OpenSourceArk/Ghost
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4e56ab2de7
Ghost/yarn.lock

8258 lines
296 KiB
Plaintext
Raw Normal View History

✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
# yarn lockfile v1
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
"@babel/code-frame@^7.0.0":
version "7.0.0"
resolved "https://registry.yarnpkg.com/@babel/code-frame/-/code-frame-7.0.0.tgz#06e2ab19bdb535385559aabb5ba59729482800f8"
dependencies:
"@babel/highlight" "^7.0.0"
"@babel/highlight@^7.0.0":
version "7.0.0"
resolved "https://registry.yarnpkg.com/@babel/highlight/-/highlight-7.0.0.tgz#f710c38c8d458e6dd9a201afb637fcb781ce99e4"
dependencies:
chalk "^2.0.0"
esutils "^2.0.2"
js-tokens "^4.0.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
"@babel/polyfill@^7.0.0":
version "7.2.5"
resolved "https://registry.yarnpkg.com/@babel/polyfill/-/polyfill-7.2.5.tgz#6c54b964f71ad27edddc567d065e57e87ed7fa7d"
dependencies:
core-js "^2.5.7"
regenerator-runtime "^0.12.0"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
"@babel/polyfill@^7.4.4":
version "7.4.4"
resolved "https://registry.yarnpkg.com/@babel/polyfill/-/polyfill-7.4.4.tgz#78801cf3dbe657844eeabf31c1cae3828051e893"
integrity sha512-WlthFLfhQQhh+A2Gn5NSFl0Huxz36x86Jn+E9OW7ibK8edKPq+KLy4apM1yDpQ8kJOVi1OVjpP4vSDLdrI04dg==
dependencies:
core-js "^2.6.5"
regenerator-runtime "^0.13.2"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
"@mrmlnc/readdir-enhanced@^2.2.1":
version "2.2.1"
resolved "https://registry.yarnpkg.com/@mrmlnc/readdir-enhanced/-/readdir-enhanced-2.2.1.tgz#524af240d1a360527b730475ecfa1344aa540dde"
integrity sha512-bPHp6Ji8b41szTOcaP63VlnbbO5Ny6dwAATtY6JTjh5N2OLrb5Qk/Th5cRkRQhkWCt+EJsYrNB0MiL+Gpn6e3g==
dependencies:
call-me-maybe "^1.0.1"
glob-to-regexp "^0.3.0"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
"@nexes/mongo-knex@0.3.0":
version "0.3.0"
resolved "https://registry.yarnpkg.com/@nexes/mongo-knex/-/mongo-knex-0.3.0.tgz#e0078f8ddf7fcd4d907fe5cf2390644218753cf0"
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
debug "^4.1.0"
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
lodash "^4.17.10"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
"@nexes/mongo-utils@0.2.0":
version "0.2.0"
resolved "https://registry.yarnpkg.com/@nexes/mongo-utils/-/mongo-utils-0.2.0.tgz#28b483e88f2433ee269aa6b91f7339b7ab1e7d45"
dependencies:
bluebird "^3.5.3"
ghost-ignition "^2.9.6"
lodash "^4.17.11"
✨Added advanced filtering to Dynamic Routing (#9757) refs #9601, refs #9742 - Upgraded NQL to 0.1.0 - The new version of NQL supports aliases e.g. `tag: tags.slug`, which makes it possible to define `filter=tag:support` - Furthermore, this allows us to support advanced filtering like tag:[a,b] - In dynamic routing, we use mingo via NQL which has a slightly different feature set to GQL in the API: - AND NOT, OR and other advanced logic combos DO work on joined tables - Counts are not yet supported - The Dynamic Routing beta docs should describe that API filtering and Dynamic Routing filtering is different
2018-08-03 14:15:16 +03:00
"@nexes/nql-lang@0.0.1":
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
version "0.0.1"
✨Added advanced filtering to Dynamic Routing (#9757) refs #9601, refs #9742 - Upgraded NQL to 0.1.0 - The new version of NQL supports aliases e.g. `tag: tags.slug`, which makes it possible to define `filter=tag:support` - Furthermore, this allows us to support advanced filtering like tag:[a,b] - In dynamic routing, we use mingo via NQL which has a slightly different feature set to GQL in the API: - AND NOT, OR and other advanced logic combos DO work on joined tables - Counts are not yet supported - The Dynamic Routing beta docs should describe that API filtering and Dynamic Routing filtering is different
2018-08-03 14:15:16 +03:00
resolved "https://registry.yarnpkg.com/@nexes/nql-lang/-/nql-lang-0.0.1.tgz#a13c023873f9bc11b9e4e284449c6cfbeccc8011"
Update dependency @nexes/nql to v0.2.2
2019-07-02 03:35:01 +03:00
"@nexes/nql@0.2.2":
version "0.2.2"
resolved "https://registry.yarnpkg.com/@nexes/nql/-/nql-0.2.2.tgz#436b149e604777ae0e622f6c1ca3e7b81294ddff"
integrity sha512-M4jBzzL1wGBgBilB4TLhg6Q5JS7fcWXk6Pic+Yjt9h1b5wy1msg3NXOusmyJq3Q4pRTG2pzN088GB4AKUI+twg==
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
"@nexes/mongo-knex" "0.3.0"
"@nexes/mongo-utils" "0.2.0"
✨Added advanced filtering to Dynamic Routing (#9757) refs #9601, refs #9742 - Upgraded NQL to 0.1.0 - The new version of NQL supports aliases e.g. `tag: tags.slug`, which makes it possible to define `filter=tag:support` - Furthermore, this allows us to support advanced filtering like tag:[a,b] - In dynamic routing, we use mingo via NQL which has a slightly different feature set to GQL in the API: - AND NOT, OR and other advanced logic combos DO work on joined tables - Counts are not yet supported - The Dynamic Routing beta docs should describe that API filtering and Dynamic Routing filtering is different
2018-08-03 14:15:16 +03:00
"@nexes/nql-lang" "0.0.1"
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
mingo "2.2.2"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
"@nodelib/fs.stat@^1.1.2":
version "1.1.3"
resolved "https://registry.yarnpkg.com/@nodelib/fs.stat/-/fs.stat-1.1.3.tgz#2b5a3ab3f918cca48a8c754c08168e3f03eba61b"
integrity sha512-shAmDyaQC4H92APFoIaVDHCx5bStIocgvbwQyxPRrbUY20V1EYTbSDchWbuwlMG3V17cprZhA6+78JfB+3DTPw==
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
"@segment/loosely-validate-event@^2.0.0":
version "2.0.0"
resolved "https://registry.yarnpkg.com/@segment/loosely-validate-event/-/loosely-validate-event-2.0.0.tgz#87dfc979e5b4e7b82c5f1d8b722dfd5d77644681"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
dependencies:
component-type "^1.2.1"
join-component "^1.1.0"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
"@sindresorhus/is@^0.14.0":
version "0.14.0"
resolved "https://registry.yarnpkg.com/@sindresorhus/is/-/is-0.14.0.tgz#9fb3a3cf3132328151f353de4632e01e52102bea"
integrity sha512-9NET910DNaIPngYnLLPeg+Ogzqsi9uM4mSboU5y6p8S5DzMTVEsJZrawi+BoDNUVBa2DhJqQYUFvMDfgU062LQ==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 19:53:44 +03:00
"@sinonjs/commons@^1.0.2", "@sinonjs/commons@^1.3.0":
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/@sinonjs/commons/-/commons-1.3.0.tgz#50a2754016b6f30a994ceda6d9a0a8c36adda849"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
type-detect "4.0.8"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
"@sinonjs/formatio@^3.1.0":
version "3.1.0"
resolved "https://registry.yarnpkg.com/@sinonjs/formatio/-/formatio-3.1.0.tgz#6ac9d1eb1821984d84c4996726e45d1646d8cce5"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
"@sinonjs/samsam" "^2 || ^3"
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 19:53:44 +03:00
"@sinonjs/samsam@^2 || ^3", "@sinonjs/samsam@^3.0.2":
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/@sinonjs/samsam/-/samsam-3.0.2.tgz#304fb33bd5585a0b2df8a4c801fcb47fa84d8e43"
dependencies:
"@sinonjs/commons" "^1.0.2"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
array-from "^2.1.1"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
lodash.get "^4.4.2"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
"@szmarczak/http-timer@^1.1.2":
version "1.1.2"
resolved "https://registry.yarnpkg.com/@szmarczak/http-timer/-/http-timer-1.1.2.tgz#b1665e2c461a2cd92f4c1bbf50d5454de0d4b421"
integrity sha512-XIB2XbzHTN6ieIjfIMV9hlVcfPU26s2vafYWQcZHWXHOxiaRZYEDKEwdl129Zyg50+foYV2jCgtrqSA6qNuNSA==
dependencies:
defer-to-connect "^1.0.1"
Bump gscan to version 1.4.3 no issue - fixes a bug, that didn't catch errors caused by corrupt zip files - uses a fork of the `extract-zip` dependency with a bug fix for https://github.com/maxogden/extract-zip/issues/65
2018-05-16 05:00:53 +03:00
"@tryghost/extract-zip@1.6.6":
version "1.6.6"
resolved "https://registry.yarnpkg.com/@tryghost/extract-zip/-/extract-zip-1.6.6.tgz#937e0e775fec6dea937ac49d73a068bcafb67f50"
dependencies:
concat-stream "1.6.0"
debug "2.6.9"
mkdirp "0.5.0"
yauzl "2.4.1"
Update dependency @tryghost/helpers to v1.1.7
2019-07-29 03:27:50 +03:00
"@tryghost/helpers@1.1.7":
version "1.1.7"
resolved "https://registry.yarnpkg.com/@tryghost/helpers/-/helpers-1.1.7.tgz#3c2c67f4b57162f273bbc2884ec450f746f7fc15"
integrity sha512-in0E3+Qy7osyX7+65Y0PJliq4wxKazBVKDn1i8P34mcMUYeZ4HtCofi+TJOClCjeJQtSZsPcq4lb1Y7YvOydnQ==
Updated to use count words/images helpers from SDK (#10686) refs #10618 - Added @tryghost/helpers dependency to use Ghost-SDK helpers - Updated countWords, countImages helpers and removed local copy
2019-04-16 05:30:01 +03:00
dependencies:
lodash-es "^4.17.11"
Update dependency @tryghost/html-to-mobiledoc to v0.4.1 no issue - includes a fix for text content potentially being lost when converting html to mobiledoc via the API
2019-06-03 14:34:35 +03:00
"@tryghost/html-to-mobiledoc@0.4.1":
version "0.4.1"
resolved "https://registry.yarnpkg.com/@tryghost/html-to-mobiledoc/-/html-to-mobiledoc-0.4.1.tgz#117d7226996d362db553e97895f32801aec38925"
integrity sha512-nh6P4EAdtzUy46q1SXHaCU6OPxfjRWOs5oq26Z/sd4iOYGKwWkZgJDHxQX9OYF0Rr1qoGGVSmffGFCf19a+c9w==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
✨ Added parsing of html cards when using ?source=html with the v2 Admin API no issue - when sending `html` with `?source=html` to the v2 Admin API it's now possible to include blocks of HTML that will be extracted to html cards rather than going through the normal lossy html-to-mobiledoc conversion Example usage would be sending HTML in the following format: ```html <p>Some standard content...</p> <!--kg-card-begin: html--> <div class="my-custom-html">...</div> <!--kg-card-end: html--> <p>Some more content...</p> ``` In this case an html card will be created in the mobiledoc with the content `<div class="my-custom-html">...</div>`.
2019-05-04 13:30:59 +03:00
"@tryghost/kg-parser-plugins" "^0.5.0"
Update dependency @tryghost/html-to-mobiledoc to v0.4.1 no issue - includes a fix for text content potentially being lost when converting html to mobiledoc via the API
2019-06-03 14:34:35 +03:00
"@tryghost/mobiledoc-kit" "^0.11.2-ghost.4"
✨ Added caption and language extraction for code blocks when converting HTML via API no issue - update @tryghost/html-to-mobiledoc to v0.3.0 - uses updated @tryghost/kg-parser-plugins that is now shared with Ghost-Admin
2019-05-03 13:55:38 +03:00
jsdom "14.1.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
✨ Added caption and language extraction for code blocks when converting HTML via API no issue - update @tryghost/html-to-mobiledoc to v0.3.0 - uses updated @tryghost/kg-parser-plugins that is now shared with Ghost-Admin
2019-05-03 13:55:38 +03:00
"@tryghost/kg-clean-basic-html@^0.1.1":
version "0.1.1"
resolved "https://registry.yarnpkg.com/@tryghost/kg-clean-basic-html/-/kg-clean-basic-html-0.1.1.tgz#a065a5771c29af47d7e681fc6ac2db445b839daf"
integrity sha512-pHszGBQMo6r9YTg9VTDJsn0+i+rRNTs09dAMI8ZbD11AP0ten5XJxIqLQuDJJwIrchZ91J2rl+LMgnQo1yIyNw==
✨ Added parsing of html cards when using ?source=html with the v2 Admin API no issue - when sending `html` with `?source=html` to the v2 Admin API it's now possible to include blocks of HTML that will be extracted to html cards rather than going through the normal lossy html-to-mobiledoc conversion Example usage would be sending HTML in the following format: ```html <p>Some standard content...</p> <!--kg-card-begin: html--> <div class="my-custom-html">...</div> <!--kg-card-end: html--> <p>Some more content...</p> ``` In this case an html card will be created in the mobiledoc with the content `<div class="my-custom-html">...</div>`.
2019-05-04 13:30:59 +03:00
"@tryghost/kg-parser-plugins@^0.5.0":
version "0.5.0"
resolved "https://registry.yarnpkg.com/@tryghost/kg-parser-plugins/-/kg-parser-plugins-0.5.0.tgz#def06ea586e1a075105531f289d49f9c91996203"
integrity sha512-0Vq0lfSXKkn8mLYb4Wz0VlK7pNtrhoioPQnG8o+/Juu8r4CHtHiLgGqTPWzPntd4wXNnBLAS3SppPE5GRM1Wng==
✨ Added caption and language extraction for code blocks when converting HTML via API no issue - update @tryghost/html-to-mobiledoc to v0.3.0 - uses updated @tryghost/kg-parser-plugins that is now shared with Ghost-Admin
2019-05-03 13:55:38 +03:00
dependencies:
"@tryghost/kg-clean-basic-html" "^0.1.1"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Refactored members service logging and errors (#10919) * Installed @tryghost/members-ssr@0.2.1 refs https://github.com/TryGhost/Members/issues/38 This updates allows for dynamic access of the membersApi, which will be used in future when replacing the membersApi instance with a newly configured one. * Set the membersApiInstance logger to use common.logging refs https://github.com/TryGhost/Members/issues/38 Passes the Ghost logger to the members api, so that we can keep an eye on errors produced by the api. * Refactored memberService use to always use getter refs https://github.com/TryGhost/Members/issues/38 This will allow us to switch out the membersApi and the consumers of it to have the updated reference by going through a getter. * Installed @tryghost/members-api@0.3.0 refs https://github.com/TryGhost/Members/issues/38 Adds support for setting the logger * Uninstalled stripe@7.0.0 refs https://github.com/TryGhost/Members/issues/38 The stripe module is now a dep of members-api, as it should be * Updated members service to reconfigure settings refs https://github.com/TryGhost/Members/issues/38 Previously we were unable to stop an invalidly configured members api instance, now that we create a new instance, we can wait for the ready or error event and only switch it out then.
2019-07-18 10:37:11 +03:00
"@tryghost/members-api@0.3.0":
version "0.3.0"
resolved "https://registry.yarnpkg.com/@tryghost/members-api/-/members-api-0.3.0.tgz#b1fe4c4853237c1af95065f5db2bfb2072a87524"
integrity sha512-YtYjQwFGrN6uPuwWB8x1WqSuLe8c2m5wuPsyBpKXcV69yEqFz4QCyLMoYs4c6Y4lnfUf1lZAwnQSuDgczT46XQ==
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
dependencies:
bluebird "^3.5.4"
body-parser "^1.19.0"
cookies "^0.7.3"
express "^4.16.4"
ghost-ignition "^3.1.0"
jsonwebtoken "^8.5.1"
lodash "^4.17.11"
node-jose "^1.1.3"
Refactored members service logging and errors (#10919) * Installed @tryghost/members-ssr@0.2.1 refs https://github.com/TryGhost/Members/issues/38 This updates allows for dynamic access of the membersApi, which will be used in future when replacing the membersApi instance with a newly configured one. * Set the membersApiInstance logger to use common.logging refs https://github.com/TryGhost/Members/issues/38 Passes the Ghost logger to the members api, so that we can keep an eye on errors produced by the api. * Refactored memberService use to always use getter refs https://github.com/TryGhost/Members/issues/38 This will allow us to switch out the membersApi and the consumers of it to have the updated reference by going through a getter. * Installed @tryghost/members-api@0.3.0 refs https://github.com/TryGhost/Members/issues/38 Adds support for setting the logger * Uninstalled stripe@7.0.0 refs https://github.com/TryGhost/Members/issues/38 The stripe module is now a dep of members-api, as it should be * Updated members service to reconfigure settings refs https://github.com/TryGhost/Members/issues/38 Previously we were unable to stop an invalidly configured members api instance, now that we create a new instance, we can wait for the ready or error event and only switch it out then.
2019-07-18 10:37:11 +03:00
stripe "^7.4.0"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
Fixed members auth pages flashing on open (#10889) closes #10888 The real work for this was done in: https://github.com/TryGhost/Members/pull/37 Installed @tryghost/members-auth-pages@1.1.0 Installed @tryghost/members-theme-bindings@0.2.3
2019-07-09 14:05:47 +03:00
"@tryghost/members-auth-pages@1.1.0":
version "1.1.0"
resolved "https://registry.yarnpkg.com/@tryghost/members-auth-pages/-/members-auth-pages-1.1.0.tgz#417d27d009d90a509debfaf1ffd25ab1cc58aece"
integrity sha512-1+YeHB9JRYj5O48ItcfMz4CLzwrMj5CjAje7Gt+ytXf2+WE2fQeAT2WcWEKS4lBB0ZskDTYjBkGBv+6KQrGG/w==
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
dependencies:
Update dependency @tryghost/members-auth-pages to v0.2.2
2019-07-02 07:04:23 +03:00
"@tryghost/members-gateway-protocol" "^0.1.2"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
preact "^8.2.1"
preact-compat "^3.17.0"
react-stripe-elements "^2.0.3"
Fixed members auth pages flashing on open (#10889) closes #10888 The real work for this was done in: https://github.com/TryGhost/Members/pull/37 Installed @tryghost/members-auth-pages@1.1.0 Installed @tryghost/members-theme-bindings@0.2.3
2019-07-09 14:05:47 +03:00
"@tryghost/members-browser-auth@^0.2.0":
version "0.2.0"
resolved "https://registry.yarnpkg.com/@tryghost/members-browser-auth/-/members-browser-auth-0.2.0.tgz#d2d7ad20d5c5566380851a21aa64b59d9e768860"
integrity sha512-u2G4TdxJctX0ols/kmOqBFFSHVwPAA9sJRf3DQU5DEM0KiMllSvdhADKl2mbaH7rXO+3dNaTUJAc7yXDEu+TaQ==
Installed @tryghost/members-theme-bindings@0.1.0 no-issue
2019-04-23 17:49:36 +03:00
dependencies:
Fixed members auth pages flashing on open (#10889) closes #10888 The real work for this was done in: https://github.com/TryGhost/Members/pull/37 Installed @tryghost/members-auth-pages@1.1.0 Installed @tryghost/members-theme-bindings@0.2.3
2019-07-09 14:05:47 +03:00
"@tryghost/members-gateway-api" "^0.1.4"
Installed @tryghost/members-theme-bindings@0.1.0 no-issue
2019-04-23 17:49:36 +03:00
bluebird "^3.5.4"
ghost-ignition "^3.1.0"
lodash "^4.17.11"
Fixed members auth pages flashing on open (#10889) closes #10888 The real work for this was done in: https://github.com/TryGhost/Members/pull/37 Installed @tryghost/members-auth-pages@1.1.0 Installed @tryghost/members-theme-bindings@0.2.3
2019-07-09 14:05:47 +03:00
"@tryghost/members-gateway-api@^0.1.4":
version "0.1.4"
resolved "https://registry.yarnpkg.com/@tryghost/members-gateway-api/-/members-gateway-api-0.1.4.tgz#d458c3ccb574c109861c703a69a4d3e967eb19cc"
integrity sha512-AjrnB6htHy4tR6zvRhokxRkxbGRzMJCOg5fOjc05w2dzolMF2HUeYqIsMtyMn4pnogbJb25WBtkiwxq+s59UWA==
Installed @tryghost/members-theme-bindings@0.1.0 no-issue
2019-04-23 17:49:36 +03:00
dependencies:
Updated members-theme-bindings & public/members.js no-issue This updates Ghost to inject the exact urls we want to use for both the static members pages and the ssr endpoints we've configured for the frontend. This allows us to changes these without having to update the members repository, and gives a cleaner split between the two.
2019-06-25 10:30:02 +03:00
"@tryghost/members-gateway-protocol" "^0.1.2"
Installed @tryghost/members-theme-bindings@0.1.0 no-issue
2019-04-23 17:49:36 +03:00
bluebird "^3.5.4"
ghost-ignition "^3.1.0"
lodash "^4.17.11"
minivents "^2.2.0"
Updated members-theme-bindings & public/members.js no-issue This updates Ghost to inject the exact urls we want to use for both the static members pages and the ssr endpoints we've configured for the frontend. This allows us to changes these without having to update the members repository, and gives a cleaner split between the two.
2019-06-25 10:30:02 +03:00
"@tryghost/members-gateway-protocol@^0.1.2":
version "0.1.2"
resolved "https://registry.yarnpkg.com/@tryghost/members-gateway-protocol/-/members-gateway-protocol-0.1.2.tgz#afd004bd91b5e403ebb9e130d3208046ce621bc2"
integrity sha512-lZVJ5tKqAiGZhZ+JD+dSjHKN9q04W7JkWPVl/+zOl2FuVbMiIOvlcmrHWug++hZhAyYHcWjnRPM/paRkiR/KBQ==
dependencies:
bluebird "^3.5.4"
ghost-ignition "^3.1.0"
lodash "^4.17.11"
Refactored members service logging and errors (#10919) * Installed @tryghost/members-ssr@0.2.1 refs https://github.com/TryGhost/Members/issues/38 This updates allows for dynamic access of the membersApi, which will be used in future when replacing the membersApi instance with a newly configured one. * Set the membersApiInstance logger to use common.logging refs https://github.com/TryGhost/Members/issues/38 Passes the Ghost logger to the members api, so that we can keep an eye on errors produced by the api. * Refactored memberService use to always use getter refs https://github.com/TryGhost/Members/issues/38 This will allow us to switch out the membersApi and the consumers of it to have the updated reference by going through a getter. * Installed @tryghost/members-api@0.3.0 refs https://github.com/TryGhost/Members/issues/38 Adds support for setting the logger * Uninstalled stripe@7.0.0 refs https://github.com/TryGhost/Members/issues/38 The stripe module is now a dep of members-api, as it should be * Updated members service to reconfigure settings refs https://github.com/TryGhost/Members/issues/38 Previously we were unable to stop an invalidly configured members api instance, now that we create a new instance, we can wait for the ready or error event and only switch it out then.
2019-07-18 10:37:11 +03:00
"@tryghost/members-ssr@0.2.1":
version "0.2.1"
resolved "https://registry.yarnpkg.com/@tryghost/members-ssr/-/members-ssr-0.2.1.tgz#156846832caeeaaa831206522dcc1e5b94e1335b"
integrity sha512-pr3IYDymyDm++428LNJn3cfhZmW8j2Qtr/AmyPpmRIDSmpzbEk5wl28Dc+jWpH6ij36DbOwwfVUNZ9SW1Lwi3w==
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
dependencies:
bluebird "^3.5.3"
concat-stream "^2.0.0"
cookies "^0.7.3"
ghost-ignition "^3.0.4"
jsonwebtoken "^8.5.1"
lodash "^4.17.11"
Fixed members auth pages flashing on open (#10889) closes #10888 The real work for this was done in: https://github.com/TryGhost/Members/pull/37 Installed @tryghost/members-auth-pages@1.1.0 Installed @tryghost/members-theme-bindings@0.2.3
2019-07-09 14:05:47 +03:00
"@tryghost/members-theme-bindings@0.2.3":
version "0.2.3"
resolved "https://registry.yarnpkg.com/@tryghost/members-theme-bindings/-/members-theme-bindings-0.2.3.tgz#0f69ec555425a12a8e1436331c62408677354c2d"
integrity sha512-uFtAZvKSWJMlNeUv0U+jKQBfCJpXxewP5g+VPAZJPeY52JMM6uLfJIyhUtWWulvhyV+bJC3X9hb5vVHfkTARXQ==
Installed @tryghost/members-theme-bindings@0.1.0 no-issue
2019-04-23 17:49:36 +03:00
dependencies:
Fixed members auth pages flashing on open (#10889) closes #10888 The real work for this was done in: https://github.com/TryGhost/Members/pull/37 Installed @tryghost/members-auth-pages@1.1.0 Installed @tryghost/members-theme-bindings@0.2.3
2019-07-09 14:05:47 +03:00
"@tryghost/members-browser-auth" "^0.2.0"
Installed @tryghost/members-theme-bindings@0.1.0 no-issue
2019-04-23 17:49:36 +03:00
bluebird "^3.5.4"
ghost-ignition "^3.1.0"
lodash "^4.17.11"
Update dependency @tryghost/html-to-mobiledoc to v0.4.1 no issue - includes a fix for text content potentially being lost when converting html to mobiledoc via the API
2019-06-03 14:34:35 +03:00
"@tryghost/mobiledoc-kit@^0.11.2-ghost.4":
version "0.11.2-ghost.4"
resolved "https://registry.yarnpkg.com/@tryghost/mobiledoc-kit/-/mobiledoc-kit-0.11.2-ghost.4.tgz#144189e7e62748b3c56e7b723fa18a5e8c807ccf"
integrity sha512-C6FHFodOgxso+pZ6ArjBDRoGuzRHg42r3JJXzUX9ursIC2QLQUPsVDG42KN25x26EzOBUi6umB1CvO5bUryNPw==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
mobiledoc-dom-renderer "0.6.5"
mobiledoc-text-renderer "0.3.2"
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
"@tryghost/pretty-cli@1.2.1":
version "1.2.1"
resolved "https://registry.yarnpkg.com/@tryghost/pretty-cli/-/pretty-cli-1.2.1.tgz#b419e936c81c8aabf7f081645751c17004a5bb09"
integrity sha512-SFu5CcljG7mqxcA/J2WFE9M/bbpzJG0oVqT7P/P0HRbcTgBmQ5nMczO70WNASSqBglAh/uR34K0HVz5qynxyDw==
dependencies:
chalk "^2.4.1"
sywac "^1.2.1"
Update dependency @tryghost/social-urls to v0.1.1
2019-07-29 03:28:04 +03:00
"@tryghost/social-urls@0.1.1":
version "0.1.1"
resolved "https://registry.yarnpkg.com/@tryghost/social-urls/-/social-urls-0.1.1.tgz#41f377f05821205f768a1ab176bdb6c653166901"
integrity sha512-1NwBShArc5azfJSBUUKNFZjCGqaaOCJudAz3Z2HUCK62OwFYVCQwXQM6h9hgf5PJT3c7XBi1YHAF6AAuHPHADQ==
Migrated to use @tryghost/social-urls package refs #10618 - /lib/social/urls was extracted into SDK to move more modules out of the core and reduce coupling of the theme layer
2019-06-06 18:01:03 +03:00
dependencies:
bluebird "3.5.5"
ghost-ignition "3.1.0"
lodash "4.17.11"
Updated to use slugify method from SDK for safe string refs #10618 - Updated lib safe string security method
2019-05-07 07:48:28 +03:00
"@tryghost/string@^0.1.3":
version "0.1.3"
resolved "https://registry.yarnpkg.com/@tryghost/string/-/string-0.1.3.tgz#aad595f40f984570aff042b08f407e67dc47f692"
integrity sha512-JPVWEyI8NJEr1h/vlV0qL/Do05m45Tex+MGR5B6rvttl8XEUE3QwCFiG6mD7Yirjkja9h8EMjpgxiwWVCzKBPA==
dependencies:
unidecode "^0.1.8"
Updated dependency @tryghost/url-utils to v0.1.4 refs #10870 - Reverts moment-timezone version in url-utils to 0.5.23 to fix moment format issue
2019-07-30 17:47:38 +03:00
"@tryghost/url-utils@0.1.4":
version "0.1.4"
resolved "https://registry.yarnpkg.com/@tryghost/url-utils/-/url-utils-0.1.4.tgz#52e93092bb5f830fb3afc770c5d708b781b936ca"
integrity sha512-1PIIIlDvQmJXS8fM5QLbKp0Xdx3M4Hk53AzskRQWlYiK6BISX5U+4LxwzRg+rWQHhUltMQuQk00DWOZwoe4Ajg==
Migrated to use url-utils from Ghost-SDK (#10787) closes #10773 - The refactoring is a substitute for `urlService.utils` used previously throughout the codebase and now extracted into the separate module in Ghost-SDK - Added url-utils stubbing utility for test suites - Some tests had to be refactored to avoid double mocks (when url's are being reset inside of rested 'describe' groups)
2019-06-18 16:13:55 +03:00
dependencies:
cheerio "0.22.0"
lodash "4.17.11"
moment "2.24.0"
Updated dependency @tryghost/url-utils to v0.1.4 refs #10870 - Reverts moment-timezone version in url-utils to 0.5.23 to fix moment format issue
2019-07-30 17:47:38 +03:00
moment-timezone "0.5.23"
Migrated to use url-utils from Ghost-SDK (#10787) closes #10773 - The refactoring is a substitute for `urlService.utils` used previously throughout the codebase and now extracted into the separate module in Ghost-SDK - Added url-utils stubbing utility for test suites - Some tests had to be refactored to avoid double mocks (when url's are being reset inside of rested 'describe' groups)
2019-06-18 16:13:55 +03:00
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
"@types/bluebird@^3.5.25":
version "3.5.25"
resolved "https://registry.yarnpkg.com/@types/bluebird/-/bluebird-3.5.25.tgz#59188b871208092e37767e4b3d80c3b3eaae43bd"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
"@types/bluebird@^3.5.27":
version "3.5.27"
resolved "https://registry.yarnpkg.com/@types/bluebird/-/bluebird-3.5.27.tgz#61eb4d75dc6bfbce51cf49ee9bbebe941b2cb5d0"
integrity sha512-6BmYWSBea18+tSjjSC3QIyV93ZKAeNWGM7R6aYt1ryTZXrlHF+QLV0G2yV0viEGVyRkyQsWfMoJ0k/YghBX5sQ==
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
"@types/events@*":
version "3.0.0"
resolved "https://registry.yarnpkg.com/@types/events/-/events-3.0.0.tgz#2862f3f58a9a7f7c3e78d79f130dd4d71c25c2a7"
integrity sha512-EaObqwIvayI5a8dCzhFrjKzVwKLxjoG9T6Ppd5CEo07LRKfQ8Yokw54r5+Wq7FaBQ+yXRvQAYPrHwya1/UFt9g==
"@types/glob@^7.1.1":
version "7.1.1"
resolved "https://registry.yarnpkg.com/@types/glob/-/glob-7.1.1.tgz#aa59a1c6e3fbc421e07ccd31a944c30eba521575"
integrity sha512-1Bh06cbWJUHMC97acuD6UMG29nMt0Aqz1vF3guLfG+kHHJhy3AyohZFFxYk2f7Q1SQIrNwvncxAE0N/9s70F2w==
dependencies:
"@types/events" "*"
"@types/minimatch" "*"
"@types/node" "*"
"@types/minimatch@*":
version "3.0.3"
resolved "https://registry.yarnpkg.com/@types/minimatch/-/minimatch-3.0.3.tgz#3dca0e3f33b200fc7d1139c0cd96c1268cadfd9d"
integrity sha512-tHq6qdbT9U1IRSGf14CL0pUlULksvY9OZ+5eEgl1N7t+OA3tGvNpxJCzuKQlsNgCVwbAs670L1vcVQi8j9HjnA==
"@types/node@*":
version "11.13.8"
resolved "https://registry.yarnpkg.com/@types/node/-/node-11.13.8.tgz#e5d71173c95533be9842b2c798978f095f912aab"
integrity sha512-szA3x/3miL90ZJxUCzx9haNbK5/zmPieGraZEe4WI+3srN0eGLiT22NXeMHmyhNEopn+IrxqMc7wdVwvPl8meg==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
abab@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/abab/-/abab-2.0.0.tgz#aba0ab4c5eee2d4c79d3487d85450fb2376ebb0f"
integrity sha512-sY5AXXVZv4Y1VACTtR11UJCPHHudgY5i26Qj5TypE6DKlIApbwb5uqhXcJ5UUGbvZNRh7EeIoW+LrJumBsKp7w==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
abbrev@1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/abbrev/-/abbrev-1.1.1.tgz#f8f2c887ad10bf67f634f005b6987fed3179aac8"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
accepts@~1.3.5:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.3.5"
resolved "https://registry.yarnpkg.com/accepts/-/accepts-1.3.5.tgz#eb777df6011723a3b14e8a72c0805c8e86746bd2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
mime-types "~2.1.18"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
negotiator "0.6.1"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
accepts@~1.3.7:
version "1.3.7"
resolved "https://registry.yarnpkg.com/accepts/-/accepts-1.3.7.tgz#531bc726517a3b2b41f850021c6cc15eaab507cd"
integrity sha512-Il80Qs2WjYlJIBNzNkK6KYqlVMTbZLXgHx2oT0pU/fjRHyEp+PEfEPY0R3WCwAGVOtauxh1hOxNgIf5bv7dQpA==
dependencies:
mime-types "~2.1.24"
negotiator "0.6.2"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
acorn-globals@^4.3.0:
version "4.3.0"
resolved "https://registry.yarnpkg.com/acorn-globals/-/acorn-globals-4.3.0.tgz#e3b6f8da3c1552a95ae627571f7dd6923bb54103"
integrity sha512-hMtHj3s5RnuhvHPowpBYvJVj3rAar82JiDQHvGs1zO0l10ocX/xEdBShNHTJaboucJUsScghp74pH3s7EnHHQw==
dependencies:
acorn "^6.0.1"
acorn-walk "^6.0.1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
acorn-jsx@^3.0.0:
version "3.0.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/acorn-jsx/-/acorn-jsx-3.0.1.tgz#afdf9488fb1ecefc8348f6fb22f464e32a58b36b"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
acorn "^3.0.4"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
acorn-jsx@^5.0.0:
version "5.0.1"
resolved "https://registry.yarnpkg.com/acorn-jsx/-/acorn-jsx-5.0.1.tgz#32a064fd925429216a09b141102bfdd185fae40e"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
acorn-walk@^6.0.1:
version "6.1.1"
resolved "https://registry.yarnpkg.com/acorn-walk/-/acorn-walk-6.1.1.tgz#d363b66f5fac5f018ff9c3a1e7b6f8e310cc3913"
integrity sha512-OtUw6JUTgxA2QoqqmrmQ7F2NYqiBPi/L2jqHyFtllhOUvXYQXf0Z1CYUinIfyT4bTCGmrA7gX9FvHA81uzCoVw==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
acorn@^3.0.4:
version "3.3.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/acorn/-/acorn-3.3.0.tgz#45e37fb39e8da3f25baee3ff5369e2bb5f22017a"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
acorn@^5.5.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "5.7.3"
resolved "https://registry.yarnpkg.com/acorn/-/acorn-5.7.3.tgz#67aa231bf8812974b85235a96771eb6bd07ea279"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
acorn@^6.0.1:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
version "6.0.5"
resolved "https://registry.yarnpkg.com/acorn/-/acorn-6.0.5.tgz#81730c0815f3f3b34d8efa95cb7430965f4d887a"
Bumped and pinned version for @tryghost/html-to-mobiledoc no issue
2019-02-15 22:07:01 +03:00
acorn@^6.0.4:
version "6.1.0"
resolved "https://registry.yarnpkg.com/acorn/-/acorn-6.1.0.tgz#b0a3be31752c97a0f7013c5f4903b71a05db6818"
integrity sha512-MW/FjM+IvU9CgBzjO3UIPCE2pyEwUsoFl+VGdczOPEdxfGFjuKny/gN54mOuX7Qxmb9Rg9MCn2oKiSUeW+pjrw==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
acorn@^6.0.7:
version "6.1.1"
resolved "https://registry.yarnpkg.com/acorn/-/acorn-6.1.1.tgz#7d25ae05bb8ad1f9b699108e1094ecd7884adc1f"
integrity sha512-jPTiwtOxaHNaAPg/dmrJ/beuzLRnXtB0kQPQ8JpotKJgTB6rX6c8mlf315941pyjBSaPg8NHXS9fhP4u17DpGA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
addressparser@~0.3.2:
version "0.3.2"
resolved "https://registry.yarnpkg.com/addressparser/-/addressparser-0.3.2.tgz#59873f35e8fcf6c7361c10239261d76e15348bb2"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
ajv-keywords@^2.1.0:
version "2.1.1"
resolved "https://registry.yarnpkg.com/ajv-keywords/-/ajv-keywords-2.1.1.tgz#617997fc5f60576894c435f940d819e135b80762"
Update dependency ajv to v6.10.2
2019-07-15 03:27:43 +03:00
ajv@6.10.2:
version "6.10.2"
resolved "https://registry.yarnpkg.com/ajv/-/ajv-6.10.2.tgz#d3cea04d6b017b2894ad69040fec8b623eb4bd52"
integrity sha512-TXtUUEYHuaTEbLZWIKUr5pmBuhDLy+8KYtPYdcV8qC+pOZL+NKqYwvWSRrVXHn+ZmRRAu8vJTAznH7Oag6RVRw==
Added JSON Schema validation for /posts endpoint (#10468) refs #10438 - Added validation helper based on JSON schema - Added schema validation for POST/PUT in /posts endpoints - Refactored existing authors validation test suite - Extended test coverage with a minimally required structure of post.add validator
2019-02-08 13:40:58 +03:00
dependencies:
fast-deep-equal "^2.0.1"
fast-json-stable-stringify "^2.0.0"
json-schema-traverse "^0.4.1"
uri-js "^4.2.2"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
ajv@^5.2.3, ajv@^5.3.0:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "5.5.2"
resolved "https://registry.yarnpkg.com/ajv/-/ajv-5.5.2.tgz#73b5eeca3fab653e3d3f9422b341ad42205dc965"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
co "^4.6.0"
fast-deep-equal "^1.0.0"
fast-json-stable-stringify "^2.0.0"
json-schema-traverse "^0.3.0"
Update dependency ajv to v6.10.1
2019-07-08 03:26:16 +03:00
ajv@^6.10.0, ajv@^6.9.1:
version "6.10.0"
resolved "https://registry.yarnpkg.com/ajv/-/ajv-6.10.0.tgz#90d0d54439da587cd7e843bfb7045f50bd22bdf1"
integrity sha512-nffhOpkymDECQyR0mnsUtoCE8RlX38G0rYP+wgLWFyZuUyuuojSSvi/+euOiQBIn63whYwYVIIH1TvE3tu4OEg==
dependencies:
fast-deep-equal "^2.0.1"
fast-json-stable-stringify "^2.0.0"
json-schema-traverse "^0.4.1"
uri-js "^4.2.2"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ajv@^6.5.5:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "6.7.0"
resolved "https://registry.yarnpkg.com/ajv/-/ajv-6.7.0.tgz#e3ce7bb372d6577bb1839f1dfdfcbf5ad2948d96"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
dependencies:
fast-deep-equal "^2.0.1"
fast-json-stable-stringify "^2.0.0"
json-schema-traverse "^0.4.1"
uri-js "^4.2.2"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
