TryGhost/Ghost
1
0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2024-12-01 22:02:11 +03:00
Code Issues Projects Releases Wiki Activity
d506e86f76
Ghost/package.json

159 lines
4.1 KiB
JSON
Raw Normal View History

Updated package.json to conform to npm standards fixes #1053 - fleshed out script object - added test and install package.json - updated contributing guide - updates travis.yml to leverage new npm start
2014-02-09 19:29:23 +04:00
{
Add editorconfig
2015-05-06 02:54:23 +03:00
"name": "ghost",
Version bump to 1.24.2
2018-06-11 15:23:02 +03:00
"version": "1.24.2",
Site description fixture update (#8763) No issue
2017-07-27 11:26:31 +03:00
"description": "The professional publishing platform",
Add editorconfig
2015-05-06 02:54:23 +03:00
"author": "Ghost Foundation",
"homepage": "http://ghost.org",
"keywords": [
"ghost",
"blog",
"cms"
],
"repository": {
"type": "git",
"url": "git://github.com/TryGhost/Ghost.git"
},
"bugs": "https://github.com/TryGhost/Ghost/issues",
"contributors": "https://github.com/TryGhost/Ghost/graphs/contributors",
Update to use SPDX idetifier Per https://docs.npmjs.com/files/package.json#license. Removes warning on install.
2015-05-26 07:00:32 +03:00
"license": "MIT",
Add editorconfig
2015-05-06 02:54:23 +03:00
"main": "./core/index",
"scripts": {
"start": "node index",
🛠 Added `npm run dev` to run grunt dev w/ DEBUG on (#8861) no issue - Most of our other projects have `npm run dev` - In Ghost we use `grunt dev`, but I also want to have DEBUG turned on for development - `npm run dev` is a shortcut for these 2 things - Also cos I keep accidentally typing `npm run dev` anyway 😬
2017-08-09 19:20:02 +03:00
"dev": "DEBUG=ghost:* grunt dev",
📖 Update README installation instructions (#8175) - add contributing workflow link already - i would suggest we merge this PR if the workflow guide was reviewed
2017-03-23 19:02:21 +03:00
"test": "grunt validate --verbose",
Added `yarn lint` to scripts (#9558) no issue - added `yarn lint` to scripts in `package.json`, which runs the existing `grunt lint` task
2018-04-09 14:43:16 +03:00
"setup": "yarn install && knex-migrator init && grunt symlink && grunt init || true",
"lint": "grunt lint"
Add editorconfig
2015-05-06 02:54:23 +03:00
},
"engines": {
🔥 Drop Node v4 Support no issue - support ends today - see https://github.com/nodejs/Release - removed `use strict`
2018-04-30 13:33:36 +03:00
"node": "^6.9.0 || ^8.9.0",
Added `content/settings` folder refs #9528 refs TryGhost/Ghost-CLI#681 - added a new `/content/settings` folder - bumped Ghost-CLI engine requirement to >= 1.7.0
2018-04-13 04:29:36 +03:00
"cli": "^1.7.0"
Add editorconfig
2015-05-06 02:54:23 +03:00
},
"dependencies": {
Bump Amperize to version 0.3.7 (#9370) no issue - includes updated tests and usage of another user-agent for image requests
2018-01-04 16:44:33 +03:00
"amperize": "0.3.7",
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
"analytics-node": "2.4.1",
chore(package): update archiver to version 1.3.0 (#7782) https://greenkeeper.io/
2017-01-04 15:54:41 +03:00
"archiver": "1.3.0",
Update bcryptjs to version 2.4.3 🚀 (#7949) * chore(package): update bcryptjs to version 2.4.3 https://greenkeeper.io/ * chore: yarn.lock
2017-02-08 20:54:16 +03:00
"bcryptjs": "2.4.3",
Bump dependencies no issue - bluebird@3.5.1 - csv-parser@1.12.0 - gscan@1.2.2 - moment@2.19.2 - nconf@0.9.1 - oauth2orize@1.11.0 - superagent@3.8.1 - eslint@4.11.0 - nock@9.1.0
2017-11-17 18:29:21 +03:00
"bluebird": "3.5.1",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
"body-parser": "1.18.3",
🐛 Fixed `updated_at` not being updated (#9532) closes #9520 - it contains a dependency bump of the latest Bookshelf release - Bookshelf introduced a bug in the last release - see https://github.com/bookshelf/bookshelf/pull/1583 - see https://github.com/bookshelf/bookshelf/pull/1798 - this has caused trouble in Ghost - the `updated_at` attribute was not automatically set anymore --- The bookshelf added one breaking change: it's allow to pass custom `updated_at` and `created_at`. We already have a protection for not being able to override the `created_at` date on update. We had to add another protection to now allow to only change the `updated_at` property. You can only change `updated_at` if you actually change something else e.g. the title of a post. To be able to implement this check i discovered that Bookshelfs `model.changed` object has a tricky behaviour. It remembers **all** attributes, which where changed, doesn't matter if they are valid or invalid model properties. We had to add a line of code to avoid remembering none valid model attributes in this object. e.g. you change `tag.parent` (no valid model attribute). The valid property is `tag.parent_id`. If you pass `tag.parent` but the value has **not** changed (`tag.parent` === `tag.parent_id`), it will output you `tag.changed.parent`. But this is wrong. Bookshelf detects `changed` attributes too early. Or if you think the other way around, Ghost detects valid attributes too late. But the current earliest possible stage is the `onSaving` event, there is no earlier way to pick valid attributes (except of `.forge`, but we don't use this fn ATM). Later: the API should transform `tag.parent` into `tag.parent_id`, but we are not using it ATM, so no need to pre-optimise. The API already transforms `post.author` into `post.author_id`.
