1.2",
deps: path-match@1.2.4
2016-04-21 12:44:58 +03:00
"path-match": "1.2.4",
chore(package): update rss to version 1.2.2 (#7841) https://greenkeeper.io/
2017-01-11 22:42:13 +03:00
"rss": "1.2.2",
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
"sanitize-html": "1.18.2",
Bump dependencies (#9421) no issue - bookshelf-relations@0.1.5 - ghost-ignition@2.8.18 - sanitize-html@1.17.0 - semver@5.5.0 - uuid@3.2.1 - eslint@4.16.0 - should@13.2.1 - sinon@4.2.1
2018-01-25 00:50:20 +03:00
"semver": "5.5.0",
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 21:07:33 +03:00
"simple-dom": "0.3.2",
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 19:43:08 +03:00
"simple-html-tokenizer": "0.5.5",
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"superagent": "3.8.3",
deps: unidecode@0.1.8 closes #6163
2015-12-08 14:01:49 +03:00
"unidecode": "0.1.8",
Bump dependencies no issue - ghost-ignition@2.9.4 - fixed log rotation (https://github.com/TryGhost/Ignition/commit/c8f256430a5d03c6bce7872910eecc5576fd4b55) - multer@1.3.1 - uuid@3.3.2 - nock@9.4.0
2018-07-02 13:28:30 +03:00
"uuid": "3.3.2",
Update validator to version 6.3.0 🚀 (#8049) * chore(package): update validator to version 6.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-03-03 17:04:38 +03:00
"validator": "6.3.0",
deps: xml@1.0.1
2016-02-09 00:30:57 +03:00
"xml": "1.0.1"
Add editorconfig
2015-05-06 02:54:23 +03:00
},
"optionalDependencies": {
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
"sharp": "0.20.7",
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 19:43:08 +03:00
"sqlite3": "4.0.1"
Add editorconfig
2015-05-06 02:54:23 +03:00
},
"devDependencies": {
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"eslint": "4.19.1",
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
"eslint-plugin-ghost": "0.0.27",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
"grunt": "1.0.3",
deps: grunt@1.0.1 + related updates - Gets all grunt dependencies in line with the grunt 1.0 release. - deps: grunt-cli@1.2.0. - deps: grunt-bg-shell@2.3.3. - deps: grunt-contrib-clean@1.0.0. - deps: grunt-contrib-compress@1.2.0. - deps: grunt-contrib-copy@1.0.0. - deps: grunt-contrib-jshint@1.0.0. - deps: grunt-contrib-watch@1.0.0. - deps: grunt-docker@0.0.11. - deps: grunt-express-server@0.5.3. - deps: grunt-jscs@2.8.0. - deps: grunt-mocha-cli@2.1.0. - deps: grunt-mocha-istanbul@4.0.2. - deps: grunt-shell@1.3.0. - deps: istanbul@0.4.3.
2016-04-06 23:07:55 +03:00
"grunt-bg-shell": "2.3.3",
"grunt-cli": "1.2.0",
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 21:56:05 +03:00
"grunt-contrib-clean": "1.1.0",
"grunt-contrib-compress": "1.4.3",
deps: grunt@1.0.1 + related updates - Gets all grunt dependencies in line with the grunt 1.0 release. - deps: grunt-cli@1.2.0. - deps: grunt-bg-shell@2.3.3. - deps: grunt-contrib-clean@1.0.0. - deps: grunt-contrib-compress@1.2.0. - deps: grunt-contrib-copy@1.0.0. - deps: grunt-contrib-jshint@1.0.0. - deps: grunt-contrib-watch@1.0.0. - deps: grunt-docker@0.0.11. - deps: grunt-express-server@0.5.3. - deps: grunt-jscs@2.8.0. - deps: grunt-mocha-cli@2.1.0. - deps: grunt-mocha-istanbul@4.0.2. - deps: grunt-shell@1.3.0. - deps: istanbul@0.4.3.
2016-04-06 23:07:55 +03:00
"grunt-contrib-copy": "1.0.0",
✨ Added pre-commit hook to handle submodules (#8302) refs #8235 Usage: - for existing development setups: `grunt symlink` (will create the pre-commit symlink) - for fresh development setups: `npm run init` (symlinking happens as part of the typical set up) - ✨ Added pre-commit hook to handle submodules - Checks to see if there are any submodules about to be committed - Output matches closely to `git st` to make it easy to read - Requires interaction from the committer to accept that this really should be committed - ✨ Use grunt symlink to register githooks - Grunt symlink will make a link to the pre-commit hook - It ONLY does this if there isn't already a pre-commit hook, so won't overwrite anything - It does this as part of npm run init, not grunt init, because a release repo would NEVER want this - This is a dev tool, that configures the repo for development
2017-04-13 10:26:48 +03:00
"grunt-contrib-symlink": "^1.0.0",
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
"grunt-contrib-uglify": "3.3.0",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
"grunt-contrib-watch": "1.1.0",
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
"grunt-cssnano": "2.1.0",
deps: grunt@1.0.1 + related updates - Gets all grunt dependencies in line with the grunt 1.0 release. - deps: grunt-cli@1.2.0. - deps: grunt-bg-shell@2.3.3. - deps: grunt-contrib-clean@1.0.0. - deps: grunt-contrib-compress@1.2.0. - deps: grunt-contrib-copy@1.0.0. - deps: grunt-contrib-jshint@1.0.0. - deps: grunt-contrib-watch@1.0.0. - deps: grunt-docker@0.0.11. - deps: grunt-express-server@0.5.3. - deps: grunt-jscs@2.8.0. - deps: grunt-mocha-cli@2.1.0. - deps: grunt-mocha-istanbul@4.0.2. - deps: grunt-shell@1.3.0. - deps: istanbul@0.4.3.