alphanum-sort@^1.0.1, alphanum-sort@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/alphanum-sort/-/alphanum-sort-1.0.2.tgz#97a1119649b211ad33691d9f9f486a8ec9fbe0a3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update amperize to v0.5.2 no issue - includes a couple of bug fixes for fallback from probe-image-size to image-size
2019-06-11 14:16:23 +03:00
amperize@0.5.2:
version "0.5.2"
resolved "https://registry.yarnpkg.com/amperize/-/amperize-0.5.2.tgz#405233bf8b5a4c6ced48522be32aeb417b11db27"
integrity sha512-Y6MWCov1dnN+WYlWSp07qRWjdZYWtlOA+j6OOy/Lb73sPpKkcgxGXa91RjE5h+MGHFeamd0nWuLFngjcHbLWZA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
async "^3.0.1"
domutils "^1.7.0"
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 12:12:03 +03:00
emits "^3.0.0"
htmlparser2 "^3.9.2"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
image-size "^0.7.4"
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 12:12:03 +03:00
lodash "^4.17.4"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
probe-image-size "^4.0.0"
request "^2.83.0"
request-promise "^4.2.4"
Update amperize to version 0.3.4 🚀 (#7964) closes #7864 - manual PR is needed, because master is on amperize 1.0.0 - but 1.0.0 was not published on purpose - the latest release is 0.3.4 * chore: yarn.lock
2017-02-08 21:50:58 +03:00
uuid "^3.0.0"
Bump amperize to version 0.3.6 (#9264) no issue New version contains - dependency updates - Node v8 support - Eslint refactoring
2017-11-21 17:00:04 +03:00
validator "^9.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
analytics-node@3.3.0:
version "3.3.0"
resolved "https://registry.yarnpkg.com/analytics-node/-/analytics-node-3.3.0.tgz#7fb4be288c253d00857e840bf9ef642b64313ac0"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
dependencies:
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
"@segment/loosely-validate-event" "^2.0.0"
axios "^0.17.1"
axios-retry "^3.0.2"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
commander "^2.9.0"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
lodash.isstring "^4.0.1"
md5 "^2.2.1"
ms "^2.0.0"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
remove-trailing-slash "^0.1.0"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
uuid "^3.2.1"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ansi-colors@3.2.3:
version "3.2.3"
resolved "https://registry.yarnpkg.com/ansi-colors/-/ansi-colors-3.2.3.tgz#57d35b8686e851e2cc04c403f1c00203976a1813"
integrity sha512-LEHHyuhlPY3TmuUYMh2oz89lTShfvgbmzaBcxve9t/9Wuy7Dwf4yoAKcND7KFT1HAQfqZ12qtc+DUrBMeKF9nw==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
ansi-escapes@^3.0.0:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
version "3.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/ansi-escapes/-/ansi-escapes-3.1.0.tgz#f73207bb81207d75fd6c83f125af26eea378ca30"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ansi-escapes@^3.2.0:
version "3.2.0"
resolved "https://registry.yarnpkg.com/ansi-escapes/-/ansi-escapes-3.2.0.tgz#8780b98ff9dbf5638152d1f1fe5c1d7b4442976b"
integrity sha512-cBhpre4ma+U0T1oM5fXg7Dy1Jw7zzwv7lt/GoCpr+hDQJoYnKVPLL4dCvSEFMmQurOQvSrwT7SL/DAlhBI97RQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ansi-regex@^2.0.0:
version "2.1.1"
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-2.1.1.tgz#c3b33ab5ee360d86e0e628f0468ae7ef27d654df"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
ansi-regex@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-3.0.0.tgz#ed0317c322064f79466c02966bddb605ab37d998"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
ansi-regex@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-4.0.0.tgz#70de791edf021404c3fd615aa89118ae0432e5a9"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ansi-regex@^4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-4.1.0.tgz#8b9f8f08cf1acb843756a839ca8c7e3168c51997"
integrity sha512-1apePfXM1UOSqw0o9IiFAovVz9M5S1Dg+4TrDwfMewQ6p/rmMueb7tWZjQ1rx4Loy1ArBggoqGpfqqdI4rondg==
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
ansi-styles@^2.2.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.2.1"
resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-2.2.1.tgz#b432dd3358b634cf75e1e4664368240533c1ddbe"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
ansi-styles@^3.2.0, ansi-styles@^3.2.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "3.2.1"
resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-3.2.1.tgz#41fbb20243e50b12be0f04b8dedbf07520ce841d"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
color-convert "^1.9.0"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
any-promise@^1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/any-promise/-/any-promise-1.3.0.tgz#abc6afeedcea52e809cdc0376aed3ce39635d17f"
integrity sha1-q8av7tzqUugJzcA3au0845Y10X8=
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
append-field@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/append-field/-/append-field-1.0.0.tgz#1e3440e915f0b1203d23748e78edd7b9b5b43e56"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
aproba@^1.0.3:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/aproba/-/aproba-1.2.0.tgz#6802e6264efd18c790a1b0d517f0f2627bf2c94a"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
archiver-utils@^1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/archiver-utils/-/archiver-utils-1.3.0.tgz#e50b4c09c70bf3d680e32ff1b7994e9f9d895174"
dependencies:
glob "^7.0.0"
graceful-fs "^4.1.0"
lazystream "^1.0.0"
lodash "^4.8.0"
normalize-path "^2.0.0"
readable-stream "^2.0.0"
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
archiver-utils@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/archiver-utils/-/archiver-utils-2.1.0.tgz#e8a460e94b693c3e3da182a098ca6285ba9249e2"
integrity sha512-bEL/yUb/fNNiNTuUz979Z0Yg5L+LzLxGJz8x79lYmR54fmTIb6ob/hNQgkQnIUDWIFjZVQwl9Xs356I6BAMHfw==
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
dependencies:
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
glob "^7.1.4"
graceful-fs "^4.2.0"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
lazystream "^1.0.0"
lodash.defaults "^4.2.0"
lodash.difference "^4.5.0"
lodash.flatten "^4.4.0"
lodash.isplainobject "^4.0.6"
lodash.union "^4.6.0"
normalize-path "^3.0.0"
readable-stream "^2.0.0"
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
archiver@3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/archiver/-/archiver-3.0.3.tgz#7487be5172650619eb5e3a473032a348a3412cdc"
integrity sha512-d0W7NUyXoLklozHHfvWnHoHS3dvQk8eB22pv5tBwcu1jEO5eZY8W+gHytkAaJ0R8fU2TnNThrWYxjvFlKvRxpw==
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
dependencies:
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
archiver-utils "^2.1.0"
async "^2.6.3"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
buffer-crc32 "^0.2.1"
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
glob "^7.1.4"
readable-stream "^3.4.0"
tar-stream "^2.1.0"
zip-stream "^2.1.0"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
archiver@^1.3.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.3.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/archiver/-/archiver-1.3.0.tgz#4f2194d6d8f99df3f531e6881f14f15d55faaf22"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
archiver-utils "^1.3.0"
async "^2.0.0"
buffer-crc32 "^0.2.1"
glob "^7.0.0"
lodash "^4.8.0"
readable-stream "^2.0.0"
tar-stream "^1.5.0"
walkdir "^0.0.11"
zip-stream "^1.1.0"
are-we-there-yet@~1.1.2:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.1.5"
resolved "https://registry.yarnpkg.com/are-we-there-yet/-/are-we-there-yet-1.1.5.tgz#4b35c2944f062a8bfcda66410760350fe9ddfc21"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
delegates "^1.0.0"
🙀 Image field naming & new img_url helper (#8364) * 🙀 change database schema for images - rename user/post/tag images - contains all the required changes from the schema change * Refactor helper/meta data - rename cover to cover_image - also rename default settings to match the pattern - rename image to profile_image for user - rename image to feature_image for tags/posts * {{image}} >>> {{img_url}} - rename - change the functionality - attr is required - e.g. {{img_url feature_image}} * gscan 1.0.0 - update yarn.lock * Update casper reference: 1.0-changes - see https://github.com/TryGhost/Casper/commit/5487b4da8d2ad7c6a6d003a3a0ee1a860e0de34d
2017-04-24 20:21:47 +03:00
readable-stream "^2.0.6"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Build Tool
2019-07-02 03:34:50 +03:00
argparse@^1.0.7:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.0.10"
resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.10.tgz#bcd6791ea5ae09725e17e5ad988134cd40b3d911"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
sprintf-js "~1.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
arr-diff@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/arr-diff/-/arr-diff-4.0.0.tgz#d6461074febfec71e7e15235761a329a5dc7c520"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
arr-flatten@^1.1.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/arr-flatten/-/arr-flatten-1.1.0.tgz#36048bbff4e7b47e136644316c99669ea5ae91f1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
arr-union@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/arr-union/-/arr-union-3.1.0.tgz#e39b09aea9def866a8f206e288af63919bae39c4"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
array-each@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/array-each/-/array-each-1.0.1.tgz#a794af0c05ab1752846ee753a1f211a05ba0c44f"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
array-equal@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/array-equal/-/array-equal-1.0.0.tgz#8c2a5ef2472fd9ea742b04c77a75093ba2757c93"
integrity sha1-jCpe8kcv2ep0KwTHenUJO6J1fJM=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
array-find-index@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/array-find-index/-/array-find-index-1.0.2.tgz#df010aa1287e164bbda6f9723b0a96a1ec4187a1"
array-flatten@1.1.1:
version "1.1.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/array-flatten/-/array-flatten-1.1.1.tgz#9a5f699051b1e7073328f2a008968b64ea2955d2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
array-from@^2.1.1:
version "2.1.1"
resolved "https://registry.yarnpkg.com/array-from/-/array-from-2.1.1.tgz#cfe9d8c26628b9dc5aecc62a9f5d8f1f352c1195"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
array-slice@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/array-slice/-/array-slice-1.1.0.tgz#e368ea15f89bc7069f7ffb89aec3a6c7d4ac22d4"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
array-union@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/array-union/-/array-union-1.0.2.tgz#9a34410e4f4e3da23dea375be5be70f24778ec39"
integrity sha1-mjRBDk9OPaI96jdb5b5w8kd47Dk=
dependencies:
array-uniq "^1.0.1"
array-uniq@^1.0.1, array-uniq@^1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/array-uniq/-/array-uniq-1.0.3.tgz#af6ac877a25cc7f74e058894753858dfdb24fdb6"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
array-unique@^0.3.2:
version "0.3.2"
resolved "https://registry.yarnpkg.com/array-unique/-/array-unique-0.3.2.tgz#a894b75d4bc4f6cd679ef3244a9fd8f46ae2d428"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
arrify@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/arrify/-/arrify-1.0.1.tgz#898508da2226f380df904728456849c1501a4b0d"
integrity sha1-iYUI2iIm84DfkEcoRWhJwVAaSw0=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
asn1@~0.2.3:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "0.2.4"
resolved "https://registry.yarnpkg.com/asn1/-/asn1-0.2.4.tgz#8d2475dfab553bb33e77b54e59e880bb8ce23136"
dependencies:
safer-buffer "~2.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
assert-plus@1.0.0, assert-plus@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/assert-plus/-/assert-plus-1.0.0.tgz#f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
assertion-error@^1.1.0:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/assertion-error/-/assertion-error-1.1.0.tgz#e60b6b0e8f301bd97e5375215bda406c85118c0b"
assign-symbols@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/assign-symbols/-/assign-symbols-1.0.0.tgz#59667f41fadd4f20ccbc2bb96b8d4f7f78ec0367"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
astral-regex@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/astral-regex/-/astral-regex-1.0.0.tgz#6c8c3fb827dd43ee3918f27b82782ab7658a6fd9"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
async-limiter@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/async-limiter/-/async-limiter-1.0.0.tgz#78faed8c3d074ab81f22b4e985d79e8738f720f8"
integrity sha512-jp/uFnooOiO+L211eZOoSyzpOITMXx1rBITauYykG3BRYPu8h0UcxsPNB04RR5vo4Tyz3+ay17tR6JVf9qzYWg==
Removed coverage tasks from Gruntfile refs #9441
2019-04-08 17:12:48 +03:00
async@^1.4.0, async@^1.5.0, async@~1.5.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.5.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/async/-/async-1.5.2.tgz#ec6a61ae56480c0c3cb241c95618e20892f9672a"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
async@^2.0.0, async@^2.1.2, async@^2.6.0, async@^2.6.1:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "2.6.1"
resolved "https://registry.yarnpkg.com/async/-/async-2.6.1.tgz#b245a23ca71930044ec53fa46aa00a3e87c6a610"
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 12:12:03 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
lodash "^4.17.10"
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 12:12:03 +03:00
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
async@^2.6.3:
version "2.6.3"
resolved "https://registry.yarnpkg.com/async/-/async-2.6.3.tgz#d72625e2344a3656e3a3ad4fa749fa83299d82ff"
integrity sha512-zflvls11DCy+dQWzTW2dzuilv8Z5X/pjfmZOWba6TNIVDm+2UDaJmXSOXlasHKfNBs8oo3M0aT50fDEWfKZjXg==
dependencies:
lodash "^4.17.14"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
async@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/async/-/async-3.0.1.tgz#dfeb34657d1e63c94c0eee424297bf8a2c9a8182"
integrity sha512-ZswD8vwPtmBZzbn9xyi8XBQWXH3AvOQ43Za1KWYq7JeycrZuUYzx01KvHcVbXltjqH4y0MWrQ33008uLTqXuDw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
asynckit@^0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/asynckit/-/asynckit-0.4.0.tgz#c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
atob@^2.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/atob/-/atob-2.1.2.tgz#6d9517eb9e030d2436666651e86bd9f6f13533c9"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
autoprefixer@^6.3.1:
version "6.7.7"
resolved "https://registry.yarnpkg.com/autoprefixer/-/autoprefixer-6.7.7.tgz#1dbd1c835658e35ce3f9984099db00585c782014"
dependencies:
browserslist "^1.7.6"
caniuse-db "^1.0.30000634"
normalize-range "^0.1.2"
num2fraction "^1.2.2"
postcss "^5.2.16"
postcss-value-parser "^3.2.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
aws-sdk-apis@3.x:
version "3.1.10"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/aws-sdk-apis/-/aws-sdk-apis-3.1.10.tgz#4eed97f590a16cf080fd1b8d8cfdf2472de8ab0e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
aws-sdk@2.0.5:
version "2.0.5"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/aws-sdk/-/aws-sdk-2.0.5.tgz#f3ebb1898d0632b7b6672e8d77728cbbb69f98c6"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
aws-sdk-apis "3.x"
xml2js "0.2.6"
xmlbuilder "0.4.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
aws-sign2@~0.7.0:
version "0.7.0"
resolved "https://registry.yarnpkg.com/aws-sign2/-/aws-sign2-0.7.0.tgz#b46e890934a9591f2d2f6f86d7e6a9f1b3fe76a8"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
aws4@^1.8.0:
version "1.8.0"
resolved "https://registry.yarnpkg.com/aws4/-/aws4-1.8.0.tgz#f0e003d9ca9e7f59c7a508945d7b2ef9a04a542f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
axios-retry@^3.0.2:
version "3.1.1"
resolved "https://registry.yarnpkg.com/axios-retry/-/axios-retry-3.1.1.tgz#88d2971f671a9023b21d887c5dcac6c54f332cde"
dependencies:
is-retry-allowed "^1.1.0"
axios@^0.17.1:
version "0.17.1"
resolved "https://registry.yarnpkg.com/axios/-/axios-0.17.1.tgz#2d8e3e5d0bdbd7327f91bc814f5c57660f81824d"
dependencies:
follow-redirects "^1.2.5"
is-buffer "^1.1.5"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
babel-code-frame@^6.22.0:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
version "6.26.0"
resolved "https://registry.yarnpkg.com/babel-code-frame/-/babel-code-frame-6.26.0.tgz#63fd43f7dc1e3bb7ce35947db8fe369a3f58c74b"
dependencies:
chalk "^1.1.3"
esutils "^2.0.2"
js-tokens "^3.0.2"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
balanced-match@^0.4.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.4.2"
resolved "https://registry.yarnpkg.com/balanced-match/-/balanced-match-0.4.2.tgz#cb3f3e3c732dc0f01ee70b403f302e61d7709838"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
balanced-match@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/balanced-match/-/balanced-match-1.0.0.tgz#89b4d199ab2bee49de164ea02b89ce462d71b767"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
base64-js@^1.0.2:
version "1.3.0"
resolved "https://registry.yarnpkg.com/base64-js/-/base64-js-1.3.0.tgz#cab1e6118f051095e58b5281aea8c1cd22bfc0e3"
Update dependency node-jose to v1.1.3
2019-07-02 03:37:57 +03:00
base64url@^3.0.1:
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
version "3.0.1"
resolved "https://registry.yarnpkg.com/base64url/-/base64url-3.0.1.tgz#6399d572e2bc3f90a9a8b22d5dbb0a32d33f788d"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
base@^0.11.1:
version "0.11.2"
resolved "https://registry.yarnpkg.com/base/-/base-0.11.2.tgz#7bde5ced145b6d551a90db87f83c558b4eb48a8f"
dependencies:
cache-base "^1.0.1"
class-utils "^0.3.5"
component-emitter "^1.2.1"
define-property "^1.0.0"
isobject "^3.0.1"
mixin-deep "^1.2.0"
pascalcase "^0.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
bcrypt-pbkdf@^1.0.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz#a4301d389b6a43f9b67ff3ca11a3f6637e360e9e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
tweetnacl "^0.14.3"
Update bcryptjs to version 2.4.3 🚀 (#7949) * chore(package): update bcryptjs to version 2.4.3 https://greenkeeper.io/ * chore: yarn.lock
2017-02-08 20:54:16 +03:00
bcryptjs@2.4.3:
version "2.4.3"
resolved "https://registry.yarnpkg.com/bcryptjs/-/bcryptjs-2.4.3.tgz#9ab5627b93e60621ff7cdac5da9733027df1d0cb"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
bignumber.js@4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/bignumber.js/-/bignumber.js-4.1.0.tgz#db6f14067c140bd46624815a7916c92d9b6c24b1"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
Update dependency mysql to v2.17.1
2019-07-02 13:04:08 +03:00
bignumber.js@7.2.1:
version "7.2.1"
resolved "https://registry.yarnpkg.com/bignumber.js/-/bignumber.js-7.2.1.tgz#80c048759d826800807c4bfd521e50edbba57a5f"
integrity sha512-S4XzBk5sMB+Rcb/LNcpzXr57VRTxgAvaAEDAl1AwRx27j00hT84O6OkteE7u8UB3NuaaygCRrEpqox4uDOrbdQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
bl@^1.0.0, bl@^1.0.1:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
version "1.2.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/bl/-/bl-1.2.2.tgz#a160911717103c07410cef63ef51b397c025af9c"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
readable-stream "^2.3.5"
safe-buffer "^5.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
bl@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/bl/-/bl-3.0.0.tgz#3611ec00579fd18561754360b21e9f784500ff88"
integrity sha512-EUAyP5UHU5hxF8BPT0LKW8gjYLhq1DQIcneOX/pL/m2Alo+OYDQAJlHq+yseMP50Os2nHXOSic6Ss3vSQeyf4A==
dependencies:
readable-stream "^3.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
block-stream@*:
version "0.0.9"
resolved "https://registry.yarnpkg.com/block-stream/-/block-stream-0.0.9.tgz#13ebfe778a03205cfe03751481ebb4b3300c126a"
dependencies:
inherits "~2.0.0"
Bumped bookshelf-relations version to 1.1.1
2019-04-30 18:11:40 +03:00
bluebird@3.5.4, bluebird@^3.5.4:
Installed @tryghost/members-theme-bindings@0.1.0 no-issue
2019-04-23 17:49:36 +03:00
version "3.5.4"
resolved "https://registry.yarnpkg.com/bluebird/-/bluebird-3.5.4.tgz#d6cc661595de30d5b3af5fcedd3c0b3ef6ec5714"
integrity sha512-FG+nFEZChJrbQ9tIccIfZJBz3J7mLrAhxakAbnrJWn8d7aKOC+LWifa0G+p4ZqKp4y13T7juYvdhq9NzKdsrjw==
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
bluebird@3.5.5, bluebird@^3.5.0, bluebird@^3.5.5:
Migrated to use @tryghost/social-urls package refs #10618 - /lib/social/urls was extracted into SDK to move more modules out of the core and reduce coupling of the theme layer
2019-06-06 18:01:03 +03:00
version "3.5.5"
resolved "https://registry.yarnpkg.com/bluebird/-/bluebird-3.5.5.tgz#a8d0afd73251effbbd5fe384a77d73003c17a71f"
integrity sha512-5am6HnnfN+urzt4yfg7IgTbotDjIT/u8AJpEt0sIU9FtXfVeezXAPKswrG+xKUCOYAINpSdgZVDU6QFh+cuH3w==
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
bluebird@^3.0.5, bluebird@^3.4.1, bluebird@^3.4.3, bluebird@^3.4.6, bluebird@^3.5.3:
Update dependency bluebird to v3.5.5
2019-07-02 03:35:52 +03:00
version "3.5.3"
resolved "https://registry.yarnpkg.com/bluebird/-/bluebird-3.5.3.tgz#7d01c6f9616c9a51ab0f8c549a79dfe6ec33efa7"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
body-parser@1.18.3:
version "1.18.3"
resolved "https://registry.yarnpkg.com/body-parser/-/body-parser-1.18.3.tgz#5b292198ffdd553b3a0f20ded0592b956955c8b4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
bytes "3.0.0"
content-type "~1.0.4"
debug "2.6.9"
depd "~1.1.2"
http-errors "~1.6.3"
iconv-lite "0.4.23"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
on-finished "~2.3.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
qs "6.5.2"
raw-body "2.3.3"
type-is "~1.6.16"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
body-parser@1.19.0, body-parser@^1.19.0:
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
version "1.19.0"
resolved "https://registry.yarnpkg.com/body-parser/-/body-parser-1.19.0.tgz#96b2709e57c9c4e09a6fd66a8fd979844f69f08a"
integrity sha512-dhEPs72UPbDnAQJ9ZKMNTP6ptJaionhP5cBb541nXPlW60Jepo9RV/a4fX4XWW9CuFNK22krhrj1+rgzifNCsw==
dependencies:
bytes "3.1.0"
content-type "~1.0.4"
debug "2.6.9"
depd "~1.1.2"
http-errors "1.7.2"
iconv-lite "0.4.24"
on-finished "~2.3.0"
qs "6.7.0"
raw-body "2.4.0"
type-is "~1.6.17"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
body@^5.1.0:
version "5.1.0"
resolved "https://registry.yarnpkg.com/body/-/body-5.1.0.tgz#e4ba0ce410a46936323367609ecb4e6553125069"
dependencies:
continuable-cache "^0.3.1"
error "^7.0.0"
raw-body "~1.1.0"
safe-json-parse "~1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped bookshelf-relations version to 1.1.1
2019-04-30 18:11:40 +03:00
bookshelf-relations@1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/bookshelf-relations/-/bookshelf-relations-1.1.1.tgz#bb2909af1aa630285b30376ec46cd7fe5c734d5c"
integrity sha512-HkbYDeBwS/YzmHotVRS8xEgg4wMIcCqWToYB7BaMGfxOxAGLWxNo6OITovvxGSVuR0piRo8S/cbT1adFbQXZPw==
Add bookshelf-relations (#9252) no issue - added https://github.com/TryGhost/bookshelf-relations as dependency - remove existing tag handling --- * Important: Ensure we trigger parent initialize function - otherwise the plugin is unable to listen on model events - important: event order for listeners is Ghost -> Plugin - Ghost should be able to listen on the events as first instance - e.g. be able to modify/validate relationships * Fix tag validation - we detect lower/update case slugs for tags manually - this can't be taken over from the plugin obviously - ensure we update the target model e.g. this.set('tags', ...) * override base fn: `permittedAttributes` - ensure we call the base - put relations on top - each relation is allowed to be passed - the plugin will auto-unset any relations to it does not reach the database * Ensure we run add/edit/delete within a transaction - updating nested relationships requires sql queries - all sql statements have to run in a single transaction to ensure we rollback everything if an error occurs - use es6
2017-11-21 16:28:05 +03:00
dependencies:
Bumped bookshelf-relations version to 1.1.1
2019-04-30 18:11:40 +03:00
bluebird "3.5.4"
ghost-ignition "3.1.0"
Introduced model._changed refs #9248 - Bookshelf gives access to ".changed" before the update - Discussion: https://github.com/bookshelf/bookshelf/issues/1943 - We also need to know what has changed after the update to be able to decide if we should trigger events - Furthermore: Bookshelf cannot handle relation updates, it always marks relations as changed even though they did not change - Bumped bookshelf-relations to be able to - know if relations were updated - ensure we unset relations on bookshelf's ".changed"
2019-02-02 12:24:53 +03:00
lodash "4.17.11"
Add bookshelf-relations (#9252) no issue - added https://github.com/TryGhost/bookshelf-relations as dependency - remove existing tag handling --- * Important: Ensure we trigger parent initialize function - otherwise the plugin is unable to listen on model events - important: event order for listeners is Ghost -> Plugin - Ghost should be able to listen on the events as first instance - e.g. be able to modify/validate relationships * Fix tag validation - we detect lower/update case slugs for tags manually - this can't be taken over from the plugin obviously - ensure we update the target model e.g. this.set('tags', ...) * override base fn: `permittedAttributes` - ensure we call the base - put relations on top - each relation is allowed to be passed - the plugin will auto-unset any relations to it does not reach the database * Ensure we run add/edit/delete within a transaction - updating nested relationships requires sql queries - all sql statements have to run in a single transaction to ensure we rollback everything if an error occurs - use es6
2017-11-21 16:28:05 +03:00
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 23:53:11 +03:00
bookshelf@0.14.2:
version "0.14.2"
resolved "https://registry.yarnpkg.com/bookshelf/-/bookshelf-0.14.2.tgz#4b50b47a1e3d0265a1bfc118fa2036ad6a7493f2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bluebird "^3.4.3"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 23:53:11 +03:00
colorette "^1.0.7"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
create-error "~0.3.1"
inflection "^1.5.1"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 23:53:11 +03:00
lodash "^4.17.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
boolbase@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/boolbase/-/boolbase-1.0.0.tgz#68dff5fbe60c51eb37725ea9e3ed310dcc1e776e"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
brace-expansion@^1.1.7:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.1.11"
resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-1.1.11.tgz#3c7fcbf529d87226f3d2f52b966ff5271eb441dd"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
balanced-match "^1.0.0"
concat-map "0.0.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
braces@^2.3.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "2.3.2"
resolved "https://registry.yarnpkg.com/braces/-/braces-2.3.2.tgz#5979fd3f14cd531565e5fa2df1abfff1dfaee729"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
arr-flatten "^1.1.0"
array-unique "^0.3.2"
extend-shallow "^2.0.1"
fill-range "^4.0.0"
isobject "^3.0.1"
repeat-element "^1.1.2"
snapdragon "^0.8.1"
snapdragon-node "^2.0.1"
split-string "^3.0.2"
to-regex "^3.0.1"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
browser-process-hrtime@^0.1.2:
version "0.1.3"
resolved "https://registry.yarnpkg.com/browser-process-hrtime/-/browser-process-hrtime-0.1.3.tgz#616f00faef1df7ec1b5bf9cfe2bdc3170f26c7b4"
integrity sha512-bRFnI4NnjO6cnyLmOV/7PVoDEMJChlcfN0z4s1YMBY989/SvlfMI1lgCnkFUs53e9gQF+w7qu7XdllSTiSl8Aw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
browser-stdout@1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/browser-stdout/-/browser-stdout-1.3.0.tgz#f351d32969d32fa5d7a5567154263d928ae3bd1f"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
browser-stdout@1.3.1:
version "1.3.1"
resolved "https://registry.yarnpkg.com/browser-stdout/-/browser-stdout-1.3.1.tgz#baa559ee14ced73452229bad7326467c61fabd60"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
browserslist@^1.3.6, browserslist@^1.5.2, browserslist@^1.7.6:
version "1.7.7"
resolved "https://registry.yarnpkg.com/browserslist/-/browserslist-1.7.7.tgz#0bd76704258be829b2398bb50e4b62d1a166b0b9"
dependencies:
caniuse-db "^1.0.30000639"
electron-to-chromium "^1.2.7"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
brute-knex@4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/brute-knex/-/brute-knex-4.0.0.tgz#bb23549017565983e5ed7858214d8d15b690c3bb"
integrity sha512-mMpMvCJjWasupvbcYVPIb6QSWT67U8zKzp+nG6NRsQUeXJHE2fS76EG5r+NSzoQO7xKZ7kONnNkylnivZ9ASmA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
express-brute "^1.0.1"
knex "^0.17"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency bson-objectid to v1.3.0
2019-07-02 13:03:37 +03:00
bson-objectid@1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/bson-objectid/-/bson-objectid-1.3.0.tgz#f0f4c7c949fece975f12790510d75d7fe39fb456"
integrity sha512-YcB+lRJEEEIcHNLKyhmHujW7OCVE3+xr9IpEhlprBZnXgF3hqeePeexIsAaOtu1SbkgZRlJVUxvYZ3ngUOyIew==
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
buffer-alloc-unsafe@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/buffer-alloc-unsafe/-/buffer-alloc-unsafe-1.1.0.tgz#bd7dc26ae2972d0eda253be061dba992349c19f0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
buffer-alloc@^1.1.0, buffer-alloc@^1.2.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/buffer-alloc/-/buffer-alloc-1.2.0.tgz#890dd90d923a873e08e10e5fd51a57e5b7cce0ec"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
buffer-alloc-unsafe "^1.1.0"
buffer-fill "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
buffer-crc32@^0.2.1, buffer-crc32@^0.2.13:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.2.13"
resolved "https://registry.yarnpkg.com/buffer-crc32/-/buffer-crc32-0.2.13.tgz#0d333e3f00eac50aa1454abd30ef8c2a5d9a7242"
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
buffer-equal-constant-time@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz#f8e71132f7ffe6e01a5c9697a4c6f3e48d5cc819"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
buffer-fill@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/buffer-fill/-/buffer-fill-1.0.0.tgz#f8f78b76789888ef39f205cd637f68e702122b2c"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
buffer-from@^1.0.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/buffer-from/-/buffer-from-1.1.1.tgz#32713bc028f75c02fdb710d7c7bcec1f2c6070ef"
buffer@^5.1.0:
version "5.2.1"
resolved "https://registry.yarnpkg.com/buffer/-/buffer-5.2.1.tgz#dd57fa0f109ac59c602479044dca7b8b3d0b71d6"
dependencies:
base64-js "^1.0.2"
ieee754 "^1.1.4"
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
builtin-modules@^1.0.0:
version "1.1.1"
resolved "https://registry.yarnpkg.com/builtin-modules/-/builtin-modules-1.1.1.tgz#270f076c5a72c02f5b65a47df94c5fe3a278892f"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
bunyan-loggly@^1.3.1:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "1.4.1"
resolved "https://registry.yarnpkg.com/bunyan-loggly/-/bunyan-loggly-1.4.1.tgz#b6c806fb34bfcde2ce0d98878cf3534620b969e7"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
dependencies:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
json-stringify-safe "^5.0.1"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
node-loggly-bulk "^2.2.4"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
bunyan@1.8.12:
version "1.8.12"
resolved "https://registry.yarnpkg.com/bunyan/-/bunyan-1.8.12.tgz#f150f0f6748abdd72aeae84f04403be2ef113797"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
optionalDependencies:
dtrace-provider "~0.8"
moment "^2.10.6"
mv "~2"
safe-json-stringify "~1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
busboy@^0.2.11:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "0.2.14"
resolved "https://registry.yarnpkg.com/busboy/-/busboy-0.2.14.tgz#6c2a622efcf47c57bbbe1e2a9c37ad36c7925453"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
dicer "0.2.5"
readable-stream "1.1.x"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
bytes@1:
version "1.0.0"
resolved "https://registry.yarnpkg.com/bytes/-/bytes-1.0.0.tgz#3569ede8ba34315fab99c3e92cb04c7220de1fa8"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
bytes@3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/bytes/-/bytes-3.0.0.tgz#d32815404d689699f85a4ea4fa8755dd13a96048"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
bytes@3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/bytes/-/bytes-3.1.0.tgz#f6cf7933a360e0588fa9fde85651cdc7f805d1f6"
integrity sha512-zauLjrfCG+xvoyaqLoV8bLVXXNGC4JqlxFCutSDWA6fJrTo2ZuvLYTqZ7aHBLZSMOopbzwv8f+wZcVzfVTI2Dg==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
cache-base@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/cache-base/-/cache-base-1.0.1.tgz#0a7f46416831c8b662ee36fe4e7c59d76f666ab2"
dependencies:
collection-visit "^1.0.0"
component-emitter "^1.2.1"
get-value "^2.0.6"
has-value "^1.0.0"
isobject "^3.0.1"
set-value "^2.0.0"
to-object-path "^0.3.0"
union-value "^1.0.0"
unset-value "^1.0.0"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
cacheable-request@^6.0.0:
version "6.1.0"
resolved "https://registry.yarnpkg.com/cacheable-request/-/cacheable-request-6.1.0.tgz#20ffb8bd162ba4be11e9567d823db651052ca912"
integrity sha512-Oj3cAGPCqOZX7Rz64Uny2GYAZNliQSqfbePrgAQ1wKAihYmCUnraBtJtKcGR4xz7wF+LoJC+ssFZvv5BgF9Igg==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
clone-response "^1.0.2"
get-stream "^5.1.0"
http-cache-semantics "^4.0.0"
keyv "^3.0.0"
lowercase-keys "^2.0.0"
normalize-url "^4.1.0"
responselike "^1.0.2"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
call-me-maybe@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/call-me-maybe/-/call-me-maybe-1.0.1.tgz#26d208ea89e37b5cbde60250a15f031c16a4d66b"
integrity sha1-JtII6onje1y95gJQoV8DHBak1ms=