2018-03-26 16:12:02 +03:00
"bookshelf": "0.13.3",
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"bookshelf-relations": "0.2.1",
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
"brute-knex": "3.0.0",
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"bson-objectid": "1.2.3",
deps: chalk@1.1.3
2016-04-21 12:19:55 +03:00
"chalk": "1.1.3",
chore(package): update cheerio to version 0.22.0 (#7260) https://greenkeeper.io/
2016-09-19 14:32:40 +03:00
"cheerio": "0.22.0",
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
"compression": "1.7.2",
Upgrading most production dependencies no issue - includes the majority of upgrades to out-of-date dependencies - lodash is being left as it has backwards incompatible changes, as well as causing unmet deps warnings - glob & cherio are being left as upgrading them causes unmet deps warnings - bookshelf & knex should be done together separately
2015-06-03 14:15:11 +03:00
"connect-slashes": "1.3.1",
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
"cookie-session": "1.3.2",
⬆️ Bumb dependencies no issue - compression@1.7.0 - cors@2.8.4 - gscan@1.1.6 - jsonpath@0.2.12 - knex-migrator@2.1.5 - semver@5.4.1
2017-08-03 10:09:03 +03:00
"cors": "2.8.4",
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"csv-parser": "1.12.1",
Add editorconfig
2015-05-06 02:54:23 +03:00
"downsize": "0.0.8",
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
"express": "4.16.3",
Replace memory spam prevention with brute-express (#7579) no issue - removes count from user checks model - uses brute express brute with brute-knex adaptor to store persisted data on spam prevention - implement brute force protection for password/token exchange, password resets and private blogging
2016-11-08 14:33:19 +03:00
"express-brute": "1.0.1",
chore(package): update express-hbs to version 1.0.4 (#7840) https://greenkeeper.io/
2017-01-11 22:40:39 +03:00
"express-hbs": "1.0.4",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
"extract-zip": "1.6.7",
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 10:51:54 +03:00
"fs-extra": "3.0.1",
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"ghost-gql": "0.0.10",
Bump dependencies no issue - ghost-ignition@2.9.3 - simple-html-tokenizer@0.5.3
2018-06-06 15:00:43 +03:00
"ghost-ignition": "2.9.3",
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"ghost-storage-base": "0.0.3",
deps: glob@5.0.15
2015-10-14 12:29:08 +03:00
"glob": "5.0.15",
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
"got": "7.1.0",
Bump gscan to version 1.4.3 no issue - fixes a bug, that didn't catch errors caused by corrupt zip files - uses a fork of the `extract-zip` dependency with a bug fix for https://github.com/maxogden/extract-zip/issues/65
2018-05-16 05:00:53 +03:00
"gscan": "1.4.3",
⬆️ bump dependencies no issue - gscan@1.1.2 - body-parser@1.17.2 - debug@2.6.8 - express@4.15.3 - html-to-text@3.3.0 - image-size@0.5.5 - uuid@3.1.0
2017-06-22 20:40:56 +03:00
"html-to-text": "3.3.0",
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
"image-size": "0.6.2",
chore(package): update intl to version 1.2.5 (#7411) https://greenkeeper.io/
2016-09-26 12:13:38 +03:00
"intl": "1.2.5",
chore(package): update dependencies https://greenkeeper.io/
2016-04-30 00:30:41 +03:00
"intl-messageformat": "1.3.0",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
"js-yaml": "3.12.0",
Bump jsonpath to version 1.0.0 no issue - major bump - we only use jsonpath inside the `get` helper - the functionality still works as expected - includes security fix, see https://github.com/dchester/jsonpath/commit/98464aa5fea65bad09564a5632bad72e31736244
2017-10-31 14:21:48 +03:00
"jsonpath": "1.0.0",
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"knex": "0.14.6",