2016-04-06 23:07:55 +03:00
"grunt-docker": "0.0.11",
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
"grunt-eslint": "20.1.0",
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
"grunt-express-server": "0.5.4",
Bump grunt-mocha-cli to version 3.0.0 no issue - https://github.com/Rowno/grunt-mocha-cli/blob/master/CHANGELOG.md#300--2016-11-07 - no major changes to adapt
2017-11-28 21:47:35 +03:00
"grunt-mocha-cli": "3.0.0",
chore(package): update grunt-mocha-istanbul to version 5.0.2 (#7181) https://greenkeeper.io/
2016-08-10 21:09:59 +03:00
"grunt-mocha-istanbul": "5.0.2",
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 21:45:29 +03:00
"grunt-shell": "2.1.0",
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
"grunt-subgrunt": "1.3.0",
Misc grunt /dev updates - Updated all dev dependencies in the root package.json - Added `--colors` to mocha when called from grunt test:... so that works better - Removed non-unit tests from coverage, because they're just not useful - Updated docker config to generate useful docs again - as a statement of intent, I also updated docs in key files - Setup grunt watch-docs task for documentation writing easyness
2015-05-28 18:16:09 +03:00
"grunt-update-submodules": "0.4.1",
chore(package): update istanbul to version 0.4.5 (#7239) https://greenkeeper.io/
2016-09-19 15:51:25 +03:00
"istanbul": "0.4.5",
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
"matchdep": "2.0.0",
🛠 Gulp setup (#7439) refs #7427 With this PR, we'll get some development tooling magic: `gulp setup` Will update dependecies and submodules (if submodule branches are on master) for currently chosen branches. `gulp setup --force` Will delete all dependencies and install them again, incl. submodules for currently chosen branches. `gulp setup --ghost some-branch --admin some-branch --casper some-branch` Will checkout the branches for each repository. Can also be used to checkout only selected branches e. g. `gulp setup --admin some-branch` Will leave the current branch for `ghost` and `casper`, but checkout the named branch for admin. Will also install dependencies. `gulp setup --admin pr/123 --ghost pr/1234 --casper pr/123` Will fetch the named PR of the repository and checkout to this new branch. Will also install dependencies. NOTE: This works only with an additional fetch line in the .git/config file for each repository: `fetch = +refs/pull/*/head:refs/remotes/upstream/pr/*`. See https://dev.ghost.org/easy-git-pr-test/ for further information. All the combinations above can be executed with the `--force` or `-f` flag, which will delete the dependencies and install them again, but for the chosen branches.
2016-09-26 19:17:40 +03:00
"minimist": "1.2.0",
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
"mocha": "4.1.0",
Bump dependencies no issue - ghost-ignition@2.9.4 - fixed log rotation (https://github.com/TryGhost/Ignition/commit/c8f256430a5d03c6bce7872910eecc5576fd4b55) - multer@1.3.1 - uuid@3.3.2 - nock@9.4.0
2018-07-02 13:28:30 +03:00
"nock": "9.4.0",
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 16:59:06 +03:00
"proxyquire": "2.1.0",
Bump rewire to version 3.0.2 no issue - nothing to adapt for the major jump
2017-11-28 21:22:29 +03:00
"rewire": "3.0.2",
Bump dependencies (#9421) no issue - bookshelf-relations@0.1.5 - ghost-ignition@2.8.18 - sanitize-html@1.17.0 - semver@5.5.0 - uuid@3.2.1 - eslint@4.16.0 - should@13.2.1 - sinon@4.2.1
2018-01-25 00:50:20 +03:00
"should": "13.2.1",
Update should-http to version 0.1.1 🚀 (#8209) * chore(package): update should-http to version 0.1.1 https://greenkeeper.io/ * chore: yarn.lock
2017-04-04 11:12:37 +03:00
"should-http": "0.1.1",
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
"sinon": "4.4.6",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
"supertest": "3.1.0",
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
"tmp": "0.0.33"
Add greenkeeper ignore spec to package.json refs #6452 - add a list of our deliberately pinned dependencies and dev dependencies, so that greenkeeper will ignore these
2016-02-07 16:16:18 +03:00
},
"greenkeeper": {
Remove method stubs from upload API tests
2016-03-29 06:24:32 +03:00
"ignore": [
"glob",
"nodemailer",
🛠 Make greenkeeper ignore grunt dependencies (#7463) closes #7436 - We're moving away from grunt, so lets not worry about version bumps for now
2016-09-30 15:38:14 +03:00
"grunt",
"grunt-bg-shell",
"grunt-cli",
"grunt-contrib-clean",
"grunt-contrib-compress",
"grunt-contrib-copy",
"grunt-contrib-jshint",
"grunt-contrib-uglify",
"grunt-contrib-watch",
"grunt-docker",
"grunt-express-server",
"grunt-jscs",
"grunt-mocha-cli",
"grunt-mocha-istanbul",
"grunt-shell",
"grunt-subgrunt",
Revert: Update sinon to version 2.1.0 (#8262) no issue - https://greenkeeper.io/ - revert because sinon has changed their API obviously and it shows lots of depreaction warnings right now - as sinon is "just" a testing dependency, i wouldn't spend this time right now and add sinon to the ignore list * Revert: Update sinon to version 2.1.0 * yarn update
2017-04-04 13:54:48 +03:00
"grunt-update-submodules",
"sinon"
Remove method stubs from upload API tests
2016-03-29 06:24:32 +03:00
]
Add editorconfig
2015-05-06 02:54:23 +03:00
}
Updated package.json to conform to npm standards fixes #1053 - fleshed out script object - added test and install package.json - updated contributing guide - updates travis.yml to leverage new npm start
2014-02-09 19:29:23 +04:00
}
Reference in New Issue Copy Permalink