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
caller-path@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/caller-path/-/caller-path-0.1.0.tgz#94085ef63581ecd3daa92444a8fe94e82577751f"
dependencies:
callsites "^0.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
caller@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/caller/-/caller-1.0.1.tgz#b851860f70e195db3d277395aa1a7e23ea30ecf5"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
callsites@^0.2.0:
version "0.2.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/callsites/-/callsites-0.2.0.tgz#afab96262910a7f33c19a5775825c69f34e350ca"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
callsites@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/callsites/-/callsites-3.0.0.tgz#fb7eb569b72ad7a45812f93fd9430a3e410b3dd3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
camelcase-keys@^2.0.0:
version "2.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/camelcase-keys/-/camelcase-keys-2.1.0.tgz#308beeaffdf28119051efa1d932213c91b8f92e7"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
camelcase "^2.0.0"
map-obj "^1.0.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
camelcase-keys@^4.0.0:
version "4.2.0"
resolved "https://registry.yarnpkg.com/camelcase-keys/-/camelcase-keys-4.2.0.tgz#a2aa5fb1af688758259c32c141426d78923b9b77"
integrity sha1-oqpfsa9oh1glnDLBQUJteJI7m3c=
dependencies:
camelcase "^4.1.0"
map-obj "^2.0.0"
quick-lru "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
camelcase@^2.0.0, camelcase@^2.0.1:
version "2.1.1"
resolved "https://registry.yarnpkg.com/camelcase/-/camelcase-2.1.1.tgz#7c1d16d679a1bbe59ca02cacecfb011e201f5a1f"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
camelcase@^4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/camelcase/-/camelcase-4.1.0.tgz#d545635be1e33c542649c69173e5de6acfae34dd"
integrity sha1-1UVjW+HjPFQmScaRc+Xeas+uNN0=
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
camelcase@^5.0.0:
version "5.3.1"
resolved "https://registry.yarnpkg.com/camelcase/-/camelcase-5.3.1.tgz#e3c9b31569e106811df242f715725a1f4c494320"
integrity sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
caniuse-api@^1.5.2:
version "1.6.1"
resolved "https://registry.yarnpkg.com/caniuse-api/-/caniuse-api-1.6.1.tgz#b534e7c734c4f81ec5fbe8aca2ad24354b962c6c"
dependencies:
browserslist "^1.3.6"
caniuse-db "^1.0.30000529"
lodash.memoize "^4.1.2"
lodash.uniq "^4.5.0"
caniuse-db@^1.0.30000529, caniuse-db@^1.0.30000634, caniuse-db@^1.0.30000639:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "1.0.30000929"
resolved "https://registry.yarnpkg.com/caniuse-db/-/caniuse-db-1.0.30000929.tgz#f18c557b9cbf33e2787134c915b82e3ed3331b87"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
caseless@~0.12.0:
version "0.12.0"
resolved "https://registry.yarnpkg.com/caseless/-/caseless-0.12.0.tgz#1b681c21ff84033c826543090689420d187151dc"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
chai@^4.1.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "4.2.0"
resolved "https://registry.yarnpkg.com/chai/-/chai-4.2.0.tgz#760aa72cf20e3795e84b12877ce0e83737aa29e5"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
assertion-error "^1.1.0"
check-error "^1.0.2"
deep-eql "^3.0.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
get-func-name "^2.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
pathval "^1.1.0"
type-detect "^4.0.5"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
chalk@2.4.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "2.4.1"
resolved "https://registry.yarnpkg.com/chalk/-/chalk-2.4.1.tgz#18c49ab16a037b6eb0152cc83e3471338215b66e"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
ansi-styles "^3.2.1"
escape-string-regexp "^1.0.5"
supports-color "^5.3.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
chalk@2.4.2, chalk@^2.0.0, chalk@^2.0.1, chalk@^2.1.0, chalk@^2.4.1, chalk@^2.4.2, chalk@~2.4.1:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "2.4.2"
resolved "https://registry.yarnpkg.com/chalk/-/chalk-2.4.2.tgz#cd42541677a54333cf541a49108c1432b44c9424"
dependencies:
ansi-styles "^3.2.1"
escape-string-regexp "^1.0.5"
supports-color "^5.3.0"
Bumped chalk from version 1.1.3 to 2.4.2 refs #9389 - i was not able to find a breaking change, which affects us - https://github.com/chalk/chalk/releases/tag/v2.0.0
2019-01-21 16:21:13 +03:00
chalk@^1.0.0, chalk@^1.1.1, chalk@^1.1.3:
version "1.1.3"
resolved "https://registry.yarnpkg.com/chalk/-/chalk-1.1.3.tgz#a8115c55e4a702fe4d150abd3872822a7e09fc98"
dependencies:
ansi-styles "^2.2.1"
escape-string-regexp "^1.0.2"
has-ansi "^2.0.0"
strip-ansi "^3.0.0"
supports-color "^2.0.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
chardet@^0.4.0:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "0.4.2"
resolved "https://registry.yarnpkg.com/chardet/-/chardet-0.4.2.tgz#b5473b33dc97c424e5d98dc87d55d4d8a29c8bf2"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
chardet@^0.7.0:
version "0.7.0"
resolved "https://registry.yarnpkg.com/chardet/-/chardet-0.7.0.tgz#90094849f0937f2eedc2425d0d28a9e5f0cbad9e"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
charenc@~0.0.1:
version "0.0.2"
resolved "https://registry.yarnpkg.com/charenc/-/charenc-0.0.2.tgz#c0a1d2f3a7092e03774bfa83f14c0fc5790a8667"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
check-error@^1.0.2:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/check-error/-/check-error-1.0.2.tgz#574d312edd88bb5dd8912e9286dd6c0aed4aac82"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
cheerio@0.22.0:
version "0.22.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/cheerio/-/cheerio-0.22.0.tgz#a9baa860a3f9b595a6b81b1a86873121ed3a269e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
css-select "~1.2.0"
dom-serializer "~0.1.0"
entities "~1.1.1"
htmlparser2 "^3.9.1"
lodash.assignin "^4.0.9"
lodash.bind "^4.1.4"
lodash.defaults "^4.0.1"
lodash.filter "^4.4.0"
lodash.flatten "^4.2.0"
lodash.foreach "^4.3.0"
lodash.map "^4.4.0"
lodash.merge "^4.4.0"
lodash.pick "^4.2.1"
lodash.reduce "^4.4.0"
lodash.reject "^4.4.0"
lodash.some "^4.4.0"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
chownr@^1.0.1, chownr@^1.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/chownr/-/chownr-1.1.1.tgz#54726b8b8fff4df053c42187e801fb4412df1494"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
circular-json@^0.3.1:
version "0.3.3"
resolved "https://registry.yarnpkg.com/circular-json/-/circular-json-0.3.3.tgz#815c99ea84f6809529d2f45791bdf82711352d66"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
clap@^1.0.9:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.2.3"
resolved "https://registry.yarnpkg.com/clap/-/clap-1.2.3.tgz#4f36745b32008492557f46412d66d50cb99bce51"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
chalk "^1.1.3"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
class-utils@^0.3.5:
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
version "0.3.6"
resolved "https://registry.yarnpkg.com/class-utils/-/class-utils-0.3.6.tgz#f93369ae8b9a7ce02fd41faad0ca83033190c463"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
arr-union "^3.1.0"
define-property "^0.2.5"
isobject "^3.0.0"
static-extend "^0.1.1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
cli-cursor@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/cli-cursor/-/cli-cursor-2.1.0.tgz#b35dac376479facc3e94747d41d0d0f5238ffcb5"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
restore-cursor "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
cli-width@^2.0.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/cli-width/-/cli-width-2.2.0.tgz#ff19ede8a9a5e579324147b0c11f0fbcbabed639"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
cliui@^3.0.3:
version "3.2.0"
resolved "https://registry.yarnpkg.com/cliui/-/cliui-3.2.0.tgz#120601537a916d29940f934da3b48d585a39213d"
dependencies:
string-width "^1.0.1"
strip-ansi "^3.0.1"
wrap-ansi "^2.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
cliui@^4.0.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/cliui/-/cliui-4.1.0.tgz#348422dbe82d800b3022eef4f6ac10bf2e4d1b49"
integrity sha512-4FG+RSG9DL7uEwRUZXZn3SS34DiDPfzP0VOiEwtUWlE+AR2EIg+hSyvrIgUUfhdgR/UkAeW2QHgeP+hWrXs7jQ==
dependencies:
string-width "^2.1.1"
strip-ansi "^4.0.0"
wrap-ansi "^2.0.0"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
clone-response@^1.0.2:
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/clone-response/-/clone-response-1.0.2.tgz#d1dc973920314df67fbeb94223b4ee350239e96b"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
integrity sha1-0dyXOSAxTfZ/vrlCI7TuNQI56Ws=
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
mimic-response "^1.0.0"
Removed run-sequence dev dependency no issue - not used
2017-11-28 21:34:43 +03:00
clone@^1.0.2:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/clone/-/clone-1.0.4.tgz#da309cc263df15994c688ca902179ca3c7cd7c7e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
co@^4.6.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/co/-/co-4.6.0.tgz#6ea6bdf3d853ae54ccb8e47bfa0bf3f9031fb184"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
coa@~1.0.1:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/coa/-/coa-1.0.4.tgz#a9ef153660d6a86a8bdec0289a5c684d217432fd"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
q "^1.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
code-point-at@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/code-point-at/-/code-point-at-1.1.0.tgz#0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
coffeescript@~1.10.0:
version "1.10.0"
resolved "https://registry.yarnpkg.com/coffeescript/-/coffeescript-1.10.0.tgz#e7aa8301917ef621b35d8a39f348dcdd1db7e33e"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
collection-visit@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/collection-visit/-/collection-visit-1.0.0.tgz#4bc0373c164bc3291b4d368c829cf1a80a59dca0"
dependencies:
map-visit "^1.0.0"
object-visit "^1.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
color-convert@^1.3.0, color-convert@^1.9.0, color-convert@^1.9.1:
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
version "1.9.3"
resolved "https://registry.yarnpkg.com/color-convert/-/color-convert-1.9.3.tgz#bb71850690e1f136567de629d2d5471deda4c1e8"
dependencies:
color-name "1.1.3"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
color-name@1.1.3:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/color-name/-/color-name-1.1.3.tgz#a7d0558bd89c42f795dd42328f740831ca53bc25"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
color-name@^1.0.0:
version "1.1.4"
resolved "https://registry.yarnpkg.com/color-name/-/color-name-1.1.4.tgz#c2a09a87acbde69543de6f63fa3995c826c536a2"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
color-string@^0.3.0:
version "0.3.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/color-string/-/color-string-0.3.0.tgz#27d46fb67025c5c2fa25993bfbf579e47841b991"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
color-name "^1.0.0"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
color-string@^1.5.2:
version "1.5.3"
resolved "https://registry.yarnpkg.com/color-string/-/color-string-1.5.3.tgz#c9bbc5f01b58b5492f3d6857459cb6590ce204cc"
dependencies:
color-name "^1.0.0"
simple-swizzle "^0.2.2"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
color@^0.11.0:
version "0.11.4"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/color/-/color-0.11.4.tgz#6d7b5c74fb65e841cd48792ad1ed5e07b904d764"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
clone "^1.0.2"
color-convert "^1.3.0"
color-string "^0.3.0"
Update dependency sharp to v0.22.1
2019-07-02 03:42:14 +03:00
color@^3.1.1:
version "3.1.2"
resolved "https://registry.yarnpkg.com/color/-/color-3.1.2.tgz#68148e7f85d41ad7649c5fa8c8106f098d229e10"
integrity sha512-vXTJhHebByxZn3lDvDJYw4lR5+uB3vuoHsuYA5AKuxRVn5wzzIfQKGLBmgdVRHKTJYeK5rvJcHnrd0Li49CFpg==
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
dependencies:
color-convert "^1.9.1"
color-string "^1.5.2"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
colorette@1.0.8:
version "1.0.8"
resolved "https://registry.yarnpkg.com/colorette/-/colorette-1.0.8.tgz#421ff11c80b7414027ebed922396bc1833d1903c"
integrity sha512-X6Ck90ReaF+EfKdVGB7vdIQ3dr651BbIrBwY5YBKg13fjH+940sTtp7/Pkx33C6ntYfQcRumOs/aUQhaRPpbTQ==
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 23:53:11 +03:00
colorette@^1.0.7:
version "1.0.7"
resolved "https://registry.yarnpkg.com/colorette/-/colorette-1.0.7.tgz#7adf43c445ee63a541b4a4aef7d13f03df1e0cc0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
colormin@^1.0.5:
version "1.1.2"
resolved "https://registry.yarnpkg.com/colormin/-/colormin-1.1.2.tgz#ea2f7420a72b96881a38aae59ec124a6f7298133"
dependencies:
color "^0.11.0"
css-color-names "0.0.4"
has "^1.0.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
colors@^1.1.2:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "1.3.3"
resolved "https://registry.yarnpkg.com/colors/-/colors-1.3.3.tgz#39e005d546afe01e01f9c4ca8fa50f686a01205d"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
colors@~1.1.2:
version "1.1.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/colors/-/colors-1.1.2.tgz#168a4701756b6a7f51a12ce0c97bfa28c084ed63"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
combined-stream@^1.0.6, combined-stream@~1.0.6:
version "1.0.7"
resolved "https://registry.yarnpkg.com/combined-stream/-/combined-stream-1.0.7.tgz#2d1d24317afb8abe95d6d2c0b07b57813539d828"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
delayed-stream "~1.0.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
commander@2.11.0:
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 21:32:03 +03:00
version "2.11.0"
resolved "https://registry.yarnpkg.com/commander/-/commander-2.11.0.tgz#157152fd1e7a6c8d98a5b715cf376df928004563"
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
commander@^2.19.0, commander@^2.9.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.19.0"
resolved "https://registry.yarnpkg.com/commander/-/commander-2.19.0.tgz#f6198aa84e5b83c46054b94ddedbfed5ee9ff12a"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
commander@^2.20.0, commander@~2.20.0:
Update Build Tool
2019-07-02 03:34:50 +03:00
version "2.20.0"
resolved "https://registry.yarnpkg.com/commander/-/commander-2.20.0.tgz#d58bb2b5c1ee8f87b0d340027e9e94e222c5a422"
integrity sha512-7j2y+40w61zy6YC2iRNpUe/NwhNyoXrYpHMrSunaMG64nRnaf96zO/KMQR4OyN/UnE5KLyEBnKHd4aG3rskjpQ==
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
commander@~2.17.1:
version "2.17.1"
resolved "https://registry.yarnpkg.com/commander/-/commander-2.17.1.tgz#bd77ab7de6de94205ceacc72f1716d29f20a77bf"
Bumped gscan version to 2.6.0 no issue - Updated valid theme fixture to be inline with warning that was added when using {{each}} helper instead of {{foreach}}
2019-05-08 17:56:22 +03:00
common-tags@^1.8.0:
version "1.8.0"
resolved "https://registry.yarnpkg.com/common-tags/-/common-tags-1.8.0.tgz#8e3153e542d4a39e9b10554434afaaf98956a937"
integrity sha512-6P6g0uetGpW/sdyUy/iQQCbFF0kWVMSIVSyYz7Zgjcgh8mgw8PQzDNZeyZ5DQ2gM7LBoZPHmnjz8rUthkBG5tw==
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
compare-ver@^2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/compare-ver/-/compare-ver-2.0.2.tgz#8ecb8eb9dbf23ff2d87c56e74cbbb2cb7ffd9d7a"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
component-emitter@^1.2.0, component-emitter@^1.2.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.2.1"
resolved "https://registry.yarnpkg.com/component-emitter/-/component-emitter-1.2.1.tgz#137918d6d78283f7df7a6b7c5a63e140e69425e6"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
component-type@^1.2.1:
version "1.2.1"
resolved "https://registry.yarnpkg.com/component-type/-/component-type-1.2.1.tgz#8a47901700238e4fc32269771230226f24b415a9"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
compress-commons@^1.2.0:
version "1.2.2"
resolved "https://registry.yarnpkg.com/compress-commons/-/compress-commons-1.2.2.tgz#524a9f10903f3a813389b0225d27c48bb751890f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
buffer-crc32 "^0.2.1"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
crc32-stream "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
normalize-path "^2.0.0"
readable-stream "^2.0.0"
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
compress-commons@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/compress-commons/-/compress-commons-2.0.0.tgz#c555107ef865eef0ba8a31fe56ec79f813ed3e65"
integrity sha512-gnETNngrfsAoLBENM8M0DoiCDJkHwz3OfIg4mBtqKDcRgE4oXNwHxHxgHvwKKlrcD7eZ7BVTy4l8t9xVF7q3FQ==
dependencies:
buffer-crc32 "^0.2.13"
crc32-stream "^2.0.0"
normalize-path "^3.0.0"
readable-stream "^2.3.6"
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
compressible@~2.0.16:
version "2.0.17"
resolved "https://registry.yarnpkg.com/compressible/-/compressible-2.0.17.tgz#6e8c108a16ad58384a977f3a482ca20bff2f38c1"
integrity sha512-BGHeLCK1GV7j1bSmQQAi26X+GgWcTjLr/0tzSvMCl3LH1w1IJ4PFSPoV5316b30cneTziC+B1a+3OjoSUcQYmw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
mime-db ">= 1.40.0 < 2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
compression@1.7.4:
version "1.7.4"
resolved "https://registry.yarnpkg.com/compression/-/compression-1.7.4.tgz#95523eff170ca57c29a0ca41e6fe131f41e5bb8f"
integrity sha512-jaSIDzP9pZVS4ZfQ+TzvtiWhdpFhE2RDHz8QJkpX9SIpLq88VueF5jJw6t+6CUQcAoA6t+x89MLrWAqpfDE8iQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
accepts "~1.3.5"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
bytes "3.0.0"
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
compressible "~2.0.16"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
debug "2.6.9"
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
on-headers "~1.0.2"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
safe-buffer "5.1.2"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
vary "~1.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
concat-map@0.0.1:
version "0.0.1"
resolved "https://registry.yarnpkg.com/concat-map/-/concat-map-0.0.1.tgz#d8a96bd77fd68df7793a73036a3ba0d5405d477b"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
concat-stream@1.6.0:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
version "1.6.0"
resolved "https://registry.yarnpkg.com/concat-stream/-/concat-stream-1.6.0.tgz#0aac662fd52be78964d5532f694784e70110acf7"
dependencies:
inherits "^2.0.3"
readable-stream "^2.2.2"
typedarray "^0.0.6"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
concat-stream@1.6.2, concat-stream@^1.5.2, concat-stream@^1.6.0:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
version "1.6.2"
resolved "https://registry.yarnpkg.com/concat-stream/-/concat-stream-1.6.2.tgz#904bdf194cd3122fc675c77fc4ac3d4ff0fd1a34"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
buffer-from "^1.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
inherits "^2.0.3"
readable-stream "^2.2.2"
typedarray "^0.0.6"
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
concat-stream@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/concat-stream/-/concat-stream-2.0.0.tgz#414cf5af790a48c60ab9be4527d56d5e41133cb1"
integrity sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==
dependencies:
buffer-from "^1.0.0"
inherits "^2.0.3"
readable-stream "^3.0.2"
typedarray "^0.0.6"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
config-chain@~1.1.5:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.12"
resolved "https://registry.yarnpkg.com/config-chain/-/config-chain-1.1.12.tgz#0fde8d091200eb5e808caf25fe618c02f48e4efa"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
ini "^1.3.4"
proto-list "~1.2.1"
Update dependency connect-slashes to v1.4.0
2019-07-02 13:03:51 +03:00
connect-slashes@1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/connect-slashes/-/connect-slashes-1.4.0.tgz#fe884e9d130e9bd0a40d8ee502c1dfa269f94373"
integrity sha512-BJRbgSczzlsRwyF64DxGNIizBTxUf7f/tAsDzq2Nq8eLrm2160vVfm/4vQcjrT4qVFu6qDCqPK+vDaEWJsnSzA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
console-control-strings@^1.0.0, console-control-strings@~1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/console-control-strings/-/console-control-strings-1.1.0.tgz#3d7cf4464db6446ea644bf4b39507f9851008e8e"
Update express to version 4.14.1 🚀 (#7912) * chore(package): update express to version 4.14.1 https://greenkeeper.io/ * chore: yarn.lock
2017-02-08 18:33:15 +03:00
content-disposition@0.5.2:
version "0.5.2"
resolved "https://registry.yarnpkg.com/content-disposition/-/content-disposition-0.5.2.tgz#0cf68bb9ddf5f2be7961c3a85178cb85dba78cb4"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
content-disposition@0.5.3:
version "0.5.3"
resolved "https://registry.yarnpkg.com/content-disposition/-/content-disposition-0.5.3.tgz#e130caf7e7279087c5616c2007d0485698984fbd"
integrity sha512-ExO0774ikEObIAEV9kDo50o+79VCUdEB6n6lzKgGwupcVeRlhrj3qGAfwq8G6uBJjkqLrhT0qEYFcWng8z1z0g==
dependencies:
safe-buffer "5.1.2"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
content-type@^1.0.2, content-type@~1.0.4:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/content-type/-/content-type-1.0.4.tgz#e138cc75e040c727b1966fe5e5f8c9aee256fe3b"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
continuable-cache@^0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/continuable-cache/-/continuable-cache-0.3.1.tgz#bd727a7faed77e71ff3985ac93351a912733ad0f"
Update dependency cookie-session to v1.3.3
2019-07-02 03:36:27 +03:00
cookie-session@1.3.3:
version "1.3.3"
resolved "https://registry.yarnpkg.com/cookie-session/-/cookie-session-1.3.3.tgz#54fa63881bf87c4961863f7c059670be7517fdae"
integrity sha512-GrMdrU1YTQWtmVTo0Rj3peeZRMc2xJrBslFYtZcYTo+hrSLmrcf69OrRkDi84xTfylgCy2wgpRHyY4le6lE5+A==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency cookie-session to v1.3.3
2019-07-02 03:36:27 +03:00
cookies "0.7.3"
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
debug "2.6.9"
Update dependency cookie-session to v1.3.3
2019-07-02 03:36:27 +03:00
on-headers "~1.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
cookie-signature@1.0.6:
version "1.0.6"
resolved "https://registry.yarnpkg.com/cookie-signature/-/cookie-signature-1.0.6.tgz#e303a882b342cc3ee8ca513a79999734dab3ae2c"
cookie@0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/cookie/-/cookie-0.3.1.tgz#e7e0a1f9ef43b4c8ba925c5c5a96e806d16873bb"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
cookie@0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/cookie/-/cookie-0.4.0.tgz#beb437e7022b3b6d49019d088665303ebe9c14ba"
integrity sha512-+Hp8fLp57wnUSt0tY0tHEXh4voZRDnoIrZPqlo3DPiI4y9lwg/jqx+1Om94/W6ZaPDOUbnjOt/99w66zk+l1Xg==
Removed superagent dependency (#10535) no issue - Migrated default scheduling adapter to use Got via the request proxy - SchedulingDefault is the only module that was using superagent so removed it as a dependency
2019-03-04 10:59:38 +03:00
cookiejar@^2.1.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/cookiejar/-/cookiejar-2.1.2.tgz#dd8a235530752f988f9a0844f3fc589e3111125c"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency cookie-session to v1.3.3
2019-07-02 03:36:27 +03:00
cookies@0.7.3, cookies@^0.7.3:
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
version "0.7.3"
resolved "https://registry.yarnpkg.com/cookies/-/cookies-0.7.3.tgz#7912ce21fbf2e8c2da70cf1c3f351aecf59dadfa"
integrity sha512-+gixgxYSgQLTaTIilDHAdlNPZDENDQernEMiIcZpYYP14zgHsCt4Ce1FEjFtcp6GefhozebB6orvhAAWx/IS0A==
dependencies:
depd "~1.1.2"
keygrip "~1.0.3"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
copy-descriptor@^0.1.0:
version "0.1.1"
resolved "https://registry.yarnpkg.com/copy-descriptor/-/copy-descriptor-0.1.1.tgz#676f6eb3c39997c2ee1ac3a924fd6124748f578d"
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
core-js@^2.5.7:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "2.6.2"
resolved "https://registry.yarnpkg.com/core-js/-/core-js-2.6.2.tgz#267988d7268323b349e20b4588211655f0e83944"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
core-js@^2.6.5:
version "2.6.9"
resolved "https://registry.yarnpkg.com/core-js/-/core-js-2.6.9.tgz#6b4b214620c834152e179323727fc19741b084f2"
integrity sha512-HOpZf6eXmnl7la+cUdMnLvUxKNqLUzJvgIziQ0DiF3JwSImNphIqdGqzj6hIKyX04MmV0poclQ7+wjWvxQyR2A==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
core-util-is@1.0.2, core-util-is@~1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/core-util-is/-/core-util-is-1.0.2.tgz#b5fd54220aa2bc5ab57aab7140c940754503c1a7"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
cors@2.8.5:
version "2.8.5"
resolved "https://registry.yarnpkg.com/cors/-/cors-2.8.5.tgz#eac11da51592dd86b9f06f6e7ac293b3df875d29"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update cors to version 2.8.3 🚀 (#8240) * chore(package): update cors to version 2.8.3 https://greenkeeper.io/ * chore: yarn.lock
2017-04-04 10:45:42 +03:00
object-assign "^4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
vary "^1"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
cp-file@^6.1.0:
version "6.2.0"
resolved "https://registry.yarnpkg.com/cp-file/-/cp-file-6.2.0.tgz#40d5ea4a1def2a9acdd07ba5c0b0246ef73dc10d"
integrity sha512-fmvV4caBnofhPe8kOcitBwSn2f39QLjnAnGq3gO9dfd75mUytzKNZB1hde6QHunW2Rt+OwuBOMc3i1tNElbszA==
dependencies:
graceful-fs "^4.1.2"
make-dir "^2.0.0"
nested-error-stacks "^2.0.0"
pify "^4.0.1"
safe-buffer "^5.0.1"
Updated yarn.lock no-issue There was a mismatch between exact version and caret version between package.json and yarn.lock
2019-05-01 23:13:31 +03:00
cpy-cli@2.0.0:
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
version "2.0.0"
resolved "https://registry.yarnpkg.com/cpy-cli/-/cpy-cli-2.0.0.tgz#13f1528a231605c52ee7b7f74848e4be82253274"
integrity sha512-LzrtY3lBWvFZcw4lXgkEbbDUd7y78juC3C5l7gj3UyezMEZF0Be9fjCVLN1HoZAzdMDeC3KHehWpHBJvgVAPkw==
dependencies:
cpy "^7.0.0"
meow "^5.0.0"
cpy@^7.0.0:
version "7.2.0"
resolved "https://registry.yarnpkg.com/cpy/-/cpy-7.2.0.tgz#6f0f39ec720712628b4702c32263816f4720a364"
integrity sha512-CUYi9WYd7vdtEcq1NKqiS/yY2WdaDCNOBA/AoTQHVJzlpJMqctB8py9JrHgGIft6TgO5m8ZidI4l1ZD+RMr/wA==
dependencies:
arrify "^1.0.1"
cp-file "^6.1.0"
globby "^9.2.0"
nested-error-stacks "^2.1.0"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
crc32-stream@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/crc32-stream/-/crc32-stream-2.0.0.tgz#e3cdd3b4df3168dd74e3de3fbbcb7b297fe908f4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
crc "^3.4.4"
readable-stream "^2.0.0"
crc@^3.4.4:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.8.0"
resolved "https://registry.yarnpkg.com/crc/-/crc-3.8.0.tgz#ad60269c2c856f8c299e2c4cc0de4556914056c6"
dependencies:
buffer "^5.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
create-error@~0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/create-error/-/create-error-0.3.1.tgz#69810245a629e654432bf04377360003a5351a23"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
cross-spawn@^5.1.0:
version "5.1.0"
resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-5.1.0.tgz#e8bd0efee58fcff6f8f94510a0a554bbfa235449"
dependencies:
lru-cache "^4.0.1"
shebang-command "^1.2.0"
which "^1.2.9"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
cross-spawn@^6.0.0, cross-spawn@^6.0.5:
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
version "6.0.5"
resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-6.0.5.tgz#4a5ec7c64dfae22c3a14124dbacdee846d80cbc4"
dependencies:
nice-try "^1.0.4"
path-key "^2.0.1"
semver "^5.5.0"
shebang-command "^1.2.0"
which "^1.2.9"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
crypt@~0.0.1:
version "0.0.2"
resolved "https://registry.yarnpkg.com/crypt/-/crypt-0.0.2.tgz#88d7ff7ec0dfb86f713dc87bbb42d044d3e6c41b"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
css-color-names@0.0.4:
version "0.0.4"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/css-color-names/-/css-color-names-0.0.4.tgz#808adc2e79cf84738069b646cb20ec27beb629e0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
css-select@~1.2.0:
version "1.2.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/css-select/-/css-select-1.2.0.tgz#2b3a110539c5355f1cd8d314623e870b121ec858"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
boolbase "~1.0.0"
css-what "2.1"
domutils "1.5.1"
nth-check "~1.0.1"
css-what@2.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/css-what/-/css-what-2.1.2.tgz#c0876d9d0480927d7d4920dcd72af3595649554d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
cssnano@^3.0.0:
version "3.10.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/cssnano/-/cssnano-3.10.0.tgz#4f38f6cea2b9b17fa01490f23f1dc68ea65c1c38"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
autoprefixer "^6.3.1"
decamelize "^1.1.2"
defined "^1.0.0"
has "^1.0.1"
object-assign "^4.0.1"
postcss "^5.0.14"
postcss-calc "^5.2.0"
postcss-colormin "^2.1.8"
postcss-convert-values "^2.3.4"
postcss-discard-comments "^2.0.4"
postcss-discard-duplicates "^2.0.1"
postcss-discard-empty "^2.0.1"
postcss-discard-overridden "^0.1.1"
postcss-discard-unused "^2.2.1"
postcss-filter-plugins "^2.0.0"
postcss-merge-idents "^2.1.5"
postcss-merge-longhand "^2.0.1"
postcss-merge-rules "^2.0.3"
postcss-minify-font-values "^1.0.2"
postcss-minify-gradients "^1.0.1"
postcss-minify-params "^1.0.4"
postcss-minify-selectors "^2.0.4"
postcss-normalize-charset "^1.1.0"
postcss-normalize-url "^3.0.7"
postcss-ordered-values "^2.1.0"
postcss-reduce-idents "^2.2.2"
postcss-reduce-initial "^1.0.0"
postcss-reduce-transforms "^1.0.3"
postcss-svgo "^2.1.1"
postcss-unique-selectors "^2.0.2"
postcss-value-parser "^3.2.3"
postcss-zindex "^2.0.1"
csso@~2.3.1:
version "2.3.2"
resolved "https://registry.yarnpkg.com/csso/-/csso-2.3.2.tgz#ddd52c587033f49e94b71fc55569f252e8ff5f85"
dependencies:
clap "^1.0.9"
source-map "^0.5.3"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
cssom@0.3.x, cssom@^0.3.4:
version "0.3.4"
resolved "https://registry.yarnpkg.com/cssom/-/cssom-0.3.4.tgz#8cd52e8a3acfd68d3aed38ee0a640177d2f9d797"
integrity sha512-+7prCSORpXNeR4/fUP3rL+TzqtiFfhMvTd7uEqMdgPvLPt4+uzFUeufx5RHjGTACCargg/DiEt/moMQmvnfkog==
cssstyle@^1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/cssstyle/-/cssstyle-1.1.1.tgz#18b038a9c44d65f7a8e428a653b9f6fe42faf5fb"
integrity sha512-364AI1l/M5TYcFH83JnOH/pSqgaNnKmYgKrm0didZMGKWjQB60dymwWy1rKUgL3J1ffdq9xVi2yGLHdSjjSNog==
dependencies:
cssom "0.3.x"
Update dependency csv-parser to v2.3.0
2019-07-02 03:40:09 +03:00
csv-parser@2.3.0:
version "2.3.0"
resolved "https://registry.yarnpkg.com/csv-parser/-/csv-parser-2.3.0.tgz#d236657dbd33ff3733b74cae6c3d7d7389679174"
integrity sha512-yfYRZ9P9LNKuRK0lEFf40Be4HcFxe1XgxWL/QmlkakSE8SHcWbOGFZA/u7YpfGX/hVbRUdbnO5xO8XuYxrcBtA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
buffer-alloc "^1.1.0"
buffer-from "^1.0.0"
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
execa "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
generate-function "^1.0.1"
generate-object-property "^1.0.0"
minimist "^1.2.0"
ndjson "^1.4.0"
currently-unhandled@^0.4.1:
version "0.4.1"
resolved "https://registry.yarnpkg.com/currently-unhandled/-/currently-unhandled-0.4.1.tgz#988df33feab191ef799a61369dd76c17adf957ea"
dependencies:
array-find-index "^1.0.1"
dashdash@^1.12.0:
version "1.14.1"
resolved "https://registry.yarnpkg.com/dashdash/-/dashdash-1.14.1.tgz#853cfa0f7cbe2fed5de20326b8dd581035f6e2f0"
dependencies:
assert-plus "^1.0.0"
Bumped and pinned version for @tryghost/html-to-mobiledoc no issue
2019-02-15 22:07:01 +03:00
data-urls@^1.1.0:
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/data-urls/-/data-urls-1.1.0.tgz#15ee0582baa5e22bb59c77140da8f9c76963bbfe"
integrity sha512-YTWYI9se1P55u58gL5GkQHW4P6VJBJ5iBT+B5a7i2Tjadhv52paJG0qHX4A0OR6/t52odI64KP2YvFpkDOi3eQ==
dependencies:
abab "^2.0.0"
whatwg-mimetype "^2.2.0"
whatwg-url "^7.0.0"
🔥 remove gulp (#8159) * remove gulpfile * remove gulp dependencies * Update README.md
2017-03-14 17:20:53 +03:00
dateformat@~1.0.12:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.12"
resolved "https://registry.yarnpkg.com/dateformat/-/dateformat-1.0.12.tgz#9f124b67594c937ff706932e4a642cca8dbbfee9"
dependencies:
get-stdin "^4.0.1"
meow "^3.3.0"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
debug@2, debug@2.6.9, debug@2.x.x, debug@^2.1.2, debug@^2.2.0, debug@^2.3.3, debug@^2.6.9:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
version "2.6.9"
resolved "https://registry.yarnpkg.com/debug/-/debug-2.6.9.tgz#5d128515df134ff327e90a4c93f4e077a536341f"
dependencies:
ms "2.0.0"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
debug@3.1.0, debug@=3.1.0:
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/debug/-/debug-3.1.0.tgz#5bb5a0672628b64149566ba16819e61518c67261"
dependencies:
ms "2.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
debug@3.2.6, debug@^3.1.0:
version "3.2.6"
resolved "https://registry.yarnpkg.com/debug/-/debug-3.2.6.tgz#e83d17de16d8a7efb7717edbe5fb10135eee629b"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
dependencies:
ms "^2.1.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
debug@4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/debug/-/debug-4.1.0.tgz#373687bffa678b38b1cd91f861b63850035ddc87"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dependencies:
ms "^2.1.1"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
debug@4.1.1, debug@^4.0.0, debug@^4.0.1, debug@^4.1.0, debug@^4.1.1:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "4.1.1"
resolved "https://registry.yarnpkg.com/debug/-/debug-4.1.1.tgz#3b72260255109c6b589cee050f1d516139664791"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
dependencies:
ms "^2.1.1"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
decamelize-keys@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/decamelize-keys/-/decamelize-keys-1.1.0.tgz#d171a87933252807eb3cb61dc1c1445d078df2d9"
integrity sha1-0XGoeTMlKAfrPLYdwcFEXQeN8tk=
dependencies:
decamelize "^1.1.0"