"knex-migrator": "3.1.6",
"lodash": "4.17.10",
Bump markdown-it to version 8.4.1 (#9484) no issue - which bumps the sub-dependency "uc.micro" to 1.0.5 - this version is now MIT licensed
2018-03-05 12:03:24 +03:00
"markdown-it": "8.4.1",
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
"markdown-it-footnote": "3.0.1",
"markdown-it-lazy-headers": "0.1.3",
"markdown-it-mark": "2.0.0",
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 21:07:33 +03:00
"mobiledoc-dom-renderer": "0.6.5",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
"moment": "2.22.2",
"moment-timezone": "0.5.17",
Update multer to version 1.3.0 🚀 (#7896) * chore(package): update multer to version 1.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-02-08 19:00:11 +03:00
"multer": "1.3.0",
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
"mysql": "2.15.0",
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
"nconf": "0.10.0",
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
"netjet": "1.3.0",
Add editorconfig
2015-05-06 02:54:23 +03:00
"nodemailer": "0.7.1",
Bump dependencies no issue - bluebird@3.5.1 - csv-parser@1.12.0 - gscan@1.2.2 - moment@2.19.2 - nconf@0.9.1 - oauth2orize@1.11.0 - superagent@3.8.1 - eslint@4.11.0 - nock@9.1.0
2017-11-17 18:29:21 +03:00
"oauth2orize": "1.11.0",
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
"passport": "0.4.0",
Add editorconfig
2015-05-06 02:54:23 +03:00
"passport-http-bearer": "1.0.1",
"passport-oauth2-client-password": "0.1.2",
deps: path-match@1.2.4
2016-04-21 12:44:58 +03:00
"path-match": "1.2.4",
chore(package): update rss to version 1.2.2 (#7841) https://greenkeeper.io/
2017-01-11 22:42:13 +03:00
"rss": "1.2.2",
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
"sanitize-html": "1.18.2",
Bump dependencies (#9421) no issue - bookshelf-relations@0.1.5 - ghost-ignition@2.8.18 - sanitize-html@1.17.0 - semver@5.5.0 - uuid@3.2.1 - eslint@4.16.0 - should@13.2.1 - sinon@4.2.1
2018-01-25 00:50:20 +03:00
"semver": "5.5.0",
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 21:07:33 +03:00
"simple-dom": "0.3.2",
Bump dependencies no issue - ghost-ignition@2.9.3 - simple-html-tokenizer@0.5.3
2018-06-06 15:00:43 +03:00
"simple-html-tokenizer": "0.5.3",
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"superagent": "3.8.3",
deps: unidecode@0.1.8 closes #6163
2015-12-08 14:01:49 +03:00
"unidecode": "0.1.8",
Bump dependencies (#9421) no issue - bookshelf-relations@0.1.5 - ghost-ignition@2.8.18 - sanitize-html@1.17.0 - semver@5.5.0 - uuid@3.2.1 - eslint@4.16.0 - should@13.2.1 - sinon@4.2.1
2018-01-25 00:50:20 +03:00
"uuid": "3.2.1",
Update validator to version 6.3.0 🚀 (#8049) * chore(package): update validator to version 6.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-03-03 17:04:38 +03:00
"validator": "6.3.0",
deps: xml@1.0.1
2016-02-09 00:30:57 +03:00
"xml": "1.0.1"
Add editorconfig
2015-05-06 02:54:23 +03:00
},
"optionalDependencies": {
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
"sqlite3": "4.0.0"
Add editorconfig
2015-05-06 02:54:23 +03:00
},
"devDependencies": {
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
"eslint": "4.19.1",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
"grunt": "1.0.3",
deps: grunt@1.0.1 + related updates - Gets all grunt dependencies in line with the grunt 1.0 release. - deps: grunt-cli@1.2.0. - deps: grunt-bg-shell@2.3.3. - deps: grunt-contrib-clean@1.0.0. - deps: grunt-contrib-compress@1.2.0. - deps: grunt-contrib-copy@1.0.0. - deps: grunt-contrib-jshint@1.0.0. - deps: grunt-contrib-watch@1.0.0. - deps: grunt-docker@0.0.11. - deps: grunt-express-server@0.5.3. - deps: grunt-jscs@2.8.0. - deps: grunt-mocha-cli@2.1.0. - deps: grunt-mocha-istanbul@4.0.2. - deps: grunt-shell@1.3.0. - deps: istanbul@0.4.3.