map-obj "^1.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
decamelize@^1.1.0, decamelize@^1.1.1, decamelize@^1.1.2, decamelize@^1.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/decamelize/-/decamelize-1.2.0.tgz#f6534d15148269b20352e7bee26f501f9a191290"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
decode-uri-component@^0.2.0:
version "0.2.0"
resolved "https://registry.yarnpkg.com/decode-uri-component/-/decode-uri-component-0.2.0.tgz#eb3913333458775cb84cd1a1fae062106bb87545"
🐛 Fixed server crash when AMP posts contain images with unescaped chars (#10775) no issue - bump `amperize` to v0.4.0 which contains an updated version of `got` which does not crash on invalid image urls
2019-06-05 19:31:23 +03:00
decompress-response@^3.3.0:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
version "3.3.0"
resolved "https://registry.yarnpkg.com/decompress-response/-/decompress-response-3.3.0.tgz#80a4dd323748384bfa248083622aedec982adff3"
dependencies:
mimic-response "^1.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
deep-eql@^3.0.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "3.0.1"
resolved "https://registry.yarnpkg.com/deep-eql/-/deep-eql-3.0.1.tgz#dfc9404400ad1c8fe023e7da1df1c147c4b444df"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
type-detect "^4.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
deep-equal@^1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/deep-equal/-/deep-equal-1.0.1.tgz#f5d260292b660e084eff4cdbc9f08ad3247448b5"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
deep-extend@^0.6.0:
version "0.6.0"
resolved "https://registry.yarnpkg.com/deep-extend/-/deep-extend-0.6.0.tgz#c4fa7c95404a17a9c3e8ca7e1537312b736330ac"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
deep-is@~0.1.3:
version "0.1.3"
resolved "https://registry.yarnpkg.com/deep-is/-/deep-is-0.1.3.tgz#b369d6fb5dbc13eecf524f91b070feedc357cf34"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
deepmerge@^2.0.1:
version "2.2.1"
resolved "https://registry.yarnpkg.com/deepmerge/-/deepmerge-2.2.1.tgz#5d3ff22a01c00f645405a2fbc17d0778a1801170"
integrity sha512-R9hc1Xa/NOBi9WRVUWg19rl1UB7Tt4kuPd+thNJgFZoxXsTz7ncaPaeIm+40oSGuP33DfMb4sZt1QIGiJzC4EA==
🐛 Fixed server crash when AMP posts contain images with unescaped chars (#10775) no issue - bump `amperize` to v0.4.0 which contains an updated version of `got` which does not crash on invalid image urls
2019-06-05 19:31:23 +03:00
Update dependency probe-image-size to v4.1.1
2019-07-15 09:18:10 +03:00
deepmerge@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/deepmerge/-/deepmerge-4.0.0.tgz#3e3110ca29205f120d7cb064960a39c3d2087c09"
integrity sha512-YZ1rOP5+kHor4hMAH+HRQnBQHg+wvS1un1hAOuIcxcBy0hzcUf6Jg2a1w65kpoOUnurOfZbERwjI1TfZxNjcww==
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
defer-to-connect@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/defer-to-connect/-/defer-to-connect-1.0.2.tgz#4bae758a314b034ae33902b5aac25a8dd6a8633e"
integrity sha512-k09hcQcTDY+cwgiwa6PYKLm3jlagNzQ+RSvhjzESOGOx+MNOuXkxTfEvPrO1IOQ81tArCFYQgi631clB70RpQw==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
define-properties@^1.1.2:
version "1.1.3"
resolved "https://registry.yarnpkg.com/define-properties/-/define-properties-1.1.3.tgz#cf88da6cbee26fe6db7094f61d870cbd84cee9f1"
integrity sha512-3MqfYKj2lLzdMSf8ZIZE/V+Zuy+BgD6f164e8K2w7dgnpKArBDerGYpM46IYYcjnkdPNMjPk9A6VFB8+3SKlXQ==
dependencies:
object-keys "^1.0.12"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
define-property@^0.2.5:
version "0.2.5"
resolved "https://registry.yarnpkg.com/define-property/-/define-property-0.2.5.tgz#c35b1ef918ec3c990f9a5bc57be04aacec5c8116"
dependencies:
is-descriptor "^0.1.0"
define-property@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/define-property/-/define-property-1.0.0.tgz#769ebaaf3f4a63aad3af9e8d304c9bbe79bfb0e6"
dependencies:
is-descriptor "^1.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
define-property@^2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/define-property/-/define-property-2.0.2.tgz#d459689e8d654ba77e02a817f8710d702cb16e9d"
dependencies:
is-descriptor "^1.0.2"
isobject "^3.0.1"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
defined@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/defined/-/defined-1.0.0.tgz#c98d9bcef75674188e110969151199e39b1fa693"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
delayed-stream@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/delayed-stream/-/delayed-stream-1.0.0.tgz#df3ae199acadfb7d440aaae0b29e2272b24ec619"
delegates@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/delegates/-/delegates-1.0.0.tgz#84c6e159b81904fdca59a0ef44cd870d31250f9a"
Update dependency image-size to v0.7.4
2019-07-02 12:42:15 +03:00
depd@~1.1.2:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/depd/-/depd-1.1.2.tgz#9bcd52e14c097763e749b274c4346ed2e560b5a9"
Update dependency express-session to v1.16.2
2019-07-02 03:40:30 +03:00
depd@~2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/depd/-/depd-2.0.0.tgz#b696163cc757560d09cf22cc8fad1571b79e76df"
integrity sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
destroy@~1.0.4:
version "1.0.4"
resolved "https://registry.yarnpkg.com/destroy/-/destroy-1.0.4.tgz#978857442c44749e4206613e37946205826abd80"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
detect-file@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/detect-file/-/detect-file-1.0.0.tgz#f0d66d03672a825cb1b73bdb3fe62310c8e552b7"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
detect-libc@^0.2.0:
version "0.2.0"
resolved "https://registry.yarnpkg.com/detect-libc/-/detect-libc-0.2.0.tgz#47fdf567348a17ec25fcbf0b9e446348a76f9fb5"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
detect-libc@^1.0.2, detect-libc@^1.0.3:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/detect-libc/-/detect-libc-1.0.3.tgz#fa137c4bd698edf55cd5cd02ac559f91a4c4ba9b"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dicer@0.2.5:
version "0.2.5"
resolved "https://registry.yarnpkg.com/dicer/-/dicer-0.2.5.tgz#5996c086bb33218c812c090bddc09cd12facb70f"
dependencies:
readable-stream "1.1.x"
streamsearch "0.1.2"
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 21:32:03 +03:00
diff@3.3.1:
version "3.3.1"
resolved "https://registry.yarnpkg.com/diff/-/diff-3.3.1.tgz#aa8567a6eed03c531fc89d3f711cd0e5259dec75"
Update mocha to version 3.3.0 🚀 (#8376) * chore(package): update mocha to version 3.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-05-02 14:33:47 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
diff@3.5.0, diff@^3.5.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "3.5.0"
resolved "https://registry.yarnpkg.com/diff/-/diff-3.5.0.tgz#800c0dd1e0a8bfbc95835c202ad220fe317e5a12"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
dir-glob@^2.2.2:
version "2.2.2"
resolved "https://registry.yarnpkg.com/dir-glob/-/dir-glob-2.2.2.tgz#fa09f0694153c8918b18ba0deafae94769fc50c4"
integrity sha512-f9LBi5QWzIW3I6e//uxZoLBlUt9kcp66qo0sSCxL6YZKc75R1c4MFCoe/LaZiBGmgujvQdxc5Bn3QhfyvK5Hsw==
dependencies:
path-type "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
directmail@~0.1.7:
version "0.1.8"
resolved "https://registry.yarnpkg.com/directmail/-/directmail-0.1.8.tgz#e4852c8a0c5519bef4904fcd96d760822f42a446"
dependencies:
simplesmtp "~0.3.30"
dkim-signer@~0.1.1:
version "0.1.2"
resolved "https://registry.yarnpkg.com/dkim-signer/-/dkim-signer-0.1.2.tgz#2ff5d61c87d8fbff5a8b131cffc5ec3ba1c25553"
dependencies:
mimelib "~0.2.15"
punycode "~1.2.4"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
doctrine@^2.1.0:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "2.1.0"
resolved "https://registry.yarnpkg.com/doctrine/-/doctrine-2.1.0.tgz#5cd01fc101621b42c4cd7f5d1a66243716d3f39d"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
dependencies:
esutils "^2.0.2"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
doctrine@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/doctrine/-/doctrine-3.0.0.tgz#addebead72a6574db783639dc87a121773973961"
integrity sha512-yS+Q5i3hBf7GBkd4KG8a7eBNNWNGLTaEwwYWUijIYM7zrlYDM0BFXHjjPWlWZ1Rg7UaddZeIDmi9jF3HmqiQ2w==
dependencies:
esutils "^2.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dom-serializer@0, dom-serializer@~0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/dom-serializer/-/dom-serializer-0.1.0.tgz#073c697546ce0780ce23be4a28e293e40bc30c82"
dependencies:
domelementtype "~1.1.1"
entities "~1.1.1"
Update dependency html-to-text to v5
2019-07-02 03:43:18 +03:00
domelementtype@1, domelementtype@^1.3.0, domelementtype@^1.3.1:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "1.3.1"
resolved "https://registry.yarnpkg.com/domelementtype/-/domelementtype-1.3.1.tgz#d048c44b37b0d10a7f2a3d5fee3f4333d790481f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
domelementtype@~1.1.1:
version "1.1.3"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/domelementtype/-/domelementtype-1.1.3.tgz#bd28773e2642881aec51544924299c5cd822185b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
domexception@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/domexception/-/domexception-1.0.1.tgz#937442644ca6a31261ef36e3ec677fe805582c90"
integrity sha512-raigMkn7CJNNo6Ihro1fzG7wr3fHuYVytzquZKX5n0yizGsTcYgzdIUwj1X9pK0VvjeihV+XiclP+DjwbsSKug==
dependencies:
webidl-conversions "^4.0.2"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
domhandler@^2.3.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "2.4.2"
resolved "https://registry.yarnpkg.com/domhandler/-/domhandler-2.4.2.tgz#8805097e933d65e85546f726d60f5eb88b44f803"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
domelementtype "1"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
domutils@1.5.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.5.1"
resolved "https://registry.yarnpkg.com/domutils/-/domutils-1.5.1.tgz#dcd8488a26f563d61079e48c9f7b7e32373682cf"
dependencies:
dom-serializer "0"
domelementtype "1"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
domutils@^1.5.1, domutils@^1.7.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.7.0"
resolved "https://registry.yarnpkg.com/domutils/-/domutils-1.7.0.tgz#56ea341e834e06e6748af7a1cb25da67ea9f8c2a"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
dependencies:
dom-serializer "0"
domelementtype "1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
downsize@0.0.8:
version "0.0.8"
resolved "https://registry.yarnpkg.com/downsize/-/downsize-0.0.8.tgz#21435a610c8c68220f5cc31474979b4d025f038e"
dependencies:
xregexp "2.0.0"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
dtrace-provider@~0.8:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "0.8.7"
resolved "https://registry.yarnpkg.com/dtrace-provider/-/dtrace-provider-0.8.7.tgz#dc939b4d3e0620cfe0c1cd803d0d2d7ed04ffd04"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
nan "^2.10.0"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
duplexer3@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/duplexer3/-/duplexer3-0.1.4.tgz#ee01dd1cac0ed3cbc7fdbea37dc0a8f1ce002ce2"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
duplexer@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/duplexer/-/duplexer-0.1.1.tgz#ace6ff808c1ce66b57d1ebf97977acb02334cfc1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ecc-jsbn@~0.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz#3a83a904e54353287874c564b7549386849a98c9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
jsbn "~0.1.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
safer-buffer "^2.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
ecdsa-sig-formatter@1.0.10:
version "1.0.10"
resolved "https://registry.yarnpkg.com/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.10.tgz#1c595000f04a8897dfb85000892a0f4c33af86c3"
dependencies:
safe-buffer "^5.0.1"
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
ecdsa-sig-formatter@1.0.11:
version "1.0.11"
resolved "https://registry.yarnpkg.com/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz#ae0f0fa2d85045ef14a817daa3ce9acd0489e5bf"
integrity sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==
dependencies:
safe-buffer "^5.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
editorconfig@^0.13.2:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "0.13.3"
resolved "https://registry.yarnpkg.com/editorconfig/-/editorconfig-0.13.3.tgz#e5219e587951d60958fd94ea9a9a008cdeff1b34"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bluebird "^3.0.5"
commander "^2.9.0"
lru-cache "^3.2.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
semver "^5.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
sigmund "^1.0.1"
Updated express-hbs to 2.1.2 no-issue ronseal.
2019-05-20 13:35:04 +03:00
editorconfig@^0.15.0:
version "0.15.3"
resolved "https://registry.yarnpkg.com/editorconfig/-/editorconfig-0.15.3.tgz#bef84c4e75fb8dcb0ce5cee8efd51c15999befc5"
integrity sha512-M9wIMFx96vq0R4F+gRpY3o2exzb8hEj/n9S8unZtHSvYjibBp/iMufSzvmOcV/laG0ZtuTVGtiJggPOSW2r93g==
dependencies:
commander "^2.19.0"
lru-cache "^4.1.5"
semver "^5.6.0"
sigmund "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ee-first@1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/ee-first/-/ee-first-1.1.1.tgz#590c61156b0ae2f4f0255732a158b266bc56b21d"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
electron-to-chromium@^1.2.7:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "1.3.103"
resolved "https://registry.yarnpkg.com/electron-to-chromium/-/electron-to-chromium-1.3.103.tgz#a695777efdbc419cad6cbb0e58458251302cd52f"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Bumped eslint-plugin-ghost version to 0.4.0 no issue - This version allows for async/await syntax to be used in the codebase which is available after dropping Node v6 support
2019-07-05 18:36:02 +03:00
ember-rfc176-data@^0.3.9:
version "0.3.9"
resolved "https://registry.yarnpkg.com/ember-rfc176-data/-/ember-rfc176-data-0.3.9.tgz#44b6e051ead6c044ea87bd551f402e2cf89a7e3d"
integrity sha512-EiTo5YQS0Duy0xp9gCP8ekzv9vxirNi7MnIB4zWs+thtWp/mEKgf5mkiiLU2+oo8C5DuavVHhoPQDmyxh8Io1Q==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 12:12:03 +03:00
emits@^3.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "3.0.0"
resolved "https://registry.yarnpkg.com/emits/-/emits-3.0.0.tgz#32752bba95e1707b219562384ab9bb8b1fd62f70"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
emoji-regex@^7.0.1:
version "7.0.3"
resolved "https://registry.yarnpkg.com/emoji-regex/-/emoji-regex-7.0.3.tgz#933a04052860c85e83c122479c4748a8e4c72156"
integrity sha512-CwBLREIQ7LvYFB0WyRvwhq5N5qPhc6PMjD6bYggFlI5YyDgl+0vxq5VHbMOFqLg7hfWzmu8T5Z1QofhmTIhItA==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
encodeurl@~1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/encodeurl/-/encodeurl-1.0.2.tgz#ad3ff4c86ec2d029322f5a02c3a9a606c95b3f59"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
encoding@~0.1.7:
version "0.1.12"
resolved "https://registry.yarnpkg.com/encoding/-/encoding-0.1.12.tgz#538b66f3ee62cd1ab51ec323829d1f9480c74beb"
dependencies:
iconv-lite "~0.4.13"
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
end-of-stream@^1.0.0, end-of-stream@^1.1.0, end-of-stream@^1.4.1:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.4.1"
resolved "https://registry.yarnpkg.com/end-of-stream/-/end-of-stream-1.4.1.tgz#ed29634d19baba463b6ce6b80a37213eab71ec43"
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
integrity sha512-1MkrZNvWTKCaigbn+W15elq2BB/L22nqrSY5DKlo3X6+vclJm8Bb5djXJBmEX6fS3+zCh/F4VBK5Z2KxJt4s2Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
once "^1.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
entities@^1.1.1, entities@~1.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/entities/-/entities-1.1.2.tgz#bdfa735299664dfafd34529ed4f8522a275fea56"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
error-ex@^1.2.0, error-ex@^1.3.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.3.2"
resolved "https://registry.yarnpkg.com/error-ex/-/error-ex-1.3.2.tgz#b4ac40648107fdcdcfae242f428bea8a14d4f1bf"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
is-arrayish "^0.2.1"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
error@^7.0.0:
version "7.0.2"
resolved "https://registry.yarnpkg.com/error/-/error-7.0.2.tgz#a5f75fff4d9926126ddac0ea5dc38e689153cb02"
dependencies:
string-template "~0.2.1"
xtend "~4.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
es-abstract@^1.5.1:
version "1.13.0"
resolved "https://registry.yarnpkg.com/es-abstract/-/es-abstract-1.13.0.tgz#ac86145fdd5099d8dd49558ccba2eaf9b88e24e9"
integrity sha512-vDZfg/ykNxQVwup/8E1BZhVzFfBxs9NqMzGcvIJrqg5k2/5Za2bWo40dK2J1pgLngZ7c+Shh8lwYtLGyrwPutg==
dependencies:
es-to-primitive "^1.2.0"
function-bind "^1.1.1"
has "^1.0.3"
is-callable "^1.1.4"
is-regex "^1.0.4"
object-keys "^1.0.12"
es-to-primitive@^1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/es-to-primitive/-/es-to-primitive-1.2.0.tgz#edf72478033456e8dda8ef09e00ad9650707f377"
integrity sha512-qZryBOJjV//LaxLTV6UC//WewneB3LcXOL9NP++ozKVXsIIIpm/2c13UDiD9Jp2eThsecw9m3jPqDwTyobcdbg==
dependencies:
is-callable "^1.1.4"
is-date-object "^1.0.1"
is-symbol "^1.0.2"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
es6-promise@^4.2.6:
version "4.2.6"
resolved "https://registry.yarnpkg.com/es6-promise/-/es6-promise-4.2.6.tgz#b685edd8258886365ea62b57d30de28fadcd974f"
integrity sha512-aRVgGdnmW2OiySVPUC9e6m+plolMAJKjZnQlCwNSuK5yQ0JN61DZSO1X1Ufd1foqWRAlig0rhduTCHe7sVtK5Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
escape-html@~1.0.3:
version "1.0.3"
resolved "https://registry.yarnpkg.com/escape-html/-/escape-html-1.0.3.tgz#0258eae4d3d0c0974de1c169188ef0051d1d1988"
🔥 remove gulp (#8159) * remove gulpfile * remove gulp dependencies * Update README.md
2017-03-14 17:20:53 +03:00
escape-string-regexp@1.0.5, escape-string-regexp@^1.0.2, escape-string-regexp@^1.0.5:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.5"
resolved "https://registry.yarnpkg.com/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz#1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
escodegen@^1.11.0, escodegen@^1.8.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.11.0"
resolved "https://registry.yarnpkg.com/escodegen/-/escodegen-1.11.0.tgz#b27a9389481d5bfd5bec76f7bb1eb3f8f4556589"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump jsonpath to version 1.0.0 no issue - major bump - we only use jsonpath inside the `get` helper - the functionality still works as expected - includes security fix, see https://github.com/dchester/jsonpath/commit/98464aa5fea65bad09564a5632bad72e31736244
2017-10-31 14:21:48 +03:00
esprima "^3.1.3"
estraverse "^4.2.0"
esutils "^2.0.2"
optionator "^0.8.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
optionalDependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
source-map "~0.6.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped eslint-plugin-ghost version to 0.4.0 no issue - This version allows for async/await syntax to be used in the codebase which is available after dropping Node v6 support
2019-07-05 18:36:02 +03:00
eslint-plugin-ember@^6.7.0:
version "6.7.1"
resolved "https://registry.yarnpkg.com/eslint-plugin-ember/-/eslint-plugin-ember-6.7.1.tgz#be11e3b9b8f38227b81d90b11792a395322a9b4f"
integrity sha512-5qzd/5zjXRVlyWpDcRRaIdl6yAHLrUCUyNE71pnk3Egs/erqQazyQHjKKToIWjTA1a7ba/WEC72tJ8HbLsevhA==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
dependencies:
Bumped eslint-plugin-ghost version to 0.4.0 no issue - This version allows for async/await syntax to be used in the codebase which is available after dropping Node v6 support
2019-07-05 18:36:02 +03:00
ember-rfc176-data "^0.3.9"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
snake-case "^2.1.0"
Bumped eslint-plugin-ghost version to 0.4.0 no issue - This version allows for async/await syntax to be used in the codebase which is available after dropping Node v6 support
2019-07-05 18:36:02 +03:00
eslint-plugin-ghost@0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/eslint-plugin-ghost/-/eslint-plugin-ghost-0.4.0.tgz#40076b79e0446f51daecfebd85bf400986aead7a"
integrity sha512-BoU/pc4okZAMiZz6M/bz5ru8dYuVJvlPbJ4bXwXbLIykzLVlIQskpEs/bokR8gUZUa5b/VW4HfY4WVWZ0it22A==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
dependencies:
Bumped eslint-plugin-ghost version to 0.4.0 no issue - This version allows for async/await syntax to be used in the codebase which is available after dropping Node v6 support
2019-07-05 18:36:02 +03:00
eslint-plugin-ember "^6.7.0"
eslint-plugin-sort-imports-es6-autofix "0.4.0"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Bumped eslint-plugin-ghost version to 0.4.0 no issue - This version allows for async/await syntax to be used in the codebase which is available after dropping Node v6 support
2019-07-05 18:36:02 +03:00
eslint-plugin-sort-imports-es6-autofix@0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/eslint-plugin-sort-imports-es6-autofix/-/eslint-plugin-sort-imports-es6-autofix-0.4.0.tgz#3bcc87f7cc8596dea48ca3eb12b0103dfc21c98c"
integrity sha512-LyqXwY0TIu997NdTbSPtTo3KgGRrpMLni4AUxqbQqkhE/kS+KXXngHoiW5c1PTaLgmHO6siBb90v1TCtyqBu/Q==
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
dependencies:
Bumped eslint-plugin-ghost version to 0.4.0 no issue - This version allows for async/await syntax to be used in the codebase which is available after dropping Node v6 support
2019-07-05 18:36:02 +03:00
eslint "^5.14.1"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
eslint-scope@^3.7.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.7.3"
resolved "https://registry.yarnpkg.com/eslint-scope/-/eslint-scope-3.7.3.tgz#bb507200d3d17f60247636160b4826284b108535"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
esrecurse "^4.1.0"
estraverse "^4.1.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
eslint-scope@^4.0.3:
version "4.0.3"
resolved "https://registry.yarnpkg.com/eslint-scope/-/eslint-scope-4.0.3.tgz#ca03833310f6889a3264781aa82e63eb9cfe7848"
integrity sha512-p7VutNr1O/QrxysMo3E45FjYDTeXBy0iTltPFNSqKAIfjDSXC+4dj+qfyuD8bfAXrW/y6lW3O76VaYNPKfpKrg==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
esrecurse "^4.1.0"
estraverse "^4.1.1"
eslint-utils@^1.3.1:
version "1.3.1"
resolved "https://registry.yarnpkg.com/eslint-utils/-/eslint-utils-1.3.1.tgz#9a851ba89ee7c460346f97cf8939c7298827e512"
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
eslint-visitor-keys@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-1.0.0.tgz#3f3180fb2e291017716acb4c9d6d5b5c34a6a81d"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
eslint@6.0.1:
version "6.0.1"
resolved "https://registry.yarnpkg.com/eslint/-/eslint-6.0.1.tgz#4a32181d72cb999d6f54151df7d337131f81cda7"
integrity sha512-DyQRaMmORQ+JsWShYsSg4OPTjY56u1nCjAmICrE8vLWqyLKxhFXOthwMj1SA8xwfrv0CofLNVnqbfyhwCkaO0w==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
"@babel/code-frame" "^7.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ajv "^6.10.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
chalk "^2.1.0"
cross-spawn "^6.0.5"
debug "^4.0.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
doctrine "^3.0.0"
eslint-scope "^4.0.3"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
eslint-utils "^1.3.1"
eslint-visitor-keys "^1.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
espree "^6.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
esquery "^1.0.1"
esutils "^2.0.2"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
file-entry-cache "^5.0.1"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
functional-red-black-tree "^1.0.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
glob-parent "^3.1.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
globals "^11.7.0"
ignore "^4.0.6"
import-fresh "^3.0.0"
imurmurhash "^0.1.4"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
inquirer "^6.2.2"
is-glob "^4.0.0"
js-yaml "^3.13.1"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
json-stable-stringify-without-jsonify "^1.0.1"
levn "^0.3.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
lodash "^4.17.11"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
minimatch "^3.0.4"
mkdirp "^0.5.1"
natural-compare "^1.4.0"
optionator "^0.8.2"
progress "^2.0.0"
regexpp "^2.0.1"
semver "^5.5.1"
strip-ansi "^4.0.0"
strip-json-comments "^2.0.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
table "^5.2.3"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
text-table "^0.2.0"
Bumped eslint-plugin-ghost version to 0.4.0 no issue - This version allows for async/await syntax to be used in the codebase which is available after dropping Node v6 support
2019-07-05 18:36:02 +03:00
eslint@^4.19.1:
🐛 Fixed eslint installation error when using node version < 8.10 and < 6.14 closes #10420 - bumped brute-knex > error eslint@5.12.1: The engine “node” is incompatible with this module. Expected version “^6.14.0 || ^8.10.0 || >=9.10.0”. Got “8.9.1”
2019-01-27 20:29:40 +03:00
version "4.19.1"
resolved "https://registry.yarnpkg.com/eslint/-/eslint-4.19.1.tgz#32d1d653e1d90408854bfb296f076ec7e186a300"
dependencies:
ajv "^5.3.0"
babel-code-frame "^6.22.0"
chalk "^2.1.0"
concat-stream "^1.6.0"
cross-spawn "^5.1.0"
debug "^3.1.0"
doctrine "^2.1.0"
eslint-scope "^3.7.1"
eslint-visitor-keys "^1.0.0"
espree "^3.5.4"
esquery "^1.0.0"
esutils "^2.0.2"
file-entry-cache "^2.0.0"
functional-red-black-tree "^1.0.1"
glob "^7.1.2"
globals "^11.0.1"
ignore "^3.3.3"
imurmurhash "^0.1.4"
inquirer "^3.0.6"
is-resolvable "^1.0.0"
js-yaml "^3.9.1"
json-stable-stringify-without-jsonify "^1.0.1"
levn "^0.3.0"
lodash "^4.17.4"
minimatch "^3.0.2"
mkdirp "^0.5.1"
natural-compare "^1.4.0"
optionator "^0.8.2"
path-is-inside "^1.0.2"
pluralize "^7.0.0"
progress "^2.0.0"
regexpp "^1.0.1"
require-uncached "^1.0.3"
semver "^5.3.0"
strip-ansi "^4.0.0"
strip-json-comments "~2.0.1"
table "4.0.2"
text-table "~0.2.0"
Bumped eslint-plugin-ghost version to 0.4.0 no issue - This version allows for async/await syntax to be used in the codebase which is available after dropping Node v6 support
2019-07-05 18:36:02 +03:00
eslint@^5.14.1:
version "5.16.0"
resolved "https://registry.yarnpkg.com/eslint/-/eslint-5.16.0.tgz#a1e3ac1aae4a3fbd8296fcf8f7ab7314cbb6abea"
integrity sha512-S3Rz11i7c8AA5JPv7xAH+dOyq/Cu/VXHiHXBPOU1k/JAM5dXqQPt3qcrhpHSorXmrpu2g0gkIBVXAqCpzfoZIg==
dependencies:
"@babel/code-frame" "^7.0.0"
ajv "^6.9.1"
chalk "^2.1.0"
cross-spawn "^6.0.5"
debug "^4.0.1"
doctrine "^3.0.0"
eslint-scope "^4.0.3"
eslint-utils "^1.3.1"
eslint-visitor-keys "^1.0.0"
espree "^5.0.1"
esquery "^1.0.1"
esutils "^2.0.2"
file-entry-cache "^5.0.1"
functional-red-black-tree "^1.0.1"
glob "^7.1.2"
globals "^11.7.0"
ignore "^4.0.6"
import-fresh "^3.0.0"
imurmurhash "^0.1.4"
inquirer "^6.2.2"
js-yaml "^3.13.0"
json-stable-stringify-without-jsonify "^1.0.1"
levn "^0.3.0"
lodash "^4.17.11"
minimatch "^3.0.4"
mkdirp "^0.5.1"
natural-compare "^1.4.0"
optionator "^0.8.2"
path-is-inside "^1.0.2"
progress "^2.0.0"
regexpp "^2.0.1"
semver "^5.5.1"
strip-ansi "^4.0.0"
strip-json-comments "^2.0.1"
table "^5.2.3"
text-table "^0.2.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
espree@^3.5.4:
version "3.5.4"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/espree/-/espree-3.5.4.tgz#b0f447187c8a8bed944b815a660bddf5deb5d1a7"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
acorn "^5.5.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
acorn-jsx "^3.0.0"
Bumped eslint-plugin-ghost version to 0.4.0 no issue - This version allows for async/await syntax to be used in the codebase which is available after dropping Node v6 support
2019-07-05 18:36:02 +03:00
espree@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/espree/-/espree-5.0.1.tgz#5d6526fa4fc7f0788a5cf75b15f30323e2f81f7a"
integrity sha512-qWAZcWh4XE/RwzLJejfcofscgMc9CamR6Tn1+XRXNzrvUSSbiAjGOI/fggztjIi7y9VLPqnICMIPiGyr8JaZ0A==
dependencies:
acorn "^6.0.7"
acorn-jsx "^5.0.0"
eslint-visitor-keys "^1.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
espree@^6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/espree/-/espree-6.0.0.tgz#716fc1f5a245ef5b9a7fdb1d7b0d3f02322e75f6"
integrity sha512-lJvCS6YbCn3ImT3yKkPe0+tJ+mH6ljhGNjHQH9mRtiO6gjhVAOhVXW1yjnwqGwTkK3bGbye+hb00nFNmu0l/1Q==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
acorn "^6.0.7"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
acorn-jsx "^5.0.0"
eslint-visitor-keys "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
esprima@1.2.2:
version "1.2.2"
resolved "https://registry.yarnpkg.com/esprima/-/esprima-1.2.2.tgz#76a0fd66fcfe154fd292667dc264019750b1657b"
Removed coverage tasks from Gruntfile refs #9441
2019-04-08 17:12:48 +03:00
esprima@^2.6.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.7.3"
resolved "https://registry.yarnpkg.com/esprima/-/esprima-2.7.3.tgz#96e3b70d5779f6ad49cd032673d1c312767ba581"
Bump jsonpath to version 1.0.0 no issue - major bump - we only use jsonpath inside the `get` helper - the functionality still works as expected - includes security fix, see https://github.com/dchester/jsonpath/commit/98464aa5fea65bad09564a5632bad72e31736244
2017-10-31 14:21:48 +03:00
esprima@^3.1.3:
version "3.1.3"
resolved "https://registry.yarnpkg.com/esprima/-/esprima-3.1.3.tgz#fdca51cee6133895e3c88d535ce49dbff62a4633"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
esprima@^4.0.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "4.0.1"
resolved "https://registry.yarnpkg.com/esprima/-/esprima-4.0.1.tgz#13b04cdb3e6c5d19df91ab6987a8695619b0aa71"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
esquery@^1.0.0, esquery@^1.0.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/esquery/-/esquery-1.0.1.tgz#406c51658b1f5991a5f9b62b1dc25b00e3e5c708"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
estraverse "^4.0.0"
esrecurse@^4.1.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "4.2.1"
resolved "https://registry.yarnpkg.com/esrecurse/-/esrecurse-4.2.1.tgz#007a3b9fdbc2b3bb87e4879ea19c92fdbd3942cf"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
estraverse "^4.1.0"
estraverse@^4.0.0, estraverse@^4.1.0, estraverse@^4.1.1, estraverse@^4.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "4.2.0"
resolved "https://registry.yarnpkg.com/estraverse/-/estraverse-4.2.0.tgz#0dee3fed31fcd469618ce7342099fc1afa0bdb13"
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 21:07:33 +03:00
esutils@^2.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.0.2"
resolved "https://registry.yarnpkg.com/esutils/-/esutils-2.0.2.tgz#0abf4f1caa5bcb1f7a9d8acc6dea4faaa04bac9b"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
etag@~1.8.1:
version "1.8.1"
resolved "https://registry.yarnpkg.com/etag/-/etag-1.8.1.tgz#41ae2eeb65efa62268aebfea83ac7d79299b0887"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
eventemitter2@~0.4.13:
version "0.4.14"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/eventemitter2/-/eventemitter2-0.4.14.tgz#8f61b75cde012b2e9eb284d4545583b5643b61ab"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
execa@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/execa/-/execa-1.0.0.tgz#c6236a5bb4df6d6f15e88e7f017798216749ddd8"
dependencies:
cross-spawn "^6.0.0"
get-stream "^4.0.0"
is-stream "^1.1.0"
npm-run-path "^2.0.0"
p-finally "^1.0.0"
signal-exit "^3.0.0"
strip-eof "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
exit@~0.1.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/exit/-/exit-0.1.2.tgz#0632638f8d877cc82107d30a0fff1a17cba1cd0c"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
expand-brackets@^2.1.4:
version "2.1.4"
resolved "https://registry.yarnpkg.com/expand-brackets/-/expand-brackets-2.1.4.tgz#b77735e315ce30f6b6eff0f83b04151a22449622"
dependencies:
debug "^2.3.3"
define-property "^0.2.5"
extend-shallow "^2.0.1"
posix-character-classes "^0.1.0"
regex-not "^1.0.0"
snapdragon "^0.8.1"
to-regex "^3.0.1"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
expand-template@^1.0.2:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/expand-template/-/expand-template-1.1.1.tgz#981f188c0c3a87d2e28f559bc541426ff94f21dd"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
expand-template@^2.0.3:
version "2.0.3"
resolved "https://registry.yarnpkg.com/expand-template/-/expand-template-2.0.3.tgz#6e14b3fcee0f3a6340ecb57d2e8918692052a47c"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
expand-tilde@^2.0.0, expand-tilde@^2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/expand-tilde/-/expand-tilde-2.0.2.tgz#97e801aa052df02454de46b02bf621642cdc8502"
dependencies:
homedir-polyfill "^1.0.1"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
express-brute@1.0.1, express-brute@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/express-brute/-/express-brute-1.0.1.tgz#9f36d107fe34e40a682593e39bffcc53102b5335"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
integrity sha1-nzbRB/405ApoJZPjm//MUxArUzU=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
long-timeout "~0.1.1"
underscore "~1.8.3"
Updated express-hbs to 1.1.1 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:03:23 +03:00
express-hbs@1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/express-hbs/-/express-hbs-1.1.1.tgz#0a181c01a399c0fe148ef4a006c59afd21c24f20"
integrity sha512-nFBXq8SNb58wospQeRsh3FZL+srv6KMVkCKJnUGB3Gm7pXUf4DzaIQ0zUb+qQRCFeAVQHaF7X4vNfIea00FiGA==
Added support for local template options no-issue This bumps express-hbs to 1.1.0 which includes the change for local template options. https://github.com/barc/express-hbs/releases/tag/v1.1.0
2019-04-03 12:29:39 +03:00
dependencies:
Updated express-hbs to 1.1.1 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:03:23 +03:00
handlebars "4.1.2"
Added support for local template options no-issue This bumps express-hbs to 1.1.0 which includes the change for local template options. https://github.com/barc/express-hbs/releases/tag/v1.1.0
2019-04-03 12:29:39 +03:00
js-beautify "1.6.8"
lodash "4.17.11"
readdirp "2.1.0"
Updated express-hbs to 2.1.2 no-issue ronseal.
2019-05-20 13:35:04 +03:00
express-hbs@2.1.2:
version "2.1.2"
resolved "https://registry.yarnpkg.com/express-hbs/-/express-hbs-2.1.2.tgz#212ebebb14e2d0ed3e6834c06a9f462cc323a1ba"
integrity sha512-5Wh4v7v2kXBQY6IYa6/tG1SM3OlFMKE631Twm2MoyVSTmMvF+pkuj3EvYyVrH6mHdVLM7ao/cRnTY2BI18gTog==
dependencies:
bluebird "^3.5.3"
handlebars "4.1.2"
js-beautify "1.8.8"
lodash "^4.17.11"
readdirp "2.2.1"
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
express-jwt@5.3.1:
version "5.3.1"
resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-5.3.1.tgz#66f05c7dddb5409c037346a98b88965bb10ea4ae"
dependencies:
async "^1.5.0"
express-unless "^0.3.0"
jsonwebtoken "^8.1.0"
lodash.set "^4.0.0"
🎨Added `absolute_url` flag to public api (#9833) closes #9832 The API _should_ be returning absolute URLs for everything, 3rd party applications require absolute urls to read and display ghost data correctly. Currently they have to concat the blog url and the resource url, which is very uncomfortable. Changing the public api like this would be considered a breaking change however so we've opted to put it behind a query parameter named `absolute_urls`.
2018-08-31 13:02:39 +03:00
express-query-boolean@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/express-query-boolean/-/express-query-boolean-2.0.0.tgz#ea56ac8138e2b95b171b8eee2af88738302941c3"
Update dependency express-session to v1.16.2
2019-07-02 03:40:30 +03:00
express-session@1.16.2:
version "1.16.2"
resolved "https://registry.yarnpkg.com/express-session/-/express-session-1.16.2.tgz#59f36d7770e94872d19b163b6708a2d16aa6848c"
integrity sha512-oy0sRsdw6n93E9wpCNWKRnSsxYnSDX9Dnr9mhZgqUEEorzcq5nshGYSZ4ZReHFhKQ80WI5iVUUSPW7u3GaKauw==
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
dependencies:
cookie "0.3.1"
cookie-signature "1.0.6"
debug "2.6.9"
Update dependency express-session to v1.16.2
2019-07-02 03:40:30 +03:00
depd "~2.0.0"
on-headers "~1.0.2"
parseurl "~1.3.3"
safe-buffer "5.1.2"
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
uid-safe "~2.1.5"
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
express-unless@^0.3.0:
version "0.3.1"
resolved "https://registry.yarnpkg.com/express-unless/-/express-unless-0.3.1.tgz#2557c146e75beb903e2d247f9b5ba01452696e20"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
express@4.17.1:
version "4.17.1"
resolved "https://registry.yarnpkg.com/express/-/express-4.17.1.tgz#4491fc38605cf51f8629d39c2b5d026f98a4c134"
integrity sha512-mHJ9O79RqluphRrcw2X/GTh3k9tVv8YcoyY4Kkh4WDMUYKRZUq0h1o0w2rrrxBqM7VoeUVqgb27xlEMXTnYt4g==
dependencies:
accepts "~1.3.7"
array-flatten "1.1.1"
body-parser "1.19.0"
content-disposition "0.5.3"
content-type "~1.0.4"
cookie "0.4.0"
cookie-signature "1.0.6"
debug "2.6.9"
depd "~1.1.2"
encodeurl "~1.0.2"
escape-html "~1.0.3"
etag "~1.8.1"
finalhandler "~1.1.2"
fresh "0.5.2"
merge-descriptors "1.0.1"
methods "~1.1.2"
on-finished "~2.3.0"
parseurl "~1.3.3"
path-to-regexp "0.1.7"
proxy-addr "~2.0.5"
qs "6.7.0"
range-parser "~1.2.1"
safe-buffer "5.1.2"
send "0.17.1"
serve-static "1.14.1"
setprototypeof "1.1.1"
statuses "~1.5.0"
type-is "~1.6.18"
utils-merge "1.0.1"
vary "~1.1.2"
express@^4.16.2, express@^4.16.4:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "4.16.4"
resolved "https://registry.yarnpkg.com/express/-/express-4.16.4.tgz#fddef61926109e24c515ea97fd2f1bdbf62df12e"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
accepts "~1.3.5"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
array-flatten "1.1.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
body-parser "1.18.3"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
content-disposition "0.5.2"
content-type "~1.0.4"
cookie "0.3.1"
cookie-signature "1.0.6"
debug "2.6.9"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
depd "~1.1.2"
encodeurl "~1.0.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
escape-html "~1.0.3"
etag "~1.8.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
finalhandler "1.1.1"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
fresh "0.5.2"
merge-descriptors "1.0.1"
methods "~1.1.2"
on-finished "~2.3.0"
parseurl "~1.3.2"
path-to-regexp "0.1.7"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
proxy-addr "~2.0.4"
qs "6.5.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
range-parser "~1.2.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
safe-buffer "5.1.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
send "0.16.2"
serve-static "1.13.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
setprototypeof "1.1.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
statuses "~1.4.0"
type-is "~1.6.16"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
utils-merge "1.0.1"
vary "~1.1.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
extend-shallow@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/extend-shallow/-/extend-shallow-2.0.1.tgz#51af7d614ad9a9f610ea1bafbb989d6b1c56890f"
dependencies:
is-extendable "^0.1.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
extend-shallow@^3.0.0, extend-shallow@^3.0.2:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/extend-shallow/-/extend-shallow-3.0.2.tgz#26a71aaf073b39fb2127172746131c2704028db8"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
assign-symbols "^1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-extendable "^1.0.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
extend@^3.0.0, extend@~3.0.2:
version "3.0.2"
resolved "https://registry.yarnpkg.com/extend/-/extend-3.0.2.tgz#f8b1136b4071fbd8eb140aff858b1019ec2915fa"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
external-editor@^2.0.4:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "2.2.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/external-editor/-/external-editor-2.2.0.tgz#045511cfd8d133f3846673d1047c154e214ad3d5"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
chardet "^0.4.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
iconv-lite "^0.4.17"
tmp "^0.0.33"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
external-editor@^3.0.3:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
version "3.0.3"
resolved "https://registry.yarnpkg.com/external-editor/-/external-editor-3.0.3.tgz#5866db29a97826dbe4bf3afd24070ead9ea43a27"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
integrity sha512-bn71H9+qWoOQKyZDo25mOMVpSmXROAsTJVVVYzrrtol3d4y+AsKjf4Iwl2Q+IuT0kFSQ1qo166UuIwqYq7mGnA==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
chardet "^0.7.0"
iconv-lite "^0.4.24"
tmp "^0.0.33"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
extglob@^2.0.4:
version "2.0.4"
resolved "https://registry.yarnpkg.com/extglob/-/extglob-2.0.4.tgz#ad00fe4dc612a9232e8718711dc5cb5ab0285543"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
array-unique "^0.3.2"
define-property "^1.0.0"
expand-brackets "^2.1.4"
extend-shallow "^2.0.1"
fragment-cache "^0.2.1"
regex-not "^1.0.0"
snapdragon "^0.8.1"
to-regex "^3.0.1"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
extract-zip@1.6.7:
version "1.6.7"
resolved "https://registry.yarnpkg.com/extract-zip/-/extract-zip-1.6.7.tgz#a840b4b8af6403264c8db57f4f1a74333ef81fe9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
concat-stream "1.6.2"
Replaced extract-zip-fork by extract-zip no issue - we had to fork the original repository at one point, because of slow maintenance - maintenance is back now - https://github.com/maxogden/extract-zip/pull/52 was merged and released
2017-10-31 14:11:59 +03:00
debug "2.6.9"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
mkdirp "0.5.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
yauzl "2.4.1"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
extsprintf@1.3.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/extsprintf/-/extsprintf-1.3.0.tgz#96918440e3041a7a414f8c52e3c574eb3c3e1e05"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
extsprintf@^1.2.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/extsprintf/-/extsprintf-1.4.0.tgz#e2689f8f356fad62cca65a3a91c5df5f9551692f"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
fast-deep-equal@^1.0.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/fast-deep-equal/-/fast-deep-equal-1.1.0.tgz#c053477817c86b51daa853c81e059b733d023614"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
fast-deep-equal@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/fast-deep-equal/-/fast-deep-equal-2.0.1.tgz#7b05218ddf9667bf7f370bf7fdb2cb15fdd0aa49"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
fast-glob@^2.2.6:
version "2.2.6"
resolved "https://registry.yarnpkg.com/fast-glob/-/fast-glob-2.2.6.tgz#a5d5b697ec8deda468d85a74035290a025a95295"
integrity sha512-0BvMaZc1k9F+MeWWMe8pL6YltFzZYcJsYU7D4JyDA6PAczaXvxqQQ/z+mDF7/4Mw01DeUc+i3CTKajnkANkV4w==
dependencies:
"@mrmlnc/readdir-enhanced" "^2.2.1"
"@nodelib/fs.stat" "^1.1.2"
glob-parent "^3.1.0"
is-glob "^4.0.0"
merge2 "^1.2.3"
micromatch "^3.1.10"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
fast-json-stable-stringify@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/fast-json-stable-stringify/-/fast-json-stable-stringify-2.0.0.tgz#d5142c0caee6b1189f87d3a76111064f86c8bbf2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
fast-levenshtein@~2.0.4:
version "2.0.6"
resolved "https://registry.yarnpkg.com/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz#3d8a5c66883a16a30ca8643e851f19baa7797917"
faye-websocket@~0.10.0:
version "0.10.0"
resolved "https://registry.yarnpkg.com/faye-websocket/-/faye-websocket-0.10.0.tgz#4e492f8d04dfb6f89003507f6edbf2d501e7c6f4"
dependencies:
websocket-driver ">=0.5.1"
fd-slicer@~1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/fd-slicer/-/fd-slicer-1.0.1.tgz#8b5bcbd9ec327c5041bf9ab023fd6750f1177e65"
dependencies:
pend "~1.2.0"
figures@^1.0.1:
version "1.7.0"
resolved "https://registry.yarnpkg.com/figures/-/figures-1.7.0.tgz#cbe1e3affcf1cd44b80cadfed28dc793a9701d2e"
dependencies:
escape-string-regexp "^1.0.5"
object-assign "^4.1.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
figures@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/figures/-/figures-2.0.0.tgz#3ab1a2d2a62c8bfb431a0c94cb797a2fce27c962"
dependencies:
escape-string-regexp "^1.0.5"
file-entry-cache@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/file-entry-cache/-/file-entry-cache-2.0.0.tgz#c392990c3e684783d838b8c84a45d8a048458361"
dependencies:
flat-cache "^1.2.1"
object-assign "^4.0.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
file-entry-cache@^5.0.1:
version "5.0.1"
resolved "https://registry.yarnpkg.com/file-entry-cache/-/file-entry-cache-5.0.1.tgz#ca0f6efa6dd3d561333fb14515065c2fafdf439c"
integrity sha512-bCg29ictuBaKUwwArK4ouCaqDgLZcysCFLmM/Yn/FDoqndh/9vNuQfXRDvTuXKLxfD/JtZQGKFT8MGcJBK644g==
dependencies:
flat-cache "^2.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
file-sync-cmp@^0.1.0:
version "0.1.1"
resolved "https://registry.yarnpkg.com/file-sync-cmp/-/file-sync-cmp-0.1.1.tgz#a5e7a8ffbfa493b43b923bbd4ca89a53b63b612b"
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 16:59:06 +03:00
fill-keys@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/fill-keys/-/fill-keys-1.0.2.tgz#9a8fa36f4e8ad634e3bf6b4f3c8882551452eb20"
dependencies:
is-object "~1.0.1"
merge-descriptors "~1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
fill-range@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/fill-range/-/fill-range-4.0.0.tgz#d544811d428f98eb06a63dc402d2403c328c38f7"
dependencies:
extend-shallow "^2.0.1"
is-number "^3.0.0"
repeat-string "^1.6.1"
to-regex-range "^2.1.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
finalhandler@1.1.1:
version "1.1.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/finalhandler/-/finalhandler-1.1.1.tgz#eebf4ed840079c83f4249038c9d703008301b105"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
debug "2.6.9"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
encodeurl "~1.0.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
escape-html "~1.0.3"
on-finished "~2.3.0"
parseurl "~1.3.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
statuses "~1.4.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
unpipe "~1.0.0"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
finalhandler@~1.1.2:
version "1.1.2"
resolved "https://registry.yarnpkg.com/finalhandler/-/finalhandler-1.1.2.tgz#b7e7d000ffd11938d0fdb053506f6ebabe9f587d"
integrity sha512-aAWcW57uxVNrQZqFXjITpW3sIUQmHGG3qSb9mUah9MgMC4NeWhNOlNjXEYq3HjRAvL6arUviZGGJsBg6z0zsWA==
dependencies:
debug "2.6.9"
encodeurl "~1.0.2"
escape-html "~1.0.3"
on-finished "~2.3.0"
parseurl "~1.3.3"
statuses "~1.5.0"
unpipe "~1.0.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
find-root@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/find-root/-/find-root-1.1.0.tgz#abcfc8ba76f708c42a97b3d685b7e9450bfb9ce4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
find-up@3.0.0, find-up@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/find-up/-/find-up-3.0.0.tgz#49169f1d7993430646da61ecc5ae355c21c97b73"
integrity sha512-1yD6RmLI1XBfxugvORwlck6f75tYL+iR0jqwsOrOxMZyGYqUuDhJ0l4AXdO1iX/FTs9cBAMEk1gWSEx1kSbylg==
dependencies:
locate-path "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
find-up@^1.0.0:
version "1.1.2"
resolved "https://registry.yarnpkg.com/find-up/-/find-up-1.1.2.tgz#6b2e9822b1a2ce0a60ab64d610eccad53cb24d0f"
dependencies:
path-exists "^2.0.0"
pinkie-promise "^2.0.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
find-up@^2.0.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/find-up/-/find-up-2.1.0.tgz#45d1b7e506c717ddd482775a2b77920a3c0c57a7"
integrity sha1-RdG35QbHF93UgndaK3eSCjwMV6c=
dependencies:
locate-path "^2.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
findup-sync@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/findup-sync/-/findup-sync-2.0.0.tgz#9326b1488c22d1a6088650a86901b2d9a90a2cbc"
dependencies:
detect-file "^1.0.0"
is-glob "^3.1.0"
micromatch "^3.0.4"
resolve-dir "^1.0.1"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
findup-sync@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/findup-sync/-/findup-sync-3.0.0.tgz#17b108f9ee512dfb7a5c7f3c8b27ea9e1a9c08d1"
integrity sha512-YbffarhcicEhOrm4CtrwdKBdCuz576RLdhJDsIfvNtxUuhdRet1qZcsMjqbePtAseKdAnDyM/IyXbu7PRPRLYg==
dependencies:
detect-file "^1.0.0"
is-glob "^4.0.0"
micromatch "^3.0.4"
resolve-dir "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
findup-sync@~0.3.0:
version "0.3.0"
resolved "https://registry.yarnpkg.com/findup-sync/-/findup-sync-0.3.0.tgz#37930aa5d816b777c03445e1966cc6790a4c0b16"
dependencies:
glob "~5.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
fined@^1.0.1:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/fined/-/fined-1.1.1.tgz#95d88ff329123dd1a6950fdfcd321f746271e01f"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
expand-tilde "^2.0.2"
is-plain-object "^2.0.3"
object.defaults "^1.1.0"
object.pick "^1.2.0"
parse-filepath "^1.0.1"
flagged-respawn@^1.0.0:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/flagged-respawn/-/flagged-respawn-1.0.1.tgz#e7de6f1279ddd9ca9aac8a5971d618606b3aab41"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
flat-cache@^1.2.1:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "1.3.4"
resolved "https://registry.yarnpkg.com/flat-cache/-/flat-cache-1.3.4.tgz#2c2ef77525cc2929007dfffa1dd314aa9c9dee6f"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
circular-json "^0.3.1"
graceful-fs "^4.1.2"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
rimraf "~2.6.2"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
write "^0.2.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
flat-cache@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/flat-cache/-/flat-cache-2.0.1.tgz#5d296d6f04bda44a4630a301413bdbc2ec085ec0"
integrity sha512-LoQe6yDuUMDzQAEH8sgmh4Md6oZnc/7PjtwjNFSzveXqSHt6ka9fPBuso7IGf9Rz4uqnSnWiFH2B/zj24a5ReA==
dependencies:
flatted "^2.0.0"
rimraf "2.6.3"
write "1.0.3"
flat@^4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/flat/-/flat-4.1.0.tgz#090bec8b05e39cba309747f1d588f04dbaf98db2"
integrity sha512-Px/TiLIznH7gEDlPXcUD4KnBusa6kR6ayRUVcnEAbreRIuhkqow/mun59BuRXwoYk7ZQOLW1ZM05ilIvK38hFw==
dependencies:
is-buffer "~2.0.3"
flatted@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/flatted/-/flatted-2.0.1.tgz#69e57caa8f0eacbc281d2e2cb458d46fdb449e08"
integrity sha512-a1hQMktqW9Nmqr5aktAux3JMNqaucxGcjtjWnZLHX7yyPCmlSV3M54nGYbqT8K+0GhF3NBgmJCc3ma+WOgX8Jg==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
flatten@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/flatten/-/flatten-1.0.2.tgz#dae46a9d78fbe25292258cc1e780a41d95c03782"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
follow-redirects@0.0.3:
version "0.0.3"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-0.0.3.tgz#6ce67a24db1fe13f226c1171a72a7ef2b17b8f65"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
underscore ""
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
follow-redirects@^1.2.5:
version "1.6.1"
resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.6.1.tgz#514973c44b5757368bad8bddfe52f81f015c94cb"
dependencies:
debug "=3.1.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
for-in@^1.0.1, for-in@^1.0.2:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/for-in/-/for-in-1.0.2.tgz#81068d295a8142ec0ac726c6e2200c30fb6d5e80"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
for-own@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/for-own/-/for-own-1.0.0.tgz#c63332f415cedc4b04dbfe70cf836494c53cb44b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
for-in "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
forever-agent@~0.6.1:
version "0.6.1"
resolved "https://registry.yarnpkg.com/forever-agent/-/forever-agent-0.6.1.tgz#fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
Removed superagent dependency (#10535) no issue - Migrated default scheduling adapter to use Got via the request proxy - SchedulingDefault is the only module that was using superagent so removed it as a dependency
2019-03-04 10:59:38 +03:00
form-data@^2.3.1, form-data@~2.3.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.3.3"
resolved "https://registry.yarnpkg.com/form-data/-/form-data-2.3.3.tgz#dcce52c05f644f298c6a7ab936bd724ceffbf3a6"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
dependencies:
asynckit "^0.4.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
combined-stream "^1.0.6"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
mime-types "^2.1.12"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
formidable@^1.2.0:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
version "1.2.1"
resolved "https://registry.yarnpkg.com/formidable/-/formidable-1.2.1.tgz#70fb7ca0290ee6ff961090415f4b3df3d2082659"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
forwarded@~0.1.2:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/forwarded/-/forwarded-0.1.2.tgz#98c23dab1175657b8c0573e8ceccd91b0ff18c84"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
fragment-cache@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/fragment-cache/-/fragment-cache-0.2.1.tgz#4290fad27f13e89be7f33799c6bc5a0abfff0d19"
dependencies:
map-cache "^0.2.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
fresh@0.5.2:
version "0.5.2"
resolved "https://registry.yarnpkg.com/fresh/-/fresh-0.5.2.tgz#3d8cadd90d976569fa835ab1f8e4b23a105605a7"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
fs-constants@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/fs-constants/-/fs-constants-1.0.0.tgz#6be0de9be998ce16af8afc24497b9ee9b7ccd9ad"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
fs-copy-file-sync@^1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/fs-copy-file-sync/-/fs-copy-file-sync-1.1.1.tgz#11bf32c096c10d126e5f6b36d06eece776062918"
Update dependency intl-messageformat to v4
2019-07-04 07:31:02 +03:00
fs-extra@8.1.0, fs-extra@^8.0.0:
Update dependency fs-extra to v8
2019-07-02 03:42:42 +03:00
version "8.1.0"
resolved "https://registry.yarnpkg.com/fs-extra/-/fs-extra-8.1.0.tgz#49d43c45a88cd9677668cb7be1b46efdb8d2e1c0"
integrity sha512-yhlQgA6mnOJUKOsRUFsgJdQCvkKhcz8tlZG5HBQfReYZy46OwLcY+Zia0mtdHsOo9y/hP+CxMN0TU9QxoOtG4g==
dependencies:
graceful-fs "^4.2.0"
jsonfile "^4.0.0"
universalify "^0.1.0"
fs-extra@^3.0.1:
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 10:51:54 +03:00
version "3.0.1"
resolved "https://registry.yarnpkg.com/fs-extra/-/fs-extra-3.0.1.tgz#3794f378c58b342ea7dbbb23095109c4b3b62291"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
graceful-fs "^4.1.2"
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 10:51:54 +03:00
jsonfile "^3.0.0"
universalify "^0.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
fs-minipass@^1.2.5:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.2.5"
resolved "https://registry.yarnpkg.com/fs-minipass/-/fs-minipass-1.2.5.tgz#06c277218454ec288df77ada54a03b8702aacb9d"
dependencies:
minipass "^2.2.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
fs.realpath@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/fs.realpath/-/fs.realpath-1.0.0.tgz#1504ad2523158caa40db4a2787cb01411994ea4f"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
fstream@^1.0.0, fstream@^1.0.2:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "1.0.11"
resolved "https://registry.yarnpkg.com/fstream/-/fstream-1.0.11.tgz#5c1fb1f117477114f0632a0eb4b71b3cb0fd3171"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
graceful-fs "^4.1.2"
inherits "~2.0.0"
mkdirp ">=0.5 0"
rimraf "2"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
function-bind@^1.1.1:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/function-bind/-/function-bind-1.1.1.tgz#a56899d3ea3c9bab874bb9773b7c5ede92f4895d"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
functional-red-black-tree@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/functional-red-black-tree/-/functional-red-black-tree-1.0.1.tgz#1b0ab3bd553b2a0d6399d29c0e3ea0b252078327"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
gauge@~2.7.3:
🙀 Image field naming & new img_url helper (#8364) * 🙀 change database schema for images - rename user/post/tag images - contains all the required changes from the schema change * Refactor helper/meta data - rename cover to cover_image - also rename default settings to match the pattern - rename image to profile_image for user - rename image to feature_image for tags/posts * {{image}} >>> {{img_url}} - rename - change the functionality - attr is required - e.g. {{img_url feature_image}} * gscan 1.0.0 - update yarn.lock * Update casper reference: 1.0-changes - see https://github.com/TryGhost/Casper/commit/5487b4da8d2ad7c6a6d003a3a0ee1a860e0de34d
2017-04-24 20:21:47 +03:00
version "2.7.4"
resolved "https://registry.yarnpkg.com/gauge/-/gauge-2.7.4.tgz#2c03405c7538c39d7eb37b317022e325fb018bf7"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
aproba "^1.0.3"
console-control-strings "^1.0.0"
has-unicode "^2.0.0"
object-assign "^4.1.0"
signal-exit "^3.0.0"
string-width "^1.0.1"
strip-ansi "^3.0.1"
wide-align "^1.1.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
gaze@^1.1.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/gaze/-/gaze-1.1.3.tgz#c441733e13b927ac8c0ff0b4c3b033f28812924a"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
globule "^1.0.0"
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
gelf-stream@^1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/gelf-stream/-/gelf-stream-1.1.1.tgz#9cea9b6386ac301c741838ca3cb91e66dbfbf669"
integrity sha1-nOqbY4asMBx0GDjKPLkeZtv79mk=
dependencies:
gelfling "^0.3.0"
gelfling@^0.3.0:
version "0.3.1"
resolved "https://registry.yarnpkg.com/gelfling/-/gelfling-0.3.1.tgz#336a98f81510f9ae0af2a494e17468a116a9dc04"
integrity sha1-M2qY+BUQ+a4K8qSU4XRooRap3AQ=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
generate-function@^1.0.1:
version "1.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/generate-function/-/generate-function-1.1.0.tgz#54c21b080192b16d9877779c5bb81666e772365f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
generate-object-property@^1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/generate-object-property/-/generate-object-property-1.2.0.tgz#9c0e1c40308ce804f4783618b937fa88f99d50d0"
dependencies:
is-property "^1.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
get-caller-file@^1.0.1:
version "1.0.3"
resolved "https://registry.yarnpkg.com/get-caller-file/-/get-caller-file-1.0.3.tgz#f978fa4c90d1dfe7ff2d6beda2a515e713bdcf4a"
integrity sha512-3t6rVToeoZfYSGd8YoLFR2DJkiQrIiUrGcjvFX2mDw3bn6k2OtwHN0TNCLbBO+w8qTvimhDkv+LSscbJY1vE6w==
get-caller-file@^2.0.1:
version "2.0.5"
resolved "https://registry.yarnpkg.com/get-caller-file/-/get-caller-file-2.0.5.tgz#4f94412a82db32f36e3b0b9741f8a97feb031f7e"
integrity sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
get-func-name@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/get-func-name/-/get-func-name-2.0.0.tgz#ead774abee72e20409433a066366023dd6887a41"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
get-stdin@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/get-stdin/-/get-stdin-4.0.1.tgz#b968c6b0a04384324902e8bf1a5df32579a450fe"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
get-stream@^4.0.0, get-stream@^4.1.0:
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
version "4.1.0"
resolved "https://registry.yarnpkg.com/get-stream/-/get-stream-4.1.0.tgz#c1b255575f3dc21d59bfc79cd3d2b46b1c3a54b5"
dependencies:
pump "^3.0.0"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
get-stream@^5.1.0:
version "5.1.0"
resolved "https://registry.yarnpkg.com/get-stream/-/get-stream-5.1.0.tgz#01203cdc92597f9b909067c3e656cc1f4d3c4dc9"
integrity sha512-EXr1FOzrzTfGeL0gQdeFEvOMm2mzMOglyiOXSTpPC+iAjAKftbr3jpCMWynogwYnM+eSj9sHGc6wjIcDvYiygw==
dependencies:
pump "^3.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
get-value@^2.0.3, get-value@^2.0.6:
version "2.0.6"
resolved "https://registry.yarnpkg.com/get-value/-/get-value-2.0.6.tgz#dc15ca1c672387ca76bd37ac0a395ba2042a2c28"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
getobject@~0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/getobject/-/getobject-0.1.0.tgz#047a449789fa160d018f5486ed91320b6ec7885c"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
getopts@2.2.4:
version "2.2.4"
resolved "https://registry.yarnpkg.com/getopts/-/getopts-2.2.4.tgz#3137fe8a5fddf304904059a851bdc1c22f0f54fb"
integrity sha512-Rz7DGyomZjrenu9Jx4qmzdlvJgvrEFHXHvjK0FcZtcTC1U5FmES7OdZHUwMuSnEE6QvBvwse1JODKj7TgbSEjQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
getpass@^0.1.1:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "0.1.7"
resolved "https://registry.yarnpkg.com/getpass/-/getpass-0.1.7.tgz#5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
assert-plus "^1.0.0"
Update dependency knex-migrator to v3.3.2
2019-07-02 14:40:15 +03:00
ghost-ignition@3.1.0, ghost-ignition@^3.0.0, ghost-ignition@^3.0.4, ghost-ignition@^3.1.0:
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/ghost-ignition/-/ghost-ignition-3.1.0.tgz#4a0d7f0a15e54fbc0e16d398da62ff68737e4e23"
integrity sha512-ae0r/yBJDo9SkeLfy0ecrHVqO0gt9l07wiCOWmdzdvbmoU24AB881PjymnM/DLP9SY6E33mLYtT8K3ximgieLg==
🐛 Fixed errors for missing sharp install closes #10421
2019-02-05 12:13:54 +03:00
dependencies:
bunyan "1.8.12"
bunyan-loggly "^1.3.1"
caller "1.0.1"
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
debug "^4.0.0"
🐛 Fixed errors for missing sharp install closes #10421
2019-02-05 12:13:54 +03:00
find-root "1.1.0"
fs-extra "^3.0.1"
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
gelf-stream "^1.1.1"
🐛 Fixed errors for missing sharp install closes #10421
2019-02-05 12:13:54 +03:00
json-stringify-safe "^5.0.1"
lodash "^4.16.4"
moment "^2.15.2"
nconf "^0.10.0"
prettyjson "^1.1.3"
uuid "^3.0.0"
🐛 Fixed error for missing sharp install (#10423) closes #10421 refs #10181 This bumbs the ghost-ignition dep, so that the code passed to errors takes priority over any code the error is inheriting from.