2016-04-06 23:07:55 +03:00
"grunt-bg-shell": "2.3.3",
"grunt-cli": "1.2.0",
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 21:56:05 +03:00
"grunt-contrib-clean": "1.1.0",
"grunt-contrib-compress": "1.4.3",
deps: grunt@1.0.1 + related updates - Gets all grunt dependencies in line with the grunt 1.0 release. - deps: grunt-cli@1.2.0. - deps: grunt-bg-shell@2.3.3. - deps: grunt-contrib-clean@1.0.0. - deps: grunt-contrib-compress@1.2.0. - deps: grunt-contrib-copy@1.0.0. - deps: grunt-contrib-jshint@1.0.0. - deps: grunt-contrib-watch@1.0.0. - deps: grunt-docker@0.0.11. - deps: grunt-express-server@0.5.3. - deps: grunt-jscs@2.8.0. - deps: grunt-mocha-cli@2.1.0. - deps: grunt-mocha-istanbul@4.0.2. - deps: grunt-shell@1.3.0. - deps: istanbul@0.4.3.
2016-04-06 23:07:55 +03:00
"grunt-contrib-copy": "1.0.0",
✨ Added pre-commit hook to handle submodules (#8302) refs #8235 Usage: - for existing development setups: `grunt symlink` (will create the pre-commit symlink) - for fresh development setups: `npm run init` (symlinking happens as part of the typical set up) - ✨ Added pre-commit hook to handle submodules - Checks to see if there are any submodules about to be committed - Output matches closely to `git st` to make it easy to read - Requires interaction from the committer to accept that this really should be committed - ✨ Use grunt symlink to register githooks - Grunt symlink will make a link to the pre-commit hook - It ONLY does this if there isn't already a pre-commit hook, so won't overwrite anything - It does this as part of npm run init, not grunt init, because a release repo would NEVER want this - This is a dev tool, that configures the repo for development
2017-04-13 10:26:48 +03:00
"grunt-contrib-symlink": "^1.0.0",
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
"grunt-contrib-uglify": "3.3.0",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
"grunt-contrib-watch": "1.1.0",
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
"grunt-cssnano": "2.1.0",
deps: grunt@1.0.1 + related updates - Gets all grunt dependencies in line with the grunt 1.0 release. - deps: grunt-cli@1.2.0. - deps: grunt-bg-shell@2.3.3. - deps: grunt-contrib-clean@1.0.0. - deps: grunt-contrib-compress@1.2.0. - deps: grunt-contrib-copy@1.0.0. - deps: grunt-contrib-jshint@1.0.0. - deps: grunt-contrib-watch@1.0.0. - deps: grunt-docker@0.0.11. - deps: grunt-express-server@0.5.3. - deps: grunt-jscs@2.8.0. - deps: grunt-mocha-cli@2.1.0. - deps: grunt-mocha-istanbul@4.0.2. - deps: grunt-shell@1.3.0. - deps: istanbul@0.4.3.