2019-01-28 14:37:27 +03:00
ghost-ignition@^2.9.6:
Bumped ghost-ignition to version 2.9.6
2018-09-25 12:41:37 +03:00
version "2.9.6"
resolved "https://registry.yarnpkg.com/ghost-ignition/-/ghost-ignition-2.9.6.tgz#cc8358f0a356bae490e5abeca3c3bda8383352fe"
Bump dependencies no issue - ghost-ignition@2.9.3 - simple-html-tokenizer@0.5.3
2018-06-06 15:00:43 +03:00
dependencies:
bunyan "1.8.12"
bunyan-loggly "^1.3.1"
caller "1.0.1"
debug "^2.6.9"
find-root "1.1.0"
fs-extra "^3.0.1"
json-stringify-safe "^5.0.1"
lodash "^4.16.4"
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
moment "^2.15.2"
nconf "^0.10.0"
prettyjson "^1.1.3"
uuid "^3.0.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
ghost-storage-base@0.0.3:
version "0.0.3"
resolved "https://registry.yarnpkg.com/ghost-storage-base/-/ghost-storage-base-0.0.3.tgz#854b23f67816c16827a6e25b7e51915e236f691d"
😱 🎨 Refactor storage adapter (#8229) refs #7687 There are four main changes in this PR: we have outsourced the base storage adapter to npm, because for storage developers it's annoying to inherit from a script within Ghost we hacked theme storage handling into the default local storage adapter - this was reverted, instead we have added a static theme storage here use classes instead of prototyping optimise the storage adapter in general - everything is explained in each commit ---- * rename local-file-store to LocalFileStorage I would like to keep the name pattern i have used for scheduling. If a file is a class, the file name reflects the class name. We can discuss this, if concerns are raised. * Transform LocalFileStorage to class and inherit from new base - inherit from npm ghost-storage-base - rewrite to class - no further refactoring, happens later * Rename core/test/unit/storage/local-file-store_spec.js -> core/test/unit/storage/LocalFileStorage_spec.js * Fix wrong require in core/test/unit/storage/LocalFileStorage_spec.js * remove base storage and test - see https://github.com/kirrg001/Ghost-Storage-Base - the test has moved to this repo as well * Use npm ghost-storage-base in storage/index.js * remove the concept of getStorage('themes') This concept was added when we added themes as a feature. Back then, we have changed the local storage adapter to support images and themes. This has added some hacks into the local storage adapters. We want to revert this change and add a simple static theme storage. Will adapt the api/themes layer in the next commits. * Revert LocalFileStorage - revert serve - revert delete * add storagePath as property to LocalFileStorage - define one property which holds the storage path - could be considered to pass from outside, but found that not helpful, as other storage adapters do not need this property - IMPORTANT: save has no longer a targetDir option, because this was used to pass the alternative theme storage path - IMPORTANT: exists has now an alternative targetDir, this makes sense, because - you can either ask the storage exists('my-file') and it will look in the base storage path - or you pass a specific path where to look exists('my-file', /path/to/dir) * LocalFileStorage: get rid of store pattern - getUniqueFileName(THIS) - this doesn't make sense, instances always have access to this by default * Add static theme storage - inherits from the local file storage, because they both operate on the file system - IMPORTANT: added a TODO to consider a merge of themes/loader and themes/storage - but will be definitely not part of this PR * Use new static theme storage in api/themes - storage functions are simplified! * Add https://github.com/kirrg001/Ghost-Storage-Base as dependency - tarball for now, as i am still testing - will release if PR review get's accepted * Adapt tests and jscs/jshint * 🐛 fix storage.read in favicon utility - wrong implementation of error handling * 🎨 optimise error messages for custom storage adapter errors * little renaming in the storage utlity - purpose is to have access to the custom storage instance and to the custom storage class - see next commit why * optimise instanceof base storage - instanceof is always tricky in javascript - if multiple modules exist, it can happen that instanceof is false * fix getTargetDir - the importer uses the `targetDir` option to ensure that images land in the correct folder * ghost-storage-base@0.0.1 package.json dependency
2017-04-05 17:10:34 +03:00
dependencies:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
moment "^2.19.3"
😱 🎨 Refactor storage adapter (#8229) refs #7687 There are four main changes in this PR: we have outsourced the base storage adapter to npm, because for storage developers it's annoying to inherit from a script within Ghost we hacked theme storage handling into the default local storage adapter - this was reverted, instead we have added a static theme storage here use classes instead of prototyping optimise the storage adapter in general - everything is explained in each commit ---- * rename local-file-store to LocalFileStorage I would like to keep the name pattern i have used for scheduling. If a file is a class, the file name reflects the class name. We can discuss this, if concerns are raised. * Transform LocalFileStorage to class and inherit from new base - inherit from npm ghost-storage-base - rewrite to class - no further refactoring, happens later * Rename core/test/unit/storage/local-file-store_spec.js -> core/test/unit/storage/LocalFileStorage_spec.js * Fix wrong require in core/test/unit/storage/LocalFileStorage_spec.js * remove base storage and test - see https://github.com/kirrg001/Ghost-Storage-Base - the test has moved to this repo as well * Use npm ghost-storage-base in storage/index.js * remove the concept of getStorage('themes') This concept was added when we added themes as a feature. Back then, we have changed the local storage adapter to support images and themes. This has added some hacks into the local storage adapters. We want to revert this change and add a simple static theme storage. Will adapt the api/themes layer in the next commits. * Revert LocalFileStorage - revert serve - revert delete * add storagePath as property to LocalFileStorage - define one property which holds the storage path - could be considered to pass from outside, but found that not helpful, as other storage adapters do not need this property - IMPORTANT: save has no longer a targetDir option, because this was used to pass the alternative theme storage path - IMPORTANT: exists has now an alternative targetDir, this makes sense, because - you can either ask the storage exists('my-file') and it will look in the base storage path - or you pass a specific path where to look exists('my-file', /path/to/dir) * LocalFileStorage: get rid of store pattern - getUniqueFileName(THIS) - this doesn't make sense, instances always have access to this by default * Add static theme storage - inherits from the local file storage, because they both operate on the file system - IMPORTANT: added a TODO to consider a merge of themes/loader and themes/storage - but will be definitely not part of this PR * Use new static theme storage in api/themes - storage functions are simplified! * Add https://github.com/kirrg001/Ghost-Storage-Base as dependency - tarball for now, as i am still testing - will release if PR review get's accepted * Adapt tests and jscs/jshint * 🐛 fix storage.read in favicon utility - wrong implementation of error handling * 🎨 optimise error messages for custom storage adapter errors * little renaming in the storage utlity - purpose is to have access to the custom storage instance and to the custom storage class - see next commit why * optimise instanceof base storage - instanceof is always tricky in javascript - if multiple modules exist, it can happen that instanceof is false * fix getTargetDir - the importer uses the `targetDir` option to ensure that images land in the correct folder * ghost-storage-base@0.0.1 package.json dependency
2017-04-05 17:10:34 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
github-from-package@0.0.0:
version "0.0.0"
resolved "https://registry.yarnpkg.com/github-from-package/-/github-from-package-0.0.0.tgz#97fb5d96bfde8973313f20e8288ef9a167fa64ce"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
glob-parent@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/glob-parent/-/glob-parent-3.1.0.tgz#9e6af6299d8d3bd2bd40430832bd113df906c5ae"
integrity sha1-nmr2KZ2NO9K9QEMIMr0RPfkGxa4=
dependencies:
is-glob "^3.1.0"
path-dirname "^1.0.0"
glob-to-regexp@^0.3.0:
version "0.3.0"
resolved "https://registry.yarnpkg.com/glob-to-regexp/-/glob-to-regexp-0.3.0.tgz#8c5a1494d2066c570cc3bfe4496175acc4d502ab"
integrity sha1-jFoUlNIGbFcMw7/kSWF1rMTVAqs=
Update dependency glob to v7
2019-07-04 07:39:11 +03:00
glob@7.1.2:
version "7.1.2"
resolved "https://registry.yarnpkg.com/glob/-/glob-7.1.2.tgz#c19c9df9a028702d678612384a6552404c636d15"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency glob to v7
2019-07-04 07:39:11 +03:00
fs.realpath "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
inflight "^1.0.4"
inherits "2"
Update dependency glob to v7
2019-07-04 07:39:11 +03:00
minimatch "^3.0.4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
once "^1.3.0"
path-is-absolute "^1.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
glob@7.1.3, glob@^7.0.0, glob@^7.0.3, glob@^7.0.5, glob@^7.1.2, glob@^7.1.3, glob@~7.1.1:
version "7.1.3"
resolved "https://registry.yarnpkg.com/glob/-/glob-7.1.3.tgz#3960832d3f1574108342dafd3a67b332c0969df1"
dependencies:
fs.realpath "^1.0.0"
inflight "^1.0.4"
inherits "2"
minimatch "^3.0.4"
once "^1.3.0"
path-is-absolute "^1.0.0"
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
glob@7.1.4, glob@^7.1.4:
Update dependency glob to v7
2019-07-04 07:39:11 +03:00
version "7.1.4"
resolved "https://registry.yarnpkg.com/glob/-/glob-7.1.4.tgz#aa608a2f6c577ad357e1ae5a5c26d9a8d1969255"
integrity sha512-hkLPepehmnKk41pUGm3sYxoFs/umurYfYJCerbXEyFIWcAzvpipAgVkBqqT9RBKMGjnq6kMuyYwha6csxbiM1A==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update mocha to version 3.3.0 🚀 (#8376) * chore(package): update mocha to version 3.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-05-02 14:33:47 +03:00
fs.realpath "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
inflight "^1.0.4"
inherits "2"
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 21:32:03 +03:00
minimatch "^3.0.4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
once "^1.3.0"
path-is-absolute "^1.0.0"
Update mocha to version 3.3.0 🚀 (#8376) * chore(package): update mocha to version 3.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-05-02 14:33:47 +03:00
glob@^6.0.1:
version "6.0.4"
resolved "https://registry.yarnpkg.com/glob/-/glob-6.0.4.tgz#0f08860f6a155127b2fadd4f9ce24b1aab6e4d22"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
inflight "^1.0.4"
inherits "2"
Update mocha to version 3.3.0 🚀 (#8376) * chore(package): update mocha to version 3.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-05-02 14:33:47 +03:00
minimatch "2 || 3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
once "^1.3.0"
path-is-absolute "^1.0.0"
Update dependency glob to v7
2019-07-04 07:39:11 +03:00
glob@~5.0.0:
version "5.0.15"
resolved "https://registry.yarnpkg.com/glob/-/glob-5.0.15.tgz#1bc936b9e02f4a603fcc222ecf7633d30b8b93b1"
dependencies:
inflight "^1.0.4"
inherits "2"
minimatch "2 || 3"
once "^1.3.0"
path-is-absolute "^1.0.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
glob@~7.0.0:
version "7.0.6"
resolved "https://registry.yarnpkg.com/glob/-/glob-7.0.6.tgz#211bafaf49e525b8cd93260d14ab136152b3f57a"
dependencies:
fs.realpath "^1.0.0"
inflight "^1.0.4"
inherits "2"
minimatch "^3.0.2"
once "^1.3.0"
path-is-absolute "^1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
global-modules@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/global-modules/-/global-modules-1.0.0.tgz#6d770f0eb523ac78164d72b5e71a8877265cc3ea"
dependencies:
global-prefix "^1.0.1"
is-windows "^1.0.1"
resolve-dir "^1.0.0"
global-prefix@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/global-prefix/-/global-prefix-1.0.2.tgz#dbf743c6c14992593c655568cb66ed32c0122ebe"
dependencies:
expand-tilde "^2.0.2"
homedir-polyfill "^1.0.1"
ini "^1.3.4"
is-windows "^1.0.1"
which "^1.2.14"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
globals@^11.0.1, globals@^11.7.0:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "11.10.0"
resolved "https://registry.yarnpkg.com/globals/-/globals-11.10.0.tgz#1e09776dffda5e01816b3bb4077c8b59c24eaa50"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
globby@^9.2.0:
version "9.2.0"
resolved "https://registry.yarnpkg.com/globby/-/globby-9.2.0.tgz#fd029a706c703d29bdd170f4b6db3a3f7a7cb63d"
integrity sha512-ollPHROa5mcxDEkwg6bPt3QbEf4pDQSNtd6JPL1YvOvAo/7/0VAm9TccUeoTmarjPw4pfUthSCqcyfNB1I3ZSg==
dependencies:
"@types/glob" "^7.1.1"
array-union "^1.0.2"
dir-glob "^2.2.2"
fast-glob "^2.2.6"
glob "^7.1.3"
ignore "^4.0.3"
pify "^4.0.1"
slash "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
globule@^1.0.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.2.1"
resolved "https://registry.yarnpkg.com/globule/-/globule-1.2.1.tgz#5dffb1b191f22d20797a9369b49eab4e9839696d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
glob "~7.1.1"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
lodash "~4.17.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
minimatch "~3.0.2"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
got@9.6.0:
version "9.6.0"
resolved "https://registry.yarnpkg.com/got/-/got-9.6.0.tgz#edf45e7d67f99545705de1f7bbeeeb121765ed85"
integrity sha512-R7eWptXuGYxwijs0eV+v3o6+XH1IqVK8dJOEecQfTmkncw9AV4dcw/Dhxi8MdlqPthxxpZyizMzyg8RTmEsG+Q==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
"@sindresorhus/is" "^0.14.0"
"@szmarczak/http-timer" "^1.1.2"
cacheable-request "^6.0.0"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
decompress-response "^3.3.0"
duplexer3 "^0.1.4"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
get-stream "^4.1.0"
lowercase-keys "^1.0.1"
mimic-response "^1.0.1"
p-cancelable "^1.0.0"
to-readable-stream "^1.0.0"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
url-parse-lax "^3.0.0"
Updated express-hbs to 2.1.2 no-issue ronseal.
2019-05-20 13:35:04 +03:00
graceful-fs@^4.1.0, graceful-fs@^4.1.11, graceful-fs@^4.1.2, graceful-fs@^4.1.6:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "4.1.15"
resolved "https://registry.yarnpkg.com/graceful-fs/-/graceful-fs-4.1.15.tgz#ffb703e1066e8a0eeaa4c8b80ba9253eeefbfb00"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency gscan to v2.6.2
2019-07-02 12:09:26 +03:00
graceful-fs@^4.2.0:
version "4.2.0"
resolved "https://registry.yarnpkg.com/graceful-fs/-/graceful-fs-4.2.0.tgz#8d8fdc73977cb04104721cb53666c1ca64cd328b"
integrity sha512-jpSvDPV4Cq/bgtpndIWbI5hmYxhQGHPC4d4cqBPb4DLniCfhJokdXhwhaDuLBGLQdvvRum/UiX6ECVIPvDXqdg==
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 21:32:03 +03:00
growl@1.10.3:
version "1.10.3"
resolved "https://registry.yarnpkg.com/growl/-/growl-1.10.3.tgz#1926ba90cf3edfe2adb4927f5880bc22c66c790f"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
growl@1.10.5:
version "1.10.5"
resolved "https://registry.yarnpkg.com/growl/-/growl-1.10.5.tgz#f2735dc2283674fa67478b10181059355c369e5e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
grunt-bg-shell@2.3.3:
version "2.3.3"
resolved "https://registry.yarnpkg.com/grunt-bg-shell/-/grunt-bg-shell-2.3.3.tgz#139ae8f9c76f68a0db4ee9dbbd4ec825b9227fff"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
grunt-cli@1.3.2:
version "1.3.2"
resolved "https://registry.yarnpkg.com/grunt-cli/-/grunt-cli-1.3.2.tgz#60f12d12c1b5aae94ae3469c6b5fe24e960014e8"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dependencies:
grunt-known-options "~1.1.0"
interpret "~1.1.0"
liftoff "~2.5.0"
nopt "~4.0.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
v8flags "~3.1.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
grunt-cli@~1.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.2.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/grunt-cli/-/grunt-cli-1.2.0.tgz#562b119ebb069ddb464ace2845501be97b35b6a8"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
findup-sync "~0.3.0"
grunt-known-options "~1.1.0"
nopt "~3.0.6"
resolve "~1.1.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
grunt-contrib-clean@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-clean/-/grunt-contrib-clean-2.0.0.tgz#3be7ca480da4b740aa5e9d863e2f7e8b24f8a68b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
async "^2.6.1"
rimraf "^2.6.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency grunt-contrib-compress to v1.5.0
2019-07-02 03:40:43 +03:00
grunt-contrib-compress@1.5.0:
version "1.5.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-compress/-/grunt-contrib-compress-1.5.0.tgz#ba5f80e22acf192897ce43cb60250cab2cb1f09b"
integrity sha512-RcCyetnvTJ7jvnDCSm05wOndAd00HWZTHeVGDVVmCM+K/PEivL0yx8vKyi8uzy0492l2dJgtzR0Ucid7roKg6A==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 21:56:05 +03:00
archiver "^1.3.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
chalk "^1.1.1"
lodash "^4.7.0"
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 21:56:05 +03:00
pretty-bytes "^4.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
stream-buffers "^2.1.0"
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 21:56:05 +03:00
optionalDependencies:
Update dependency grunt-contrib-compress to v1.5.0
2019-07-02 03:40:43 +03:00
iltorb "^1.3.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
grunt-contrib-copy@1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-copy/-/grunt-contrib-copy-1.0.0.tgz#7060c6581e904b8ab0d00f076e0a8f6e3e7c3573"
dependencies:
chalk "^1.1.1"
file-sync-cmp "^0.1.0"
Pin dependency grunt-contrib-symlink to 1.0.0
2019-07-02 12:05:35 +03:00
grunt-contrib-symlink@1.0.0:
✨ Added pre-commit hook to handle submodules (#8302) refs #8235 Usage: - for existing development setups: `grunt symlink` (will create the pre-commit symlink) - for fresh development setups: `npm run init` (symlinking happens as part of the typical set up) - ✨ Added pre-commit hook to handle submodules - Checks to see if there are any submodules about to be committed - Output matches closely to `git st` to make it easy to read - Requires interaction from the committer to accept that this really should be committed - ✨ Use grunt symlink to register githooks - Grunt symlink will make a link to the pre-commit hook - It ONLY does this if there isn't already a pre-commit hook, so won't overwrite anything - It does this as part of npm run init, not grunt init, because a release repo would NEVER want this - This is a dev tool, that configures the repo for development
2017-04-13 10:26:48 +03:00
version "1.0.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-symlink/-/grunt-contrib-symlink-1.0.0.tgz#c83616c035711a6c0062a2810cf1c77ffc6bed2b"
Pin dependency grunt-contrib-symlink to 1.0.0
2019-07-02 12:05:35 +03:00
integrity sha1-yDYWwDVxGmwAYqKBDPHHf/xr7Ss=
✨ Added pre-commit hook to handle submodules (#8302) refs #8235 Usage: - for existing development setups: `grunt symlink` (will create the pre-commit symlink) - for fresh development setups: `npm run init` (symlinking happens as part of the typical set up) - ✨ Added pre-commit hook to handle submodules - Checks to see if there are any submodules about to be committed - Output matches closely to `git st` to make it easy to read - Requires interaction from the committer to accept that this really should be committed - ✨ Use grunt symlink to register githooks - Grunt symlink will make a link to the pre-commit hook - It ONLY does this if there isn't already a pre-commit hook, so won't overwrite anything - It does this as part of npm run init, not grunt init, because a release repo would NEVER want this - This is a dev tool, that configures the repo for development
2017-04-13 10:26:48 +03:00
Update Build Tool
2019-07-02 03:34:50 +03:00
grunt-contrib-uglify@4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/grunt-contrib-uglify/-/grunt-contrib-uglify-4.0.1.tgz#68a7b62fa045ce8e2c7574d1bdcd3b96b8a686b1"
integrity sha512-dwf8/+4uW1+7pH72WButOEnzErPGmtUvc8p08B0eQS/6ON0WdeQu0+WFeafaPTbbY1GqtS25lsHWaDeiTQNWPg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
chalk "^2.4.1"
maxmin "^2.1.0"
Update Build Tool
2019-07-02 03:34:50 +03:00
uglify-js "^3.5.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
uri-path "^1.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
grunt-contrib-watch@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-watch/-/grunt-contrib-watch-1.1.0.tgz#c143ca5b824b288a024b856639a5345aedb78ed4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
async "^2.6.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
gaze "^1.1.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
lodash "^4.17.10"
tiny-lr "^1.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
grunt-cssnano@2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/grunt-cssnano/-/grunt-cssnano-2.1.0.tgz#e564f7d5a88bef409e46431dacabafd5c71fbd87"
dependencies:
cssnano "^3.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
grunt-express-server@0.5.4:
version "0.5.4"
resolved "https://registry.yarnpkg.com/grunt-express-server/-/grunt-express-server-0.5.4.tgz#8ce79c335c6cbb9ef50ee1dfaa61942028f43aeb"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
grunt-known-options@~1.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/grunt-known-options/-/grunt-known-options-1.1.1.tgz#6cc088107bd0219dc5d3e57d91923f469059804d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
grunt-legacy-log-utils@~2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/grunt-legacy-log-utils/-/grunt-legacy-log-utils-2.0.1.tgz#d2f442c7c0150065d9004b08fd7410d37519194e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
chalk "~2.4.1"
lodash "~4.17.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
grunt-legacy-log@~2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/grunt-legacy-log/-/grunt-legacy-log-2.0.0.tgz#c8cd2c6c81a4465b9bbf2d874d963fef7a59ffb9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
colors "~1.1.2"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
grunt-legacy-log-utils "~2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
hooker "~0.2.3"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
lodash "~4.17.5"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
grunt-legacy-util@~1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/grunt-legacy-util/-/grunt-legacy-util-1.1.1.tgz#e10624e7c86034e5b870c8a8616743f0a0845e42"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
async "~1.5.2"
exit "~0.1.1"
getobject "~0.1.0"
hooker "~0.2.3"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
lodash "~4.17.10"
underscore.string "~3.3.4"
which "~1.3.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
grunt-mocha-cli@4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/grunt-mocha-cli/-/grunt-mocha-cli-4.0.0.tgz#d71d6500c7385af3e2d8fd046c72453c113baa71"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
mocha "^4.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
grunt-shell@3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/grunt-shell/-/grunt-shell-3.0.1.tgz#24e783901543c7269980d534902bedfb94e7ec9f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
chalk "^2.4.1"
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 21:45:29 +03:00
npm-run-path "^2.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
strip-ansi "^5.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
grunt-subgrunt@1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/grunt-subgrunt/-/grunt-subgrunt-1.3.0.tgz#0b77c057a7b22ba15ef5977b7c5992a75f5e4181"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
async "^2.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
glob "^7.0.0"
grunt-update-submodules@0.4.1:
version "0.4.1"
resolved "https://registry.yarnpkg.com/grunt-update-submodules/-/grunt-update-submodules-0.4.1.tgz#46c485fe6413cc0bdd6988aa2803c4e7d997c366"
Update Build Tool
2019-07-02 03:34:50 +03:00
grunt@1.0.4:
version "1.0.4"
resolved "https://registry.yarnpkg.com/grunt/-/grunt-1.0.4.tgz#c799883945a53a3d07622e0737c8f70bfe19eb38"
integrity sha512-PYsMOrOC+MsdGEkFVwMaMyc6Ob7pKmq+deg1Sjr+vvMWp35sztfwKE7qoN51V+UEtHsyNuMcGdgMLFkBHvMxHQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
coffeescript "~1.10.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dateformat "~1.0.12"
eventemitter2 "~0.4.13"
exit "~0.1.1"
findup-sync "~0.3.0"
glob "~7.0.0"
grunt-cli "~1.2.0"
grunt-known-options "~1.1.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
grunt-legacy-log "~2.0.0"
grunt-legacy-util "~1.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
iconv-lite "~0.4.13"
Update Build Tool
2019-07-02 03:34:50 +03:00
js-yaml "~3.13.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
minimatch "~3.0.2"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
mkdirp "~0.5.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
nopt "~3.0.6"
path-is-absolute "~1.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
rimraf "~2.6.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency gscan to v2.6.6
2019-07-29 03:28:27 +03:00
gscan@2.6.6:
version "2.6.6"
resolved "https://registry.yarnpkg.com/gscan/-/gscan-2.6.6.tgz#c02e976dfe69150cb564237b321c7331313c4eed"
integrity sha512-tfyx5H9XW4PQ8kHrVzi6vHxxqYyJTqF6Kl/Z4gaHtFXZf1tsciZI3XroKlyKuTenKkAuHp4i8ymrOx92vLuf8Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump gscan to version 1.4.3 no issue - fixes a bug, that didn't catch errors caused by corrupt zip files - uses a fork of the `extract-zip` dependency with a bug fix for https://github.com/maxogden/extract-zip/issues/65
2018-05-16 05:00:53 +03:00
"@tryghost/extract-zip" "1.6.6"
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
"@tryghost/pretty-cli" "1.2.1"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
bluebird "^3.4.6"
Bumped gscan version to 2.6.0 no issue - Updated valid theme fixture to be inline with warning that was added when using {{each}} helper instead of {{foreach}}
2019-05-08 17:56:22 +03:00
chalk "^2.0.0"
common-tags "^1.8.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
express "^4.16.2"
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
express-hbs "1.1.1"
Update dependency gscan to v2.6.2
2019-07-02 12:09:26 +03:00
fs-extra "^8.0.0"
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
ghost-ignition "3.1.0"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
glob "^7.0.5"
Bumped gscan version to 2.4.0 no issue - Updated theme fixtures to be in line with new deprecation rules for {{lang}} and {{@blog.*}} helpers introduced with https://github.com/TryGhost/gscan/pull/180
2019-04-02 07:59:16 +03:00
lodash "^4.17.11"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
multer "^1.1.0"
Update dependency gscan to v2.6.2
2019-07-02 12:09:26 +03:00
pluralize "^8.0.0"
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
require-dir "^1.0.0"
Bumped gscan version to 2.6.0 no issue - Updated valid theme fixture to be inline with warning that was added when using {{each}} helper instead of {{foreach}}
2019-05-08 17:56:22 +03:00
semver "^6.0.0"
Bumped gscan version to 2.4.0 no issue - Updated theme fixtures to be in line with new deprecation rules for {{lang}} and {{@blog.*}} helpers introduced with https://github.com/TryGhost/gscan/pull/180
2019-04-02 07:59:16 +03:00
upath "^1.1.0"
Update gscan to version 0.2.3 🚀 (#8344) * chore(package): update gscan to version 0.2.3 https://greenkeeper.io/ * chore: yarn.lock
2017-04-17 17:04:31 +03:00
uuid "^3.0.0"
🎨 gscan 1.1.0 & optimisations refs #8222 - differentiate between errors and fatal errors - use gscan errors in theme middleware - Adds a new `error()` method to `currentActiveTheme` constructor which will return the errors we receive from gscan - In middleware, if a theme couldn't be activated because it's invalid, we'll fetch the erros and send them to our error handler. We also use a new property `hideStack` to control, if the stack (in dev mode and if available) should be shown or the gscan errors (in prod mode, or in dev if no stack error) - In our error handler we use this conditional to send a new property `gscan` to our error theme - In `error.hbs` we'll iterate through possible `gscan` error objects and render them. - remove stack printing - stack for theme developers in development mode doesn't make sense - stack in production doesn't make sense - the stack is usually hard to read - if you are developer you can read the error stack on the server log - utils.packages: transform native error into Ghost error - use `onlyFatalErrors` for gscan format and differeniate fatal errors vo.2 - optimise bootstrap error handling - transform theme is missing into an error - add new translation key - show html tags for error.hbs template: rule
2017-05-31 19:42:42 +03:00
validator "^6.3.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
gzip-size@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/gzip-size/-/gzip-size-3.0.0.tgz#546188e9bdc337f673772f81660464b389dce520"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
duplexer "^0.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Updated express-hbs to 1.1.1 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:03:23 +03:00
handlebars@4.1.2:
version "4.1.2"
resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.1.2.tgz#b6b37c1ced0306b221e094fc7aca3ec23b131b67"
integrity sha512-nvfrjqvt9xQ8Z/w0ijewdD/vvWDTOweBUm96NTr66Wfvo1mJenBLwcYmPs3TIBP5ruzYGD7Hx/DaM9RmhroGPw==
dependencies:
neo-async "^2.6.0"
optimist "^0.6.1"
source-map "^0.6.1"
optionalDependencies:
uglify-js "^3.1.4"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
har-schema@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/har-schema/-/har-schema-2.0.0.tgz#a94c2224ebcac04782a0d9035521f24735b7ec92"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
har-validator@~5.1.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "5.1.3"
resolved "https://registry.yarnpkg.com/har-validator/-/har-validator-5.1.3.tgz#1ef89ebd3e4996557675eed9893110dc350fa080"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
ajv "^6.5.5"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
har-schema "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
has-ansi@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/has-ansi/-/has-ansi-2.0.0.tgz#34f5049ce1ecdf2b0649af3ef24e45ed35416d91"
dependencies:
ansi-regex "^2.0.0"
has-flag@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-1.0.0.tgz#9d9e793165ce017a00f00418c43f942a7b1d11fa"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
has-flag@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-2.0.0.tgz#e8207af1cc7b30d446cc70b734b5e8be18f88d51"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
has-flag@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-3.0.0.tgz#b5d454dc2199ae225699f3467e5a07f3b955bafd"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
has-symbols@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/has-symbols/-/has-symbols-1.0.0.tgz#ba1a8f1af2a0fc39650f5c850367704122063b44"
integrity sha1-uhqPGvKg/DllD1yFA2dwQSIGO0Q=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
has-unicode@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/has-unicode/-/has-unicode-2.0.1.tgz#e0e6fe6a28cf51138855e086d1691e771de2a8b9"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
has-value@^0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/has-value/-/has-value-0.3.1.tgz#7b1f58bada62ca827ec0a2078025654845995e1f"
dependencies:
get-value "^2.0.3"
has-values "^0.1.4"
isobject "^2.0.0"
has-value@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/has-value/-/has-value-1.0.0.tgz#18b281da585b1c5c51def24c930ed29a0be6b177"
dependencies:
get-value "^2.0.6"
has-values "^1.0.0"
isobject "^3.0.0"
has-values@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/has-values/-/has-values-0.1.4.tgz#6d61de95d91dfca9b9a02089ad384bff8f62b771"
has-values@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/has-values/-/has-values-1.0.0.tgz#95b0b63fec2146619a6fe57fe75628d5a39efe4f"
dependencies:
is-number "^3.0.0"
kind-of "^4.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
has@^1.0.1, has@^1.0.3:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/has/-/has-1.0.3.tgz#722d7cbfc1f6aa8241f16dd814e011e1f41e8796"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
function-bind "^1.1.1"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
he@1.1.1:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/he/-/he-1.1.1.tgz#93410fd21b009735151f8868c2f271f3427e23fd"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
he@1.2.0, he@^1.2.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/he/-/he-1.2.0.tgz#84ae65fa7eafb165fddb61566ae14baf05664f0f"
Update dependency html-to-text to v5
2019-07-02 03:43:18 +03:00
integrity sha512-F/1DnUGPopORZi0ni+CvrCgHQ5FyEAHRLSApuYWMmrbSwoN2Mn/7k+Gl38gJnR7yyDZk6WLXwiGod1JOWNDKGw==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
he@~0.3.6:
version "0.3.6"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/he/-/he-0.3.6.tgz#9d7bc446e77963933301dd602d5731cb861135e0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
hijackresponse@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/hijackresponse/-/hijackresponse-2.0.1.tgz#45f5e0c9b87d73bad858f66021bec377c736b8b3"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
homedir-polyfill@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/homedir-polyfill/-/homedir-polyfill-1.0.1.tgz#4c2bbc8a758998feebf5ed68580f76d46768b4bc"
dependencies:
parse-passwd "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
hooker@~0.2.3:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.2.3"
resolved "https://registry.yarnpkg.com/hooker/-/hooker-0.2.3.tgz#b834f723cc4a242aa65963459df6d984c5d3d959"
hosted-git-info@^2.1.4:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.7.1"
resolved "https://registry.yarnpkg.com/hosted-git-info/-/hosted-git-info-2.7.1.tgz#97f236977bd6e125408930ff6de3eec6281ec047"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
html-comment-regex@^1.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/html-comment-regex/-/html-comment-regex-1.1.2.tgz#97d4688aeb5c81886a364faa0cad1dda14d433a7"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
html-encoding-sniffer@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/html-encoding-sniffer/-/html-encoding-sniffer-1.0.2.tgz#e70d84b94da53aa375e11fe3a351be6642ca46f8"
integrity sha512-71lZziiDnsuabfdYiUeWdCVyKuqwWi23L8YeIgV9jSSZHCtb6wB1BKWooH7L3tn4/FuZJMVWyNaIDr4RGmaSYw==
dependencies:
whatwg-encoding "^1.0.1"
Update dependency html-to-text to v5
2019-07-02 03:43:18 +03:00
html-to-text@5.1.1:
version "5.1.1"
resolved "https://registry.yarnpkg.com/html-to-text/-/html-to-text-5.1.1.tgz#2d89db7bf34bc7bcb7d546b1b228991a16926e87"
integrity sha512-Bci6bD/JIfZSvG4s0gW/9mMKwBRoe/1RWLxUME/d6WUSZCdY7T60bssf/jFf7EYXRyqU4P5xdClVqiYU0/ypdA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update dependency html-to-text to v5
2019-07-02 03:43:18 +03:00
he "^1.2.0"
htmlparser2 "^3.10.1"
lodash "^4.17.11"
minimist "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
htmlparser2@^3.10.0, htmlparser2@^3.8.3, htmlparser2@^3.9.1, htmlparser2@^3.9.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.10.0"
resolved "https://registry.yarnpkg.com/htmlparser2/-/htmlparser2-3.10.0.tgz#5f5e422dcf6119c0d983ed36260ce9ded0bee464"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
domelementtype "^1.3.0"
domhandler "^2.3.0"
domutils "^1.5.1"
entities "^1.1.1"
inherits "^2.0.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
readable-stream "^3.0.6"
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
Update dependency html-to-text to v5
2019-07-02 03:43:18 +03:00
htmlparser2@^3.10.1:
version "3.10.1"
resolved "https://registry.yarnpkg.com/htmlparser2/-/htmlparser2-3.10.1.tgz#bd679dc3f59897b6a34bb10749c855bb53a9392f"
integrity sha512-IgieNijUMbkDovyoKObU1DUhm1iwNYE/fuifEoEHfd1oZKZDaONBSkal7Y01shxsM49R4XaMdGez3WnF9UfiCQ==
dependencies:
domelementtype "^1.3.1"
domhandler "^2.3.0"
domutils "^1.5.1"
entities "^1.1.1"