2016-04-06 23:07:55 +03:00
"grunt-docker": "0.0.11",
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
"grunt-eslint": "20.1.0",
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
"grunt-express-server": "0.5.4",
Bump grunt-mocha-cli to version 3.0.0 no issue - https://github.com/Rowno/grunt-mocha-cli/blob/master/CHANGELOG.md#300--2016-11-07 - no major changes to adapt
2017-11-28 21:47:35 +03:00
"grunt-mocha-cli": "3.0.0",
chore(package): update grunt-mocha-istanbul to version 5.0.2 (#7181) https://greenkeeper.io/
2016-08-10 21:09:59 +03:00
"grunt-mocha-istanbul": "5.0.2",
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 21:45:29 +03:00
"grunt-shell": "2.1.0",
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
"grunt-subgrunt": "1.3.0",
Misc grunt /dev updates - Updated all dev dependencies in the root package.json - Added `--colors` to mocha when called from grunt test:... so that works better - Removed non-unit tests from coverage, because they're just not useful - Updated docker config to generate useful docs again - as a statement of intent, I also updated docs in key files - Setup grunt watch-docs task for documentation writing easyness
2015-05-28 18:16:09 +03:00
"grunt-update-submodules": "0.4.1",
chore(package): update istanbul to version 0.4.5 (#7239) https://greenkeeper.io/
2016-09-19 15:51:25 +03:00
"istanbul": "0.4.5",
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
"matchdep": "2.0.0",
🛠 Gulp setup (#7439) refs #7427 With this PR, we'll get some development tooling magic: `gulp setup` Will update dependecies and submodules (if submodule branches are on master) for currently chosen branches. `gulp setup --force` Will delete all dependencies and install them again, incl. submodules for currently chosen branches. `gulp setup --ghost some-branch --admin some-branch --casper some-branch` Will checkout the branches for each repository. Can also be used to checkout only selected branches e. g. `gulp setup --admin some-branch` Will leave the current branch for `ghost` and `casper`, but checkout the named branch for admin. Will also install dependencies. `gulp setup --admin pr/123 --ghost pr/1234 --casper pr/123` Will fetch the named PR of the repository and checkout to this new branch. Will also install dependencies. NOTE: This works only with an additional fetch line in the .git/config file for each repository: `fetch = +refs/pull/*/head:refs/remotes/upstream/pr/*`. See https://dev.ghost.org/easy-git-pr-test/ for further information. All the combinations above can be executed with the `--force` or `-f` flag, which will delete the dependencies and install them again, but for the chosen branches.
2016-09-26 19:17:40 +03:00
"minimist": "1.2.0",
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
"mocha": "4.1.0",
Added knex mock for unit testing no issue - added https://github.com/colonyamerican/mock-knex as dev dependency - the mock serves our data generator test data by default - but you can define your own if you want - we need a proper mock for unit testing - we should not mock bookshelf if possible, otherwise we can't test event flows
2018-02-15 22:14:30 +03:00
"mock-knex": "0.4.0",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
"nock": "9.3.0",
Bump rewire to version 3.0.2 no issue - nothing to adapt for the major jump
2017-11-28 21:22:29 +03:00
"rewire": "3.0.2",
Bump dependencies (#9421) no issue - bookshelf-relations@0.1.5 - ghost-ignition@2.8.18 - sanitize-html@1.17.0 - semver@5.5.0 - uuid@3.2.1 - eslint@4.16.0 - should@13.2.1 - sinon@4.2.1
2018-01-25 00:50:20 +03:00
"should": "13.2.1",
Update should-http to version 0.1.1 🚀 (#8209) * chore(package): update should-http to version 0.1.1 https://greenkeeper.io/ * chore: yarn.lock
2017-04-04 11:12:37 +03:00
"should-http": "0.1.1",
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
"sinon": "4.4.6",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
"supertest": "3.1.0",
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
"tmp": "0.0.33"
Add greenkeeper ignore spec to package.json refs #6452 - add a list of our deliberately pinned dependencies and dev dependencies, so that greenkeeper will ignore these
2016-02-07 16:16:18 +03:00
},
"greenkeeper": {
Remove method stubs from upload API tests
2016-03-29 06:24:32 +03:00
"ignore": [
"glob",
"nodemailer",
🛠 Make greenkeeper ignore grunt dependencies (#7463) closes #7436 - We're moving away from grunt, so lets not worry about version bumps for now
2016-09-30 15:38:14 +03:00
"grunt",
"grunt-bg-shell",
"grunt-cli",
"grunt-contrib-clean",
"grunt-contrib-compress",
"grunt-contrib-copy",
"grunt-contrib-jshint",
"grunt-contrib-uglify",
"grunt-contrib-watch",
"grunt-docker",
"grunt-express-server",
"grunt-jscs",
"grunt-mocha-cli",
"grunt-mocha-istanbul",
"grunt-shell",
"grunt-subgrunt",
Revert: Update sinon to version 2.1.0 (#8262) no issue - https://greenkeeper.io/ - revert because sinon has changed their API obviously and it shows lots of depreaction warnings right now - as sinon is "just" a testing dependency, i wouldn't spend this time right now and add sinon to the ignore list * Revert: Update sinon to version 2.1.0 * yarn update
2017-04-04 13:54:48 +03:00
"grunt-update-submodules",
"sinon"
Remove method stubs from upload API tests
2016-03-29 06:24:32 +03:00
]
Add editorconfig
2015-05-06 02:54:23 +03:00
}
Updated package.json to conform to npm standards fixes #1053 - fleshed out script object - added test and install package.json - updated contributing guide - updates travis.yml to leverage new npm start
2014-02-09 19:29:23 +04:00
}
Reference in New Issue Copy Permalink