inherits "^2.0.1"
readable-stream "^3.1.1"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
http-cache-semantics@^4.0.0:
version "4.0.3"
resolved "https://registry.yarnpkg.com/http-cache-semantics/-/http-cache-semantics-4.0.3.tgz#495704773277eeef6e43f9ab2c2c7d259dda25c5"
integrity sha512-TcIMG3qeVLgDr1TEd2XvHaTnMPwYQUQMIBLy+5pLSDKYFc7UIqj39w8EGzZkaxoLv/l2K8HaI0t5AVA+YYgUew==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
http-errors@1.6.3, http-errors@~1.6.2, http-errors@~1.6.3:
version "1.6.3"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/http-errors/-/http-errors-1.6.3.tgz#8b55680bb4be283a0b5bf4ea2e38580be1d9320d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
depd "~1.1.2"
inherits "2.0.3"
setprototypeof "1.1.0"
statuses ">= 1.4.0 < 2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
http-errors@1.7.2:
version "1.7.2"
resolved "https://registry.yarnpkg.com/http-errors/-/http-errors-1.7.2.tgz#4f5029cf13239f31036e5b2e55292bcfbcc85c8f"
integrity sha512-uUQBt3H/cSIVfch6i1EuPNy/YsRSOUBXTVfZ+yR7Zjez3qjBz6i9+i4zjNaoqcoFVI4lQJ5plg63TvGfRSDCRg==
dependencies:
depd "~1.1.2"
inherits "2.0.3"
setprototypeof "1.1.1"
statuses ">= 1.5.0 < 2"
toidentifier "1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
http-errors@~1.4.0:
version "1.4.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/http-errors/-/http-errors-1.4.0.tgz#6c0242dea6b3df7afda153c71089b31c6e82aabf"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
inherits "2.0.1"
statuses ">= 1.2.1 < 2"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
http-errors@~1.7.2:
version "1.7.3"
resolved "https://registry.yarnpkg.com/http-errors/-/http-errors-1.7.3.tgz#6c619e4f9c60308c38519498c14fbb10aacebb06"
integrity sha512-ZTTX0MWrsQ2ZAhA1cejAwDLycFsd7I7nVtnkT3Ol0aqodaKW+0CTZDQ1uBv5whptCnc8e8HeRRJxRs0kmm/Qfw==
dependencies:
depd "~1.1.2"
inherits "2.0.4"
setprototypeof "1.1.1"
statuses ">= 1.5.0 < 2"
toidentifier "1.0.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
http-parser-js@>=0.4.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "0.5.0"
resolved "https://registry.yarnpkg.com/http-parser-js/-/http-parser-js-0.5.0.tgz#d65edbede84349d0dc30320815a15d39cc3cbbd8"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
http-signature@~1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/http-signature/-/http-signature-1.2.0.tgz#9aecd925114772f3d95b65a60abb8f7c18fbace1"
dependencies:
assert-plus "^1.0.0"
jsprim "^1.2.2"
sshpk "^1.7.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
iconv-lite@0.4.23:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "0.4.23"
resolved "https://registry.yarnpkg.com/iconv-lite/-/iconv-lite-0.4.23.tgz#297871f63be507adcfbfca715d0cd0eed84e9a63"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
safer-buffer ">= 2.1.2 < 3"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
iconv-lite@0.4.24, iconv-lite@^0.4.17, iconv-lite@^0.4.24, iconv-lite@^0.4.4, iconv-lite@~0.4.13:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "0.4.24"
resolved "https://registry.yarnpkg.com/iconv-lite/-/iconv-lite-0.4.24.tgz#2022b4b25fbddc21d2f524974a474aafe733908b"
dependencies:
safer-buffer ">= 2.1.2 < 3"
ieee754@^1.1.4:
version "1.1.12"
resolved "https://registry.yarnpkg.com/ieee754/-/ieee754-1.1.12.tgz#50bf24e5b9c8bb98af4964c941cdb0918da7b60b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
ignore-walk@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/ignore-walk/-/ignore-walk-3.0.1.tgz#a83e62e7d272ac0e3b551aaa82831a19b69f82f8"
dependencies:
minimatch "^3.0.4"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
ignore@^3.3.3:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.3.10"
resolved "https://registry.yarnpkg.com/ignore/-/ignore-3.3.10.tgz#0a97fb876986e8081c631160f8f9f389157f0043"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
ignore@^4.0.3, ignore@^4.0.6:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
version "4.0.6"
resolved "https://registry.yarnpkg.com/ignore/-/ignore-4.0.6.tgz#750e3db5862087b4737ebac8207ffd1ef27b25fc"
Update dependency grunt-contrib-compress to v1.5.0
2019-07-02 03:40:43 +03:00
iltorb@^1.3.10:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.3.10"
resolved "https://registry.yarnpkg.com/iltorb/-/iltorb-1.3.10.tgz#a0d9e4e7d52bf510741442236cbe0cc4230fc9f8"
Update dependency grunt-contrib-compress to v1.5.0
2019-07-02 03:40:43 +03:00
integrity sha512-nyB4+ru1u8CQqQ6w7YjasboKN3NQTN8GH/V/eEssNRKhW6UbdxdWhB9fJ5EEdjJfezKY0qPrcwLyIcgjL8hHxA==
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 21:56:05 +03:00
dependencies:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
detect-libc "^0.2.0"
nan "^2.6.2"
node-gyp "^3.6.2"
prebuild-install "^2.3.0"
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 21:56:05 +03:00
Update dependency image-size to v0.7.4
2019-07-02 12:42:15 +03:00
image-size@0.7.4, image-size@^0.7.4:
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
version "0.7.4"
resolved "https://registry.yarnpkg.com/image-size/-/image-size-0.7.4.tgz#092c1e541a93511917bfc957a1fc7add21c72e87"
integrity sha512-GqPgxs+VkOr12aWwjSkyRzf5atzObWpFtiRuDgxCl2I/SDpZOKZFRD3iIAeAN6/usmn8SeLWRt7a8JRYK0Whbw==
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
immutability-helper@^2.7.1:
version "2.9.1"
resolved "https://registry.yarnpkg.com/immutability-helper/-/immutability-helper-2.9.1.tgz#71c423ba387e67b6c6ceba0650572f2a2a6727df"
integrity sha512-r/RmRG8xO06s/k+PIaif2r5rGc3j4Yhc01jSBfwPCXDLYZwp/yxralI37Df1mwmuzcCsen/E/ITKcTEvc1PQmQ==
dependencies:
invariant "^2.2.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
import-fresh@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/import-fresh/-/import-fresh-3.0.0.tgz#a3d897f420cab0e671236897f75bc14b4885c390"
dependencies:
parent-module "^1.0.0"
resolve-from "^4.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
imurmurhash@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/imurmurhash/-/imurmurhash-0.1.4.tgz#9218b9b2b928a238b13dc4fb6b6d576f231453ea"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
indent-string@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/indent-string/-/indent-string-2.1.0.tgz#8e2d48348742121b4a8218b7a137e9a52049dc80"
dependencies:
repeating "^2.0.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
indent-string@^3.0.0:
version "3.2.0"
resolved "https://registry.yarnpkg.com/indent-string/-/indent-string-3.2.0.tgz#4a5fd6d27cc332f37e5419a504dbb837105c9289"
integrity sha1-Sl/W0nzDMvN+VBmlBNu4NxBckok=
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
indexes-of@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/indexes-of/-/indexes-of-1.0.1.tgz#f30f716c8e2bd346c7b67d3df3915566a7c05607"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
inflection@^1.5.1:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "1.12.0"
resolved "https://registry.yarnpkg.com/inflection/-/inflection-1.12.0.tgz#a200935656d6f5f6bc4dc7502e1aecb703228416"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
inflight@^1.0.4:
version "1.0.6"
resolved "https://registry.yarnpkg.com/inflight/-/inflight-1.0.6.tgz#49bd6331d7d02d0c09bc910a1075ba8165b56df9"
dependencies:
once "^1.3.0"
wrappy "1"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
inherits@2, inherits@2.0.3, inherits@^2.0.1, inherits@^2.0.3, inherits@~2.0.0, inherits@~2.0.1, inherits@~2.0.3:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.0.3"
resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.3.tgz#633c2c83e3da42a502f52466022480f4208261de"
inherits@2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.1.tgz#b17d08d326b4423e568eff719f91b0b1cbdf69f1"
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
inherits@2.0.4, inherits@~2.0.4:
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
version "2.0.4"
resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.4.tgz#0fa2c64f932917c3433a0ded55363aae37416b7c"
integrity sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ini@^1.3.0, ini@^1.3.4, ini@~1.3.0:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.3.5"
resolved "https://registry.yarnpkg.com/ini/-/ini-1.3.5.tgz#eee25f56db1c9ec6085e0c22778083f596abf927"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
inquirer@^3.0.6:
version "3.3.0"
resolved "https://registry.yarnpkg.com/inquirer/-/inquirer-3.3.0.tgz#9dd2f2ad765dcab1ff0443b491442a20ba227dc9"
dependencies:
ansi-escapes "^3.0.0"
chalk "^2.0.0"
cli-cursor "^2.1.0"
cli-width "^2.0.0"
external-editor "^2.0.4"
figures "^2.0.0"
lodash "^4.3.0"
mute-stream "0.0.7"
run-async "^2.2.0"
rx-lite "^4.0.8"
rx-lite-aggregates "^4.0.8"
string-width "^2.1.0"
strip-ansi "^4.0.0"
through "^2.3.6"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
inquirer@^6.2.2:
version "6.4.1"
resolved "https://registry.yarnpkg.com/inquirer/-/inquirer-6.4.1.tgz#7bd9e5ab0567cd23b41b0180b68e0cfa82fc3c0b"
integrity sha512-/Jw+qPZx4EDYsaT6uz7F4GJRNFMRdKNeUZw3ZnKV8lyuUgz/YWRCSUAJMZSVhSq4Ec0R2oYnyi6b3d4JXcL5Nw==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ansi-escapes "^3.2.0"
chalk "^2.4.2"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
cli-cursor "^2.1.0"
cli-width "^2.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
external-editor "^3.0.3"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
figures "^2.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
lodash "^4.17.11"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
mute-stream "0.0.7"
run-async "^2.2.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
rxjs "^6.4.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
string-width "^2.1.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
strip-ansi "^5.1.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
through "^2.3.6"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
interpret@^1.1.0, interpret@^1.2.0:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/interpret/-/interpret-1.2.0.tgz#d5061a6224be58e8083985f5014d844359576296"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
integrity sha512-mT34yGKMNceBQUoVn7iCDKDntA7SC6gycMAWzGx1z/CMCTV7b2AAtXlo3nRyHZ1FelRkQbQjprHSYGwzLtkVbw==
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
interpret@~1.1.0:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/interpret/-/interpret-1.1.0.tgz#7ed1b1410c6a0e0f78cf95d3b8440c63f78b8614"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
Update dependency intl-messageformat to v5.1.2
2019-07-29 03:28:39 +03:00
intl-format-cache@^4.1.2:
version "4.1.3"
resolved "https://registry.yarnpkg.com/intl-format-cache/-/intl-format-cache-4.1.3.tgz#384f43617e0ac0605306ddf02899f190cab84b88"
integrity sha512-nh/HKx3vIKYC4wsQfwKxMedXuSiXZwVCtsmGPPgVTfl26CB30fkgJi3ZChxwZNdBqYpcmf+gdj8QgXWmdRBiOg==
intl-messageformat-parser@^2.1.2:
version "2.1.3"
resolved "https://registry.yarnpkg.com/intl-messageformat-parser/-/intl-messageformat-parser-2.1.3.tgz#c918e36a08bd7ff01349d8ea3736262c986aaeb1"
integrity sha512-YOP2GuQ8Y+f3j2Vti1/abcozYlkv/WsIffsRP8cgtN4Oha5hjhNnucxzyfmeAoDgDHw4s/lNyLylB01369a5lg==
intl-messageformat@5.1.2:
version "5.1.2"
resolved "https://registry.yarnpkg.com/intl-messageformat/-/intl-messageformat-5.1.2.tgz#93f4ad88bba0631764de897190ca9d54dff65f20"
integrity sha512-0xoKREoM5r64m76xsaGZpCmKYTPfHCUwmRFZ1/R5qp0uJdtJxPlUqfAXYLyBgosKKwWX3GY6I+aHvMsY9Lq6ng==
dependencies:
intl-format-cache "^4.1.2"
intl-messageformat-parser "^2.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
intl@1.2.5:
version "1.2.5"
resolved "https://registry.yarnpkg.com/intl/-/intl-1.2.5.tgz#82244a2190c4e419f8371f5aa34daa3420e2abde"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
invariant@^2.2.0:
version "2.2.4"
resolved "https://registry.yarnpkg.com/invariant/-/invariant-2.2.4.tgz#610f3c92c9359ce1db616e538008d23ff35158e6"
integrity sha512-phJfQVBuaJM5raOpJjSfkiD6BpbCE4Ns//LaXl6wGYtUBY83nWS6Rf9tXm2e8VaK60JEjYldbPif/A2B1C2gNA==
dependencies:
loose-envify "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
invert-kv@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/invert-kv/-/invert-kv-1.0.0.tgz#104a8e4aaca6d3d8cd157a8ef8bfab2d7a3ffdb6"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
invert-kv@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/invert-kv/-/invert-kv-2.0.0.tgz#7393f5afa59ec9ff5f67a27620d11c226e3eec02"
integrity sha512-wPVv/y/QQ/Uiirj/vh3oP+1Ww+AWehmi1g5fFWGPF6IpCBCDVrhgHRMvrLfdYcwDh3QJbGXDW4JAuzxElLSqKA==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
ip-regex@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/ip-regex/-/ip-regex-3.0.0.tgz#0a934694b4066558c46294244a23cc33116bf732"
integrity sha512-T8wDtjy+Qf2TAPDQmBp0eGKJ8GavlWlUnamr3wRn6vvdZlKVuJXXMlSncYFRYgVHOM3If5NR1H4+OvVQU9Idvg==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
ipaddr.js@1.8.0:
version "1.8.0"
resolved "https://registry.yarnpkg.com/ipaddr.js/-/ipaddr.js-1.8.0.tgz#eaa33d6ddd7ace8f7f6fe0c9ca0440e706738b1e"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
ipaddr.js@1.9.0:
version "1.9.0"
resolved "https://registry.yarnpkg.com/ipaddr.js/-/ipaddr.js-1.9.0.tgz#37df74e430a0e47550fe54a2defe30d8acd95f65"
integrity sha512-M4Sjn6N/+O6/IXSJseKqHoFc+5FdGJ22sXqnjTpdZweHK64MzEPAyQZyEU3R/KRv2GLoa7nNtg/C2Ev6m7z+eA==
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
is-absolute-url@^2.0.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/is-absolute-url/-/is-absolute-url-2.1.0.tgz#50530dfb84fcc9aa7dbe7852e83a37b93b9f2aa6"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
is-absolute@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-absolute/-/is-absolute-1.0.0.tgz#395e1ae84b11f26ad1795e73c17378e48a301576"
dependencies:
is-relative "^1.0.0"
is-windows "^1.0.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-accessor-descriptor@^0.1.6:
version "0.1.6"
resolved "https://registry.yarnpkg.com/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz#a9e12cb3ae8d876727eeef3843f8a0897b5c98d6"
dependencies:
kind-of "^3.0.2"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
is-accessor-descriptor@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-accessor-descriptor/-/is-accessor-descriptor-1.0.0.tgz#169c2f6d3df1f992618072365c9b0ea1f6878656"
dependencies:
kind-of "^6.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
is-arrayish@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/is-arrayish/-/is-arrayish-0.2.1.tgz#77c99840527aa8ecb1a8ba697b80645a7a926a9d"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
is-arrayish@^0.3.1:
version "0.3.2"
resolved "https://registry.yarnpkg.com/is-arrayish/-/is-arrayish-0.3.2.tgz#4574a2ae56f7ab206896fb431eaeed066fdf8f03"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
is-buffer@^1.1.5, is-buffer@~1.1.1:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.1.6"
resolved "https://registry.yarnpkg.com/is-buffer/-/is-buffer-1.1.6.tgz#efaa2ea9daa0d7ab2ea13a97b2b8ad51fefbe8be"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
is-buffer@~2.0.3:
version "2.0.3"
resolved "https://registry.yarnpkg.com/is-buffer/-/is-buffer-2.0.3.tgz#4ecf3fcf749cbd1e472689e109ac66261a25e725"
integrity sha512-U15Q7MXTuZlrbymiz95PJpZxu8IlipAp4dtS3wOdgPXx3mqBnslrWU14kxfHB+Py/+2PVKSr37dMAgM2A4uArw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
is-builtin-module@^1.0.0:
version "1.0.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/is-builtin-module/-/is-builtin-module-1.0.0.tgz#540572d34f7ac3119f8f76c30cbc1b1e037affbe"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
builtin-modules "^1.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
is-callable@^1.1.4:
version "1.1.4"
resolved "https://registry.yarnpkg.com/is-callable/-/is-callable-1.1.4.tgz#1e1adf219e1eeb684d691f9d6a05ff0d30a24d75"
integrity sha512-r5p9sxJjYnArLjObpjA4xu5EKI3CuKHkJXMhT7kwbpUyIFD1n5PMAsoPvWnvtZiNz7LjkYDRZhd7FlI0eMijEA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-data-descriptor@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz#0b5ee648388e2c860282e793f1856fec3f301b56"
dependencies:
kind-of "^3.0.2"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
is-data-descriptor@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-data-descriptor/-/is-data-descriptor-1.0.0.tgz#d84876321d0e7add03990406abbbbd36ba9268c7"
dependencies:
kind-of "^6.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
is-date-object@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/is-date-object/-/is-date-object-1.0.1.tgz#9aa20eb6aeebbff77fbd33e74ca01b33581d3a16"
integrity sha1-mqIOtq7rv/d/vTPnTKAbM1gdOhY=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-descriptor@^0.1.0:
version "0.1.6"
resolved "https://registry.yarnpkg.com/is-descriptor/-/is-descriptor-0.1.6.tgz#366d8240dde487ca51823b1ab9f07a10a78251ca"
dependencies:
is-accessor-descriptor "^0.1.6"
is-data-descriptor "^0.1.4"
kind-of "^5.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
is-descriptor@^1.0.0, is-descriptor@^1.0.2:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/is-descriptor/-/is-descriptor-1.0.2.tgz#3b159746a66604b04f8c81524ba365c5f14d86ec"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
is-accessor-descriptor "^1.0.0"
is-data-descriptor "^1.0.0"
kind-of "^6.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-extendable@^0.1.0, is-extendable@^0.1.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.1.1"
resolved "https://registry.yarnpkg.com/is-extendable/-/is-extendable-0.1.1.tgz#62b110e289a471418e3ec36a617d472e301dfc89"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-extendable@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/is-extendable/-/is-extendable-1.0.1.tgz#a7470f9e426733d81bd81e1155264e3a3507cab4"
dependencies:
is-plain-object "^2.0.4"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
is-extglob@^2.1.0, is-extglob@^2.1.1:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/is-extglob/-/is-extglob-2.1.1.tgz#a88c02535791f02ed37c76a1b9ea9773c833f8c2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
is-finite@^1.0.0:
version "1.0.2"
resolved "https://registry.yarnpkg.com/is-finite/-/is-finite-1.0.2.tgz#cc6677695602be550ef11e8b4aa6305342b6d0aa"
dependencies:
number-is-nan "^1.0.0"
is-fullwidth-code-point@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz#ef9e31386f031a7f0d643af82fde50c457ef00cb"
dependencies:
number-is-nan "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
is-fullwidth-code-point@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz#a3b30a5c4f199183167aaab93beefae3ddfb654f"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-glob@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/is-glob/-/is-glob-3.1.0.tgz#7ba5ae24217804ac70707b96922567486cc3e84a"
dependencies:
is-extglob "^2.1.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
is-glob@^4.0.0:
version "4.0.1"
resolved "https://registry.yarnpkg.com/is-glob/-/is-glob-4.0.1.tgz#7567dbe9f2f5e2467bc77ab83c4a29482407a5dc"
integrity sha512-5G0tKtBTFImOqDnLB2hG6Bp2qcKEFduo4tZu9MT/H6NQv/ghhy30o55ufafxJ/LdH79LLs2Kfrn85TLKyA7BUg==
dependencies:
is-extglob "^2.1.1"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
is-number@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/is-number/-/is-number-3.0.0.tgz#24fd6201a4782cf50561c810276afc7d12d71195"
dependencies:
kind-of "^3.0.2"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
is-object@~1.0.1:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/is-object/-/is-object-1.0.1.tgz#8952688c5ec2ffd6b03ecc85e769e02903083470"
is-plain-obj@^1.0.0, is-plain-obj@^1.1.0:
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/is-plain-obj/-/is-plain-obj-1.1.0.tgz#71a50c8429dfca773c92a390a4a03b39fcd51d3e"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
is-plain-object@^2.0.1, is-plain-object@^2.0.3, is-plain-object@^2.0.4:
version "2.0.4"
resolved "https://registry.yarnpkg.com/is-plain-object/-/is-plain-object-2.0.4.tgz#2c163b3fafb1b606d9d17928f05c2a1c38e07677"
dependencies:
isobject "^3.0.1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
is-promise@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/is-promise/-/is-promise-2.1.0.tgz#79a2a9ece7f096e80f36d2b2f3bc16c1ff4bf3fa"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
is-property@^1.0.0:
version "1.0.2"
resolved "https://registry.yarnpkg.com/is-property/-/is-property-1.0.2.tgz#57fe1c4e48474edd65b09911f26b1cd4095dda84"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
is-regex@^1.0.4:
version "1.0.4"
resolved "https://registry.yarnpkg.com/is-regex/-/is-regex-1.0.4.tgz#5517489b547091b0930e095654ced25ee97e9491"
integrity sha1-VRdIm1RwkbCTDglWVM7SXul+lJE=
dependencies:
has "^1.0.1"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
is-relative@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-relative/-/is-relative-1.0.0.tgz#a1bb6935ce8c5dba1e8b9754b9b2dcc020e2260d"
dependencies:
is-unc-path "^1.0.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
is-resolvable@^1.0.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/is-resolvable/-/is-resolvable-1.1.0.tgz#fb18f87ce1feb925169c9a407c19318a3206ed88"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
🐛 Fixed server crash when AMP posts contain images with unescaped chars (#10775) no issue - bump `amperize` to v0.4.0 which contains an updated version of `got` which does not crash on invalid image urls
2019-06-05 19:31:23 +03:00
is-retry-allowed@^1.1.0:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/is-retry-allowed/-/is-retry-allowed-1.1.0.tgz#11a060568b67339444033d0125a61a20d564fb34"
🐛 Fixed server crash when AMP posts contain images with unescaped chars (#10775) no issue - bump `amperize` to v0.4.0 which contains an updated version of `got` which does not crash on invalid image urls
2019-06-05 19:31:23 +03:00
is-stream@^1.1.0:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/is-stream/-/is-stream-1.1.0.tgz#12d4a3dd4e68e0b79ceb8dbc84173ae80d91ca44"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
is-svg@^2.0.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/is-svg/-/is-svg-2.1.0.tgz#cf61090da0d9efbcab8722deba6f032208dbb0e9"
dependencies:
html-comment-regex "^1.1.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
is-symbol@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/is-symbol/-/is-symbol-1.0.2.tgz#a055f6ae57192caee329e7a860118b497a950f38"
integrity sha512-HS8bZ9ox60yCJLH9snBpIwv9pYUAkcuLhSA1oero1UB5y9aiQpRA8y2ex945AOtCZL1lJDeIk3G5LthswI46Lw==
dependencies:
has-symbols "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
is-typedarray@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-typedarray/-/is-typedarray-1.0.0.tgz#e479c80858df0c1b11ddda6940f96011fcda4a9a"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
is-unc-path@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-unc-path/-/is-unc-path-1.0.0.tgz#d731e8898ed090a12c352ad2eaed5095ad322c9d"
dependencies:
unc-path-regex "^0.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
is-utf8@^0.2.0:
version "0.2.1"
resolved "https://registry.yarnpkg.com/is-utf8/-/is-utf8-0.2.1.tgz#4b0da1442104d1b336340e80797e865cf39f7d72"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
is-windows@^1.0.1, is-windows@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/is-windows/-/is-windows-1.0.2.tgz#d1850eb9791ecd18e6182ce12a30f396634bb19d"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
isarray@0.0.1:
version "0.0.1"
resolved "https://registry.yarnpkg.com/isarray/-/isarray-0.0.1.tgz#8a18acfca9a8f4177e09abfc6038939b05d1eedf"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
isarray@1.0.0, isarray@~1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.0"
resolved "https://registry.yarnpkg.com/isarray/-/isarray-1.0.0.tgz#bb935d48582cba168c06834957a54a3e07124f11"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
isexe@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/isexe/-/isexe-2.0.0.tgz#e8fbf374dc556ff8947a10dcb0572d633f2cfa10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
isobject@^2.0.0, isobject@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/isobject/-/isobject-2.1.0.tgz#f065561096a3f1da2ef46272f815c840d87e0c89"
dependencies:
isarray "1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
isobject@^3.0.0, isobject@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/isobject/-/isobject-3.0.1.tgz#4e431e92b11a9731636aa1f9c8d1ccbcfdab78df"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
isstream@~0.1.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/isstream/-/isstream-0.1.2.tgz#47e63f7af55afa6f92e1500e690eb8b8529c099a"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
join-component@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/join-component/-/join-component-1.1.0.tgz#b8417b750661a392bee2c2537c68b2a9d4977cd5"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
js-base64@^2.1.9:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "2.5.1"
resolved "https://registry.yarnpkg.com/js-base64/-/js-base64-2.5.1.tgz#1efa39ef2c5f7980bb1784ade4a8af2de3291121"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
js-beautify@1.6.8:
version "1.6.8"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/js-beautify/-/js-beautify-1.6.8.tgz#da1146d34431145309c89be7f69ed16e8e0ff07e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
config-chain "~1.1.5"
editorconfig "^0.13.2"
mkdirp "~0.5.0"
nopt "~3.0.1"
Updated express-hbs to 2.1.2 no-issue ronseal.
2019-05-20 13:35:04 +03:00
js-beautify@1.8.8:
version "1.8.8"
resolved "https://registry.yarnpkg.com/js-beautify/-/js-beautify-1.8.8.tgz#1eb175b73a3571a5f1ed8d98e7cf2b05bfa98471"
integrity sha512-qVNq7ZZ7ZbLdzorvSlRDadS0Rh5oyItaE95v6I4wbbuSiijxn7SnnsV6dvKlcXuO2jX7lK8tn9fBulx34K/Ejg==
dependencies:
config-chain "~1.1.5"
editorconfig "^0.15.0"
mkdirp "~0.5.0"
nopt "~4.0.1"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
"js-tokens@^3.0.0 || ^4.0.0", js-tokens@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-4.0.0.tgz#19203fb59991df98e3a287050d4647cdeaf32499"
integrity sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
js-tokens@^3.0.2:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-3.0.2.tgz#9866df395102130e38f7f996bceb65443209c25b"
Bumped eslint-plugin-ghost version to 0.4.0 no issue - This version allows for async/await syntax to be used in the codebase which is available after dropping Node v6 support
2019-07-05 18:36:02 +03:00
js-yaml@3.13.1, js-yaml@^3.13.0, js-yaml@^3.13.1, js-yaml@~3.13.0:
Bumped js-yaml version to 3.13.1 no issue - The 3.13.1 version contains security fixes described in https://github.com/nodeca/js-yaml/commit/b2f9e882397660da37c5c5bb92e8ccc7bb9eb668
2019-06-24 16:47:37 +03:00
version "3.13.1"
resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.13.1.tgz#aff151b30bfdfa8e49e05da22e7415e9dfa37847"
integrity sha512-YfbcO7jXDdyj0DGxYVSlSeQNHbD7XPWvrVWeVUujrQEoZzWJIRrCPoyk6kL6IAjAG2IolMK4T0hNUe0HOUs5Jw==
dependencies:
argparse "^1.0.7"
esprima "^4.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
js-yaml@^3.9.1:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "3.12.1"
resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.12.1.tgz#295c8632a18a23e054cf5c9d3cecafe678167600"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
argparse "^1.0.7"
esprima "^4.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
js-yaml@~3.7.0:
version "3.7.0"
resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.7.0.tgz#5c967ddd837a9bfdca5f2de84253abe8a1c03b80"
dependencies:
argparse "^1.0.7"
esprima "^2.6.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
jsbn@~0.1.0:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "0.1.1"
resolved "https://registry.yarnpkg.com/jsbn/-/jsbn-0.1.1.tgz#a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
✨ Added caption and language extraction for code blocks when converting HTML via API no issue - update @tryghost/html-to-mobiledoc to v0.3.0 - uses updated @tryghost/kg-parser-plugins that is now shared with Ghost-Admin
2019-05-03 13:55:38 +03:00
jsdom@14.1.0:
version "14.1.0"
resolved "https://registry.yarnpkg.com/jsdom/-/jsdom-14.1.0.tgz#916463b6094956b0a6c1782c94e380cd30e1981b"
integrity sha512-O901mfJSuTdwU2w3Sn+74T+RnDVP+FuV5fH8tcPWyqrseRAb0s5xOtPgCFiPOtLcyK7CLIJwPyD83ZqQWvA5ng==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
abab "^2.0.0"
Bumped and pinned version for @tryghost/html-to-mobiledoc no issue
2019-02-15 22:07:01 +03:00
acorn "^6.0.4"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
acorn-globals "^4.3.0"
array-equal "^1.0.0"
cssom "^0.3.4"
cssstyle "^1.1.1"
Bumped and pinned version for @tryghost/html-to-mobiledoc no issue
2019-02-15 22:07:01 +03:00
data-urls "^1.1.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
domexception "^1.0.1"
escodegen "^1.11.0"
html-encoding-sniffer "^1.0.2"
✨ Added caption and language extraction for code blocks when converting HTML via API no issue - update @tryghost/html-to-mobiledoc to v0.3.0 - uses updated @tryghost/kg-parser-plugins that is now shared with Ghost-Admin
2019-05-03 13:55:38 +03:00
nwsapi "^2.1.3"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
parse5 "5.1.0"
pn "^1.1.0"
request "^2.88.0"
request-promise-native "^1.0.5"
✨ Added caption and language extraction for code blocks when converting HTML via API no issue - update @tryghost/html-to-mobiledoc to v0.3.0 - uses updated @tryghost/kg-parser-plugins that is now shared with Ghost-Admin
2019-05-03 13:55:38 +03:00
saxes "^3.1.9"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
symbol-tree "^3.2.2"
Bumped and pinned version for @tryghost/html-to-mobiledoc no issue
2019-02-15 22:07:01 +03:00
tough-cookie "^2.5.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
w3c-hr-time "^1.0.1"
✨ Added caption and language extraction for code blocks when converting HTML via API no issue - update @tryghost/html-to-mobiledoc to v0.3.0 - uses updated @tryghost/kg-parser-plugins that is now shared with Ghost-Admin
2019-05-03 13:55:38 +03:00
w3c-xmlserializer "^1.1.2"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
webidl-conversions "^4.0.2"
whatwg-encoding "^1.0.5"
Bumped and pinned version for @tryghost/html-to-mobiledoc no issue
2019-02-15 22:07:01 +03:00
whatwg-mimetype "^2.3.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
whatwg-url "^7.0.0"
Bumped and pinned version for @tryghost/html-to-mobiledoc no issue
2019-02-15 22:07:01 +03:00
ws "^6.1.2"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
xml-name-validator "^3.0.0"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
json-buffer@3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/json-buffer/-/json-buffer-3.0.0.tgz#5b1f397afc75d677bde8bcfc0e47e1f9a3d9a898"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
json-parse-better-errors@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/json-parse-better-errors/-/json-parse-better-errors-1.0.2.tgz#bb867cfb3450e69107c131d1c514bab3dc8bcaa9"
integrity sha512-mrqyZKfX5EhL7hvqcV6WG1yYjnjeuYDzDhhcAAUrq8Po85NBQBJP+ZDUT75qZQ98IkUoBqdkExkukOU7Ts2wrw==
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
json-schema-traverse@^0.3.0:
version "0.3.1"
resolved "https://registry.yarnpkg.com/json-schema-traverse/-/json-schema-traverse-0.3.1.tgz#349a6d44c53a51de89b40805c5d5e59b417d3340"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
json-schema-traverse@^0.4.1:
version "0.4.1"
resolved "https://registry.yarnpkg.com/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz#69f6a87d9513ab8bb8fe63bdb0979c448e684660"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
json-schema@0.2.3:
version "0.2.3"
resolved "https://registry.yarnpkg.com/json-schema/-/json-schema-0.2.3.tgz#b480c892e59a2f05954ce727bd3f2a4e882f9e13"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
json-stable-stringify-without-jsonify@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz#9db7b59496ad3f3cfef30a75142d2d930ad72651"
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
json-stringify-safe@5.0.x, json-stringify-safe@^5.0.1, json-stringify-safe@~5.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "5.0.1"
resolved "https://registry.yarnpkg.com/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz#1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 10:51:54 +03:00
jsonfile@^3.0.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "3.0.1"
resolved "https://registry.yarnpkg.com/jsonfile/-/jsonfile-3.0.1.tgz#a5ecc6f65f53f662c4415c7675a0331d0992ec66"
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 10:51:54 +03:00
optionalDependencies:
graceful-fs "^4.1.6"
Bumped gscan version to 2.6.0 no issue - Updated valid theme fixture to be inline with warning that was added when using {{each}} helper instead of {{foreach}}
2019-05-08 17:56:22 +03:00
jsonfile@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/jsonfile/-/jsonfile-4.0.0.tgz#8771aae0799b64076b76640fca058f9c10e33ecb"
integrity sha1-h3Gq4HmbZAdrdmQPygWPnBDjPss=
optionalDependencies:
graceful-fs "^4.1.6"
Update dependency jsonpath to v1.0.2
2019-07-02 13:28:29 +03:00
jsonpath@1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/jsonpath/-/jsonpath-1.0.2.tgz#e6aae681d03e9a77b4651d5d96eac5fc63b1fd13"
integrity sha512-rmzlgFZiQPc6q4HDyK8s9Qb4oxBnI5sF61y/Co5PV0lc3q2bIuRsNdueVbhoSHdKM4fxeimphOAtfz47yjCfeA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
esprima "1.2.2"
Update dependency jsonpath to v1.0.2
2019-07-02 13:28:29 +03:00
static-eval "2.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
underscore "1.7.0"
Update dependency jsonwebtoken to v8.5.1
2019-07-02 03:41:06 +03:00
jsonwebtoken@8.5.1, jsonwebtoken@^8.5.1:
version "8.5.1"
resolved "https://registry.yarnpkg.com/jsonwebtoken/-/jsonwebtoken-8.5.1.tgz#00e71e0b8df54c2121a1f26137df2280673bcc0d"
integrity sha512-XjwVfRS6jTMsqYs0EsuJ4LGxXV14zQybNd4L2r0UvbVnSF9Af8x7p5MzbJ90Ioz/9TI41/hTCvznF/loiSzn8w==
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
dependencies:
Update dependency jsonwebtoken to v8.5.1
2019-07-02 03:41:06 +03:00
jws "^3.2.2"
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
lodash.includes "^4.3.0"
lodash.isboolean "^3.0.3"
lodash.isinteger "^4.0.4"
lodash.isnumber "^3.0.3"
lodash.isplainobject "^4.0.6"
lodash.isstring "^4.0.1"
lodash.once "^4.0.0"
ms "^2.1.1"
Update dependency jsonwebtoken to v8.5.1
2019-07-02 03:41:06 +03:00
semver "^5.6.0"
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
Update dependency jsonwebtoken to v8.5.1
2019-07-02 03:41:06 +03:00
jsonwebtoken@^8.1.0:
version "8.4.0"
resolved "https://registry.yarnpkg.com/jsonwebtoken/-/jsonwebtoken-8.4.0.tgz#8757f7b4cb7440d86d5e2f3becefa70536c8e46a"
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
dependencies:
Update dependency jsonwebtoken to v8.5.1
2019-07-02 03:41:06 +03:00
jws "^3.1.5"
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
lodash.includes "^4.3.0"
lodash.isboolean "^3.0.3"
lodash.isinteger "^4.0.4"
lodash.isnumber "^3.0.3"
lodash.isplainobject "^4.0.6"
lodash.isstring "^4.0.1"
lodash.once "^4.0.0"
ms "^2.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
jsprim@^1.2.2:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.4.1"
resolved "https://registry.yarnpkg.com/jsprim/-/jsprim-1.4.1.tgz#313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
assert-plus "1.0.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
extsprintf "1.3.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
json-schema "0.2.3"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
verror "1.10.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
just-extend@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/just-extend/-/just-extend-4.0.2.tgz#f3f47f7dfca0f989c55410a7ebc8854b07108afc"
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
Added API Key auth middleware to v2 Admin API (#10006) refs #9865 - Added `auth.authenticate.authenticateAdminApiKey` middleware - accepts signed JWT in an `Authorization: Ghost [token]` header - sets `req.api_key` if the token is valid - Updated `authenticatePrivate` middleware stack for v2 admin routes
2019-01-18 15:45:06 +03:00
jwa@^1.1.5:
version "1.1.6"
resolved "https://registry.yarnpkg.com/jwa/-/jwa-1.1.6.tgz#87240e76c9808dbde18783cf2264ef4929ee50e6"
dependencies:
buffer-equal-constant-time "1.0.1"
ecdsa-sig-formatter "1.0.10"
safe-buffer "^5.0.1"
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
jwa@^1.4.1:
version "1.4.1"
resolved "https://registry.yarnpkg.com/jwa/-/jwa-1.4.1.tgz#743c32985cb9e98655530d53641b66c8645b039a"
integrity sha512-qiLX/xhEEFKUAJ6FiBMbes3w9ATzyk5W7Hvzpa/SLYdxNtng+gcurvrI7TbACjIXlsJyr05/S1oUhZrc63evQA==
dependencies:
buffer-equal-constant-time "1.0.1"
ecdsa-sig-formatter "1.0.11"
safe-buffer "^5.0.1"
Added API Key auth middleware to v2 Admin API (#10006) refs #9865 - Added `auth.authenticate.authenticateAdminApiKey` middleware - accepts signed JWT in an `Authorization: Ghost [token]` header - sets `req.api_key` if the token is valid - Updated `authenticatePrivate` middleware stack for v2 admin routes
2019-01-18 15:45:06 +03:00
jws@^3.1.5:
version "3.1.5"
resolved "https://registry.yarnpkg.com/jws/-/jws-3.1.5.tgz#80d12d05b293d1e841e7cb8b4e69e561adcf834f"
dependencies:
jwa "^1.1.5"
safe-buffer "^5.0.1"
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
jws@^3.2.2:
version "3.2.2"
resolved "https://registry.yarnpkg.com/jws/-/jws-3.2.2.tgz#001099f3639468c9414000e99995fa52fb478304"
integrity sha512-YHlZCB6lMTllWDtSPHz/ZXTsi8S00usEV6v1tjq8tOUZzw7DpSDWVXjXDre6ed1w/pd495ODpHZYSdkRTsa0HA==
dependencies:
jwa "^1.4.1"
safe-buffer "^5.0.1"
Update dependency cookie-session to v1.3.3
2019-07-02 03:36:27 +03:00
keygrip@~1.0.3:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/keygrip/-/keygrip-1.0.3.tgz#399d709f0aed2bab0a059e0cdd3a5023a053e1dc"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Revert "Replaced keypair with rsa-keypair module (#10758)" This reverts commit 64735693beda5800bc81fdcd610d71a84ca36896. - `rsa-keypair` is a binary dependency that was failing to install for a lot of users, reverting for now so we can look at alternative options for speeding up boot time
2019-06-26 15:58:50 +03:00
keypair@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/keypair/-/keypair-1.0.1.tgz#7603719270afb6564ed38a22087a06fc9aa4ea1b"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
keyv@^3.0.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/keyv/-/keyv-3.1.0.tgz#ecc228486f69991e49e9476485a5be1e8fc5c4d9"
integrity sha512-9ykJ/46SN/9KPM/sichzQ7OvXyGDYKGTaDlKMGCAlg2UK8KRy4jb0d8sFc+0Tt0YYnThq8X2RZgCg74RPxgcVA==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
json-buffer "3.0.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
kind-of@^3.0.2, kind-of@^3.0.3, kind-of@^3.2.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "3.2.2"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-3.2.2.tgz#31ea21a734bab9bbb0f32466d893aea51e4a3c64"
dependencies:
is-buffer "^1.1.5"
kind-of@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-4.0.0.tgz#20813df3d712928b207378691a45066fae72dd57"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
is-buffer "^1.1.5"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
kind-of@^5.0.0:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
version "5.1.0"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-5.1.0.tgz#729c91e2d857b7a419a1f9aa65685c4c33f5845d"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
kind-of@^6.0.0, kind-of@^6.0.2:
version "6.0.2"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-6.0.2.tgz#01146b36a6218e64e58f3a8d66de5d7fc6f6d051"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Update dependency knex-migrator to v3.3.2
2019-07-02 14:40:15 +03:00
knex-migrator@3.3.2:
version "3.3.2"
resolved "https://registry.yarnpkg.com/knex-migrator/-/knex-migrator-3.3.2.tgz#b5aaf26468d719a988468a8679490ab5eb9252e0"
integrity sha512-5WjwLB8dJqRhh0V8g0TATJcN2AISgeQ6WyfldolhMqvzFbqZmQKStF4GxMNXzMyhw16cEqzR1TiwocTz+Cpgrg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 23:53:11 +03:00
bluebird "^3.5.3"
commander "^2.19.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
compare-ver "^2.0.2"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 23:53:11 +03:00
debug "^4.1.1"
Update dependency knex-migrator to v3.3.2
2019-07-02 14:40:15 +03:00
ghost-ignition "^3.0.0"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 23:53:11 +03:00
knex "^0.16.3"
lodash "^4.17.11"
moment "^2.23.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
nconf "^0.10.0"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 23:53:11 +03:00
resolve "^1.9.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
optionalDependencies:
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 23:53:11 +03:00
mysql "^2.16.0"
sqlite3 "^4.0.6"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency knex to v0.19.1
2019-07-29 03:28:52 +03:00
knex@0.19.1:
version "0.19.1"
resolved "https://registry.yarnpkg.com/knex/-/knex-0.19.1.tgz#a73b88697fe0d8ed1d7520d8ce390728444508f2"
integrity sha512-Y25eu5xMv8h/2/98YQqGMPzzo0AYs/HluST6BR8vkGfRyhme0A51jyCde4y4QInJo2GokrUzrXqlKDqqERg+nQ==
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
dependencies:
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
bluebird "^3.5.5"
colorette "1.0.8"
commander "^2.20.0"
debug "4.1.1"
getopts "2.2.4"
inherits "~2.0.4"
interpret "^1.2.0"
liftoff "3.1.0"
Update dependency knex to v0.19.1
2019-07-29 03:28:52 +03:00
lodash "^4.17.15"
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
mkdirp "^0.5.1"
pg-connection-string "2.0.0"
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
tarn "^2.0.0"
tildify "2.0.0"
uuid "^3.3.2"
v8flags "^3.1.3"
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
Update dependency mock-knex to v0.4.5
2019-07-02 03:37:32 +03:00
knex@^0.16.3:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "0.16.3"
resolved "https://registry.yarnpkg.com/knex/-/knex-0.16.3.tgz#ca9effd4973655f42b42132b9019b0bc6bd20644"
dependencies:
"@babel/polyfill" "^7.0.0"
"@types/bluebird" "^3.5.25"
bluebird "^3.5.3"
chalk "2.4.1"
commander "^2.19.0"
debug "4.1.0"
inherits "~2.0.3"
interpret "^1.1.0"
liftoff "2.5.0"
lodash "^4.17.11"
minimist "1.2.0"
mkdirp "^0.5.1"
pg-connection-string "2.0.0"
tarn "^1.1.4"
tildify "1.2.0"
uuid "^3.3.2"
v8flags "^3.1.1"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
knex@^0.17:
version "0.17.6"
resolved "https://registry.yarnpkg.com/knex/-/knex-0.17.6.tgz#80220cf159cd52768d5b29118c70b18aaf5138fe"
integrity sha512-4SKp8jaBxqlEoaveenmpfnHEv5Kzo6/vhIj8UhW1srGw/FKqARTr+7Fv8C1C1qeVHDjv0coQWuUzN5eermHUsw==
dependencies:
"@babel/polyfill" "^7.4.4"
"@types/bluebird" "^3.5.27"
bluebird "^3.5.5"
colorette "1.0.8"
commander "^2.20.0"
debug "4.1.1"
getopts "2.2.4"
inherits "~2.0.3"
interpret "^1.2.0"
liftoff "3.1.0"
lodash "^4.17.11"
mkdirp "^0.5.1"
pg-connection-string "2.0.0"
tarn "^1.1.5"
tildify "1.2.0"
uuid "^3.3.2"
v8flags "^3.1.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lazystream@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/lazystream/-/lazystream-1.0.0.tgz#f6995fe0f820392f61396be89462407bb77168e4"
dependencies:
readable-stream "^2.0.5"
lcid@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/lcid/-/lcid-1.0.0.tgz#308accafa0bc483a3867b4b6f2b9506251d1b835"
dependencies:
invert-kv "^1.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
lcid@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/lcid/-/lcid-2.0.0.tgz#6ef5d2df60e52f82eb228a4c373e8d1f397253cf"
integrity sha512-avPEb8P8EGnwXKClwsNUgryVjllcRqtMYa49NTsbQagYuT1DcXnl1915oxWjoyGrXR6zH/Y0Zc96xWsPcoDKeA==
dependencies:
invert-kv "^2.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
levn@^0.3.0, levn@~0.3.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.3.0"
resolved "https://registry.yarnpkg.com/levn/-/levn-0.3.0.tgz#3b09924edf9f083c0490fdd4c0bc4421e04764ee"
dependencies:
prelude-ls "~1.1.2"
type-check "~0.3.2"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
liftoff@2.5.0, liftoff@~2.5.0:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
version "2.5.0"
resolved "https://registry.yarnpkg.com/liftoff/-/liftoff-2.5.0.tgz#2009291bb31cea861bbf10a7c15a28caf75c31ec"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
dependencies:
extend "^3.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
findup-sync "^2.0.0"
fined "^1.0.1"
flagged-respawn "^1.0.0"
is-plain-object "^2.0.4"
object.map "^1.0.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
rechoir "^0.6.2"
resolve "^1.1.7"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
liftoff@3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/liftoff/-/liftoff-3.1.0.tgz#c9ba6081f908670607ee79062d700df062c52ed3"
integrity sha512-DlIPlJUkCV0Ips2zf2pJP0unEoT1kwYhiiPUGF3s/jtxTCjziNLoiVVh+jqWOWeFi6mmwQ5fNxvAUyPad4Dfog==
dependencies:
extend "^3.0.0"
findup-sync "^3.0.0"
fined "^1.0.1"
flagged-respawn "^1.0.0"
is-plain-object "^2.0.4"
object.map "^1.0.0"
rechoir "^0.6.2"
resolve "^1.1.7"
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
linkify-it@^2.0.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "2.1.0"
resolved "https://registry.yarnpkg.com/linkify-it/-/linkify-it-2.1.0.tgz#c4caf38a6cd7ac2212ef3c7d2bde30a91561f9db"
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
dependencies:
uc.micro "^1.0.1"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
livereload-js@^2.3.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "2.4.0"
resolved "https://registry.yarnpkg.com/livereload-js/-/livereload-js-2.4.0.tgz#447c31cf1ea9ab52fc20db615c5ddf678f78009c"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
load-json-file@^1.0.0:
version "1.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/load-json-file/-/load-json-file-1.1.0.tgz#956905708d58b4bab4c2261b04f59f31c99374c0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
graceful-fs "^4.1.2"
parse-json "^2.2.0"
pify "^2.0.0"
pinkie-promise "^2.0.0"
strip-bom "^2.0.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
load-json-file@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/load-json-file/-/load-json-file-4.0.0.tgz#2f5f45ab91e33216234fd53adab668eb4ec0993b"
integrity sha1-L19Fq5HjMhYjT9U62rZo607AmTs=
dependencies:
graceful-fs "^4.1.2"
parse-json "^4.0.0"
pify "^3.0.0"
strip-bom "^3.0.0"
locate-path@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/locate-path/-/locate-path-2.0.0.tgz#2b568b265eec944c6d9c0de9c3dbbbca0354cd8e"
integrity sha1-K1aLJl7slExtnA3pw9u7ygNUzY4=
dependencies:
p-locate "^2.0.0"
path-exists "^3.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
locate-path@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/locate-path/-/locate-path-3.0.0.tgz#dbec3b3ab759758071b58fe59fc41871af21400e"
integrity sha512-7AO748wWnIhNqAuaty2ZWHkQHRSNfPVIsPIfwEOWO22AmaoVrWavlOcMR5nzTLNYvp36X220/maaRsrec1G65A==
dependencies:
p-locate "^3.0.0"
path-exists "^3.0.0"
Updated to use count words/images helpers from SDK (#10686) refs #10618 - Added @tryghost/helpers dependency to use Ghost-SDK helpers - Updated countWords, countImages helpers and removed local copy
2019-04-16 05:30:01 +03:00
lodash-es@^4.17.11:
version "4.17.11"
resolved "https://registry.yarnpkg.com/lodash-es/-/lodash-es-4.17.11.tgz#145ab4a7ac5c5e52a3531fb4f310255a152b4be0"
integrity sha512-DHb1ub+rMjjrxqlB3H56/6MXtm1lSksDp2rA2cNWjG8mlDUYFhUj3Di2Zn5IwSU87xLv8tNIQ7sSwE/YOX/D/Q==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.assignin@^4.0.9:
version "4.2.0"
resolved "https://registry.yarnpkg.com/lodash.assignin/-/lodash.assignin-4.2.0.tgz#ba8df5fb841eb0a3e8044232b0e263a8dc6a28a2"
lodash.bind@^4.1.4:
version "4.2.1"
resolved "https://registry.yarnpkg.com/lodash.bind/-/lodash.bind-4.2.1.tgz#7ae3017e939622ac31b7d7d7dcb1b34db1690d35"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
lodash.clonedeep@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.clonedeep/-/lodash.clonedeep-4.5.0.tgz#e23f3f9c4f8fbdde872529c1071857a086e5ccef"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
lodash.defaults@^4.0.0, lodash.defaults@^4.0.1, lodash.defaults@^4.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "4.2.0"
resolved "https://registry.yarnpkg.com/lodash.defaults/-/lodash.defaults-4.2.0.tgz#d09178716ffea4dde9e5fb7b37f6f0802274580c"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
lodash.difference@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.difference/-/lodash.difference-4.5.0.tgz#9ccb4e505d486b91651345772885a2df27fd017c"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
lodash.escaperegexp@^4.1.2:
version "4.1.2"
resolved "https://registry.yarnpkg.com/lodash.escaperegexp/-/lodash.escaperegexp-4.1.2.tgz#64762c48618082518ac3df4ccf5d5886dae20347"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.filter@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.filter/-/lodash.filter-4.6.0.tgz#668b1d4981603ae1cc5a6fa760143e480b4c4ace"
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
lodash.flatten@^4.2.0, lodash.flatten@^4.4.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "4.4.0"
resolved "https://registry.yarnpkg.com/lodash.flatten/-/lodash.flatten-4.4.0.tgz#f31c22225a9632d2bbf8e4addbef240aa765a61f"
lodash.foreach@^4.3.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.foreach/-/lodash.foreach-4.5.0.tgz#1a6a35eace401280c7f06dddec35165ab27e3e53"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
lodash.get@^4.4.2:
version "4.4.2"
resolved "https://registry.yarnpkg.com/lodash.get/-/lodash.get-4.4.2.tgz#2d177f652fa31e939b4438d5341499dfa3825e99"
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
lodash.includes@^4.3.0:
version "4.3.0"
resolved "https://registry.yarnpkg.com/lodash.includes/-/lodash.includes-4.3.0.tgz#60bb98a87cb923c68ca1e51325483314849f553f"
lodash.isboolean@^3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/lodash.isboolean/-/lodash.isboolean-3.0.3.tgz#6c2e171db2a257cd96802fd43b01b20d5f5870f6"
lodash.isinteger@^4.0.4:
version "4.0.4"
resolved "https://registry.yarnpkg.com/lodash.isinteger/-/lodash.isinteger-4.0.4.tgz#619c0af3d03f8b04c31f5882840b77b11cd68343"
lodash.isnumber@^3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/lodash.isnumber/-/lodash.isnumber-3.0.3.tgz#3ce76810c5928d03352301ac287317f11c0b1ffc"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
lodash.isplainobject@^4.0.6:
version "4.0.6"
resolved "https://registry.yarnpkg.com/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz#7c526a52d89b45c45cc690b88163be0497f550cb"
lodash.isstring@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/lodash.isstring/-/lodash.isstring-4.0.1.tgz#d527dfb5456eca7cc9bb95d5daeaf88ba54a5451"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.map@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.map/-/lodash.map-4.6.0.tgz#771ec7839e3473d9c4cde28b19394c3562f4f6d3"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
lodash.memoize@^4.1.2:
version "4.1.2"
resolved "https://registry.yarnpkg.com/lodash.memoize/-/lodash.memoize-4.1.2.tgz#bcc6c49a42a2840ed997f323eada5ecd182e0bfe"
Update dependency node-jose to v1.1.3
2019-07-02 03:37:57 +03:00
lodash.merge@^4.4.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "4.6.1"
resolved "https://registry.yarnpkg.com/lodash.merge/-/lodash.merge-4.6.1.tgz#adc25d9cb99b9391c59624f379fbba60d7111d54"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
lodash.mergewith@^4.6.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "4.6.1"
resolved "https://registry.yarnpkg.com/lodash.mergewith/-/lodash.mergewith-4.6.1.tgz#639057e726c3afbdb3e7d42741caa8d6e4335927"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
➕ Installed jsonwebtoken@8.3.0
2018-11-07 13:07:28 +03:00
lodash.once@^4.0.0:
version "4.1.1"
resolved "https://registry.yarnpkg.com/lodash.once/-/lodash.once-4.1.1.tgz#0dd3971213c7c56df880977d504c88fb471a97ac"
Update dependency node-jose to v1.1.3
2019-07-02 03:37:57 +03:00
lodash.pick@^4.2.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "4.4.0"
resolved "https://registry.yarnpkg.com/lodash.pick/-/lodash.pick-4.4.0.tgz#52f05610fff9ded422611441ed1fc123a03001b3"
lodash.reduce@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.reduce/-/lodash.reduce-4.6.0.tgz#f1ab6b839299ad48f784abbf476596f03b914d3b"
lodash.reject@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.reject/-/lodash.reject-4.6.0.tgz#80d6492dc1470864bbf583533b651f42a9f52415"
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
lodash.set@^4.0.0:
version "4.3.2"
resolved "https://registry.yarnpkg.com/lodash.set/-/lodash.set-4.3.2.tgz#d8757b1da807dde24816b0d6a84bea1a76230b23"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.some@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.some/-/lodash.some-4.6.0.tgz#1bb9f314ef6b8baded13b549169b2a945eb68e4d"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
lodash.sortby@^4.7.0:
version "4.7.0"
resolved "https://registry.yarnpkg.com/lodash.sortby/-/lodash.sortby-4.7.0.tgz#edd14c824e2cc9c1e0b0a1b42bb5210516a42438"
integrity sha1-7dFMgk4sycHgsKG0K7UhBRakJDg=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash.unescape@^4.0.0:
version "4.0.1"
resolved "https://registry.yarnpkg.com/lodash.unescape/-/lodash.unescape-4.0.1.tgz#bf2249886ce514cda112fae9218cdc065211fc9c"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
lodash.union@^4.6.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.union/-/lodash.union-4.6.0.tgz#48bb5088409f16f1821666641c44dd1aaae3cd88"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
lodash.uniq@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.uniq/-/lodash.uniq-4.5.0.tgz#d0225373aeb652adc1bc82e4945339a842754773"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
lodash@4.17.11, lodash@^4.13.1, lodash@^4.14.2, lodash@^4.16.4, lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.4, lodash@^4.17.5, lodash@^4.3.0, lodash@^4.7.0, lodash@^4.8.0, lodash@~4.17.10, lodash@~4.17.5:
Removed api integration tests (#9940) refs #9866 - moved the tests either to unit tests or routing tests - or removed test case (a lot) - this commit is very big 🤪, it was not rly possible to create clean commits for this - it only changes the test env, no real code is touched Next steps: - optimise folder structure + make v2 testing possible - reduce some more tests from routing and model integeration tests
2018-10-06 23:13:52 +03:00
version "4.17.11"
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency knex to v0.19.1
2019-07-29 03:28:52 +03:00
lodash@4.17.15, lodash@^4.17.15:
Update dependency lodash to v4.17.15
2019-07-22 03:31:47 +03:00
version "4.17.15"
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.15.tgz#b447f6670a0455bbfeedd11392eff330ea097548"
integrity sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==
lodash@^4.17.14:
Update dependency lodash to v4.17.14
2019-07-15 03:28:07 +03:00
version "4.17.14"
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.14.tgz#9ce487ae66c96254fe20b599f21b6816028078ba"
integrity sha512-mmKYbW3GLuJeX+iGP+Y7Gp1AiGHGbXHCOh/jZmrawMmsE7MS4znI3RL2FsjbqOyMayHInjOeykW7PEajUk1/xw==
Update dependency lodash to v4.17.13 [SECURITY]
2019-07-11 13:37:38 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
log-symbols@2.2.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/log-symbols/-/log-symbols-2.2.0.tgz#5740e1c5d6f0dfda4ad9323b5332107ef6b4c40a"
integrity sha512-VeIAFslyIerEJLXHziedo2basKbMKtTw3vfn5IzG0XTjhAVEJyNHnL2p7vc+wBDSdQuUpNw3M2u6xb9QsAY5Eg==
dependencies:
chalk "^2.0.1"
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 19:53:44 +03:00
lolex@^2.3.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.7.5"
resolved "https://registry.yarnpkg.com/lolex/-/lolex-2.7.5.tgz#113001d56bfc7e02d56e36291cc5c413d1aa0733"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 19:53:44 +03:00
lolex@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/lolex/-/lolex-3.0.0.tgz#f04ee1a8aa13f60f1abd7b0e8f4213ec72ec193e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
long-timeout@~0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/long-timeout/-/long-timeout-0.1.1.tgz#9721d788b47e0bcb5a24c2e2bee1a0da55dab514"
Installed deps required for members refs #10213
2018-12-10 12:24:42 +03:00
long@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/long/-/long-4.0.0.tgz#9a7b71cfb7d361a194ea555241c92f7468d5bf28"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
loose-envify@^1.0.0, loose-envify@^1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/loose-envify/-/loose-envify-1.4.0.tgz#71ee51fa7be4caec1a63839f7e682d8132d30caf"
integrity sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==
dependencies:
js-tokens "^3.0.0 || ^4.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
loud-rejection@^1.0.0:
version "1.6.0"
resolved "https://registry.yarnpkg.com/loud-rejection/-/loud-rejection-1.6.0.tgz#5b46f80147edee578870f086d04821cf998e551f"
dependencies:
currently-unhandled "^0.4.1"
signal-exit "^3.0.0"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
lower-case@^1.1.1:
version "1.1.4"
resolved "https://registry.yarnpkg.com/lower-case/-/lower-case-1.1.4.tgz#9a2cabd1b9e8e0ae993a4bf7d5875c39c42e8eac"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
lowercase-keys@^1.0.0, lowercase-keys@^1.0.1:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/lowercase-keys/-/lowercase-keys-1.0.1.tgz#6f9e30b47084d971a7c820ff15a6c5167b74c26f"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
integrity sha512-G2Lj61tXDnVFFOi8VZds+SoQjtQC3dgokKdDG2mTm1tx4m50NUHBOZSBwQQHyy0V12A0JTG4icfZQH+xPyh8VA==
lowercase-keys@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/lowercase-keys/-/lowercase-keys-2.0.0.tgz#2603e78b7b4b0006cbca2fbcc8a3202558ac9479"
integrity sha512-tqNXrS78oMOE73NMxK4EMLQsQowWf8jKooH9g7xPavRT706R6bkQJ6DY2Te7QukaZsulxa30wQ7bk0pm4XiHmA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lru-cache@^3.2.0:
version "3.2.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-3.2.0.tgz#71789b3b7f5399bec8565dda38aa30d2a097efee"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
pseudomap "^1.0.1"
Updated express-hbs to 2.1.2 no-issue ronseal.
2019-05-20 13:35:04 +03:00
lru-cache@^4.0.0, lru-cache@^4.0.1, lru-cache@^4.1.5:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "4.1.5"
resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-4.1.5.tgz#8bbe50ea85bed59bc9e33dcab8235ee9bcf443cd"
Updated express-hbs to 2.1.2 no-issue ronseal.
2019-05-20 13:35:04 +03:00
integrity sha512-sWZlbEP2OsHNkXrMl5GYk/jKk70MBng6UU4YI/qGDYbgf6YbP4EvmqISbXCoJiRKs+1bSpFHVgQxvJ17F2li5g==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
pseudomap "^1.0.2"
yallist "^2.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
mailcomposer@~0.2.10:
version "0.2.12"
resolved "https://registry.yarnpkg.com/mailcomposer/-/mailcomposer-0.2.12.tgz#4d02a604616adcb45fb36d37513f4c1bd0b75681"
dependencies:
dkim-signer "~0.1.1"
follow-redirects "0.0.3"
he "~0.3.6"
mime "~1.2.11"
mimelib "~0.2.15"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
make-dir@^2.0.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/make-dir/-/make-dir-2.1.0.tgz#5f0310e18b8be898cc07009295a30ae41e91e6f5"
integrity sha512-LS9X+dc8KLxXCb8dni79fLIIUA5VyZoyjSMCwTluaXA0o27cCK0bhXkpgw+sTXVpPy/lSO57ilRixqk0vDmtRA==
dependencies:
pify "^4.0.1"
semver "^5.6.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
make-iterator@^1.0.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/make-iterator/-/make-iterator-1.0.1.tgz#29b33f312aa8f547c4a5e490f56afcec99133ad6"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
dependencies:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
kind-of "^6.0.2"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
map-age-cleaner@^0.1.1:
version "0.1.3"
resolved "https://registry.yarnpkg.com/map-age-cleaner/-/map-age-cleaner-0.1.3.tgz#7d583a7306434c055fe474b0f45078e6e1b4b92a"
integrity sha512-bJzx6nMoP6PDLPBFmg7+xRKeFZvFboMrGlxmNj9ClvX53KrmvM5bXFXEWjbz4cz1AFn+jWJ9z/DJSz7hrs0w3w==
dependencies:
p-defer "^1.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
map-cache@^0.2.0, map-cache@^0.2.2:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
version "0.2.2"
resolved "https://registry.yarnpkg.com/map-cache/-/map-cache-0.2.2.tgz#c32abd0bd6525d9b051645bb4f26ac5dc98a0dbf"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
map-obj@^1.0.0, map-obj@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/map-obj/-/map-obj-1.0.1.tgz#d933ceb9205d82bdcf4886f6742bdc2b4dea146d"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
map-obj@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/map-obj/-/map-obj-2.0.0.tgz#a65cd29087a92598b8791257a523e021222ac1f9"
integrity sha1-plzSkIepJZi4eRJXpSPgISIqwfk=
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
map-visit@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/map-visit/-/map-visit-1.0.0.tgz#ecdca8f13144e660f1b5bd41f12f3479d98dfb8f"
dependencies:
object-visit "^1.0.0"
Update dependency markdown-it-footnote to v3.0.2
2019-07-15 03:28:17 +03:00
markdown-it-footnote@3.0.2:
version "3.0.2"
resolved "https://registry.yarnpkg.com/markdown-it-footnote/-/markdown-it-footnote-3.0.2.tgz#1575ee7a093648d4e096aa33386b058d92ac8bc1"
integrity sha512-JVW6fCmZWjvMdDQSbOT3nnOQtd9iAXmw7hTSh26+v42BnvXeVyGMDBm5b/EZocMed2MbCAHiTX632vY0FyGB8A==
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
markdown-it-lazy-headers@0.1.3:
version "0.1.3"
resolved "https://registry.yarnpkg.com/markdown-it-lazy-headers/-/markdown-it-lazy-headers-0.1.3.tgz#e70dd4da79c87a9ce82ca4701b8b7c0e2d72297b"
markdown-it-mark@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/markdown-it-mark/-/markdown-it-mark-2.0.0.tgz#46a1aa947105aed8188978e0a016179e404f42c7"
Update dependency markdown-it to v9
2019-07-15 09:19:36 +03:00
markdown-it@9.0.1:
version "9.0.1"
resolved "https://registry.yarnpkg.com/markdown-it/-/markdown-it-9.0.1.tgz#aafe363c43718720b6575fd10625cde6e4ff2d47"
integrity sha512-XC9dMBHg28Xi7y5dPuLjM61upIGPJG8AiHNHYqIaXER2KNnn7eKnM5/sF0ImNnyoV224Ogn9b1Pck8VH4k0bxw==
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
dependencies:
argparse "^1.0.7"
entities "~1.1.1"
linkify-it "^2.0.0"
mdurl "^1.0.1"
Bump markdown-it to version 8.4.1 (#9484) no issue - which bumps the sub-dependency "uc.micro" to 1.0.5 - this version is now MIT licensed
2018-03-05 12:03:24 +03:00
uc.micro "^1.0.5"
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
matchdep@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/matchdep/-/matchdep-2.0.0.tgz#c6f34834a0d8dbc3b37c27ee8bbcb27c7775582e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
findup-sync "^2.0.0"
micromatch "^3.0.4"
resolve "^1.4.0"
stack-trace "0.0.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
math-expression-evaluator@^1.2.14:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.2.17"
resolved "https://registry.yarnpkg.com/math-expression-evaluator/-/math-expression-evaluator-1.2.17.tgz#de819fdbcd84dccd8fae59c6aeb79615b9d266ac"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
maxmin@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/maxmin/-/maxmin-2.1.0.tgz#4d3b220903d95eee7eb7ac7fa864e72dc09a3166"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
chalk "^1.0.0"
figures "^1.0.1"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
gzip-size "^3.0.0"
pretty-bytes "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 15:36:46 +03:00
md5@^2.2.1:
version "2.2.1"
resolved "https://registry.yarnpkg.com/md5/-/md5-2.2.1.tgz#53ab38d5fe3c8891ba465329ea23fac0540126f9"
dependencies:
charenc "~0.0.1"
crypt "~0.0.1"
is-buffer "~1.1.1"
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 19:48:14 +03:00
mdurl@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/mdurl/-/mdurl-1.0.1.tgz#fe85b2ec75a59037f2adfec100fd6c601761152e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
media-typer@0.3.0:
version "0.3.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/media-typer/-/media-typer-0.3.0.tgz#8710d7af0aa626f8fffa1ce00168545263255748"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
mem@^4.0.0:
version "4.3.0"
resolved "https://registry.yarnpkg.com/mem/-/mem-4.3.0.tgz#461af497bc4ae09608cdb2e60eefb69bff744178"
integrity sha512-qX2bG48pTqYRVmDB37rn/6PT7LcR8T7oAX3bf99u1Tt1nzxYfxkgqDwUwolPlXweM0XzBOBFzSx4kfp7KP1s/w==
dependencies:
map-age-cleaner "^0.1.1"
mimic-fn "^2.0.0"
p-is-promise "^2.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
meow@^3.3.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "3.7.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/meow/-/meow-3.7.0.tgz#72cb668b425228290abbfa856892587308a801fb"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
camelcase-keys "^2.0.0"
decamelize "^1.1.2"
loud-rejection "^1.0.0"
map-obj "^1.0.1"
minimist "^1.1.3"
normalize-package-data "^2.3.4"
object-assign "^4.0.1"
read-pkg-up "^1.0.1"
redent "^1.0.0"
trim-newlines "^1.0.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
meow@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/meow/-/meow-5.0.0.tgz#dfc73d63a9afc714a5e371760eb5c88b91078aa4"
integrity sha512-CbTqYU17ABaLefO8vCU153ZZlprKYWDljcndKKDCFcYQITzWCXZAVk4QMFZPgvzrnUQ3uItnIE/LoUOwrT15Ig==
dependencies:
camelcase-keys "^4.0.0"
decamelize-keys "^1.0.0"
loud-rejection "^1.0.0"
minimist-options "^3.0.1"
normalize-package-data "^2.3.4"
read-pkg-up "^3.0.0"
redent "^2.0.0"
trim-newlines "^2.0.0"
yargs-parser "^10.0.0"
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 16:59:06 +03:00
merge-descriptors@1.0.1, merge-descriptors@~1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/merge-descriptors/-/merge-descriptors-1.0.1.tgz#b00aaa556dd8b44568150ec9d1b953f3f90cbb61"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
merge2@^1.2.3:
version "1.2.3"
resolved "https://registry.yarnpkg.com/merge2/-/merge2-1.2.3.tgz#7ee99dbd69bb6481689253f018488a1b902b0ed5"
integrity sha512-gdUU1Fwj5ep4kplwcmftruWofEFt6lfpkkr3h860CXbAB9c3hGb55EOL2ali0Td5oebvW0E1+3Sr+Ur7XfKpRA==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
methods@^1.1.1, methods@^1.1.2, methods@~1.1.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/methods/-/methods-1.1.2.tgz#5529a4d67654134edcc5266656835b0f851afcee"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
micromatch@^3.0.4, micromatch@^3.1.10:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
version "3.1.10"
resolved "https://registry.yarnpkg.com/micromatch/-/micromatch-3.1.10.tgz#70859bc95c9840952f359a068a3fc49f9ecfac23"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
arr-diff "^4.0.0"
array-unique "^0.3.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
braces "^2.3.1"
define-property "^2.0.2"
extend-shallow "^3.0.2"
extglob "^2.0.4"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
fragment-cache "^0.2.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
kind-of "^6.0.2"
nanomatch "^1.2.9"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
object.pick "^1.3.0"
regex-not "^1.0.0"
snapdragon "^0.8.1"
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
to-regex "^3.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
mime-db@1.40.0, "mime-db@>= 1.40.0 < 2":
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
version "1.40.0"
resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.40.0.tgz#a65057e998db090f732a68f6c276d387d4126c32"
integrity sha512-jYdeOMPy9vnxEqFRRo6ZvTZ8d9oPb+k18PKoYNYUe2stVEBPPwsln/qWzdbmaIvnhZ9v2P+CuecK+fpUfsV2mA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
mime-db@~1.25.0:
version "1.25.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.25.0.tgz#c18dbd7c73a5dbf6f44a024dc0d165a1e7b1c392"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
mime-db@~1.37.0:
version "1.37.0"
resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.37.0.tgz#0b6a0ce6fdbe9576e25f1f2d2fde8830dc0ad0d8"
Update moment-timezone to version 0.5.13 🚀 (#8272) * chore(package): update moment-timezone to version 0.5.13 https://greenkeeper.io/ * chore: yarn.lock
2017-04-05 10:56:39 +03:00
mime-types@2.1.13:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.1.13"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/mime-types/-/mime-types-2.1.13.tgz#e07aaa9c6c6b9a7ca3012c69003ad25a39e92a88"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
mime-db "~1.25.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
mime-types@^2.1.12, mime-types@~2.1.18, mime-types@~2.1.19:
version "2.1.21"
resolved "https://registry.yarnpkg.com/mime-types/-/mime-types-2.1.21.tgz#28995aa1ecb770742fe6ae7e58f9181c744b3f96"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
mime-db "~1.37.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
mime-types@~2.1.24:
version "2.1.24"
resolved "https://registry.yarnpkg.com/mime-types/-/mime-types-2.1.24.tgz#b6f8d0b3e951efb77dedeca194cff6d16f676f81"
integrity sha512-WaFHS3MCl5fapm3oLxU4eYDw77IQM2ACcxQ9RIxfaC3ooc6PFuBMGZZsYpvoXS5D5QTWPieo1jjLdAm3TBP3cQ==
dependencies:
mime-db "1.40.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
mime@1.4.1:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
version "1.4.1"
resolved "https://registry.yarnpkg.com/mime/-/mime-1.4.1.tgz#121f9ebc49e3766f311a76e1fa1c8003c4b03aa6"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
mime@1.6.0, mime@^1.4.1:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.6.0"
resolved "https://registry.yarnpkg.com/mime/-/mime-1.6.0.tgz#32cd9e5c64553bd58d19a568af452acff04981b1"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
integrity sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
mime@~1.2.11:
version "1.2.11"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/mime/-/mime-1.2.11.tgz#58203eed86e3a5ef17aed2b7d9ebd47f0a60dd10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
mimelib@~0.2.15:
version "0.2.19"
resolved "https://registry.yarnpkg.com/mimelib/-/mimelib-0.2.19.tgz#37ec90a6ac7d00954851d0b2c31618f0a49da0ee"
dependencies:
addressparser "~0.3.2"
encoding "~0.1.7"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
mimic-fn@^1.0.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/mimic-fn/-/mimic-fn-1.2.0.tgz#820c86a39334640e99516928bd03fca88057d022"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
mimic-fn@^2.0.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/mimic-fn/-/mimic-fn-2.1.0.tgz#7ed2c2ccccaf84d3ffcb7a69b57711fc2083401b"
integrity sha512-OqbOk5oEQeAZ8WXWydlu9HJjz9WVdEIvamMCcXmuqUYjTknH/sqsWvhQ3vgwKFRR1HpjvNBKQ37nbJgYzGqGcg==
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
mimic-response@^1.0.0, mimic-response@^1.0.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/mimic-response/-/mimic-response-1.0.1.tgz#4923538878eef42063cb8a3e3b0798781487ab1b"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 02:54:51 +03:00
mingo@2.2.2:
version "2.2.2"
resolved "https://registry.yarnpkg.com/mingo/-/mingo-2.2.2.tgz#be69d486ae6e0ac54b979dc5f4412db21851f693"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
"minimatch@2 || 3", minimatch@3.0.4, minimatch@^3.0.2, minimatch@^3.0.4, minimatch@~3.0.2:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
version "3.0.4"
resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-3.0.4.tgz#5166e286457f03306064be5497e8dbb0c3d32083"
dependencies:
brace-expansion "^1.1.7"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
minimist-options@^3.0.1:
version "3.0.2"
resolved "https://registry.yarnpkg.com/minimist-options/-/minimist-options-3.0.2.tgz#fba4c8191339e13ecf4d61beb03f070103f3d954"
integrity sha512-FyBrT/d0d4+uiZRbqznPXqw3IpZZG3gl3wKWiX784FycUKVwBt0uLBFkQrtE4tZOrgo78nZp2jnKz3L65T5LdQ==
dependencies:
arrify "^1.0.1"
is-plain-obj "^1.1.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
minimist@0.0.8:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.0.8"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/minimist/-/minimist-0.0.8.tgz#857fcabfc3397d2625b8228262e86aa7a011b05d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Removed run-sequence dev dependency no issue - not used
2017-11-28 21:34:43 +03:00
minimist@1.2.0, minimist@^1.1.3, minimist@^1.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.2.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.0.tgz#a35008b20f41383eec1fb914f4cd5df79a264284"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
minimist@~0.0.1:
version "0.0.10"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/minimist/-/minimist-0.0.10.tgz#de3f98543dbf96082be48ad1a0c7cda836301dcf"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
minipass@^2.2.1, minipass@^2.3.4:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.3.5"
resolved "https://registry.yarnpkg.com/minipass/-/minipass-2.3.5.tgz#cacebe492022497f656b0f0f51e2682a9ed2d848"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
safe-buffer "^5.1.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
yallist "^3.0.0"
Installed @tryghost/members-theme-bindings@0.1.0 no-issue
2019-04-23 17:49:36 +03:00
minivents@^2.2.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/minivents/-/minivents-2.2.0.tgz#559492edc04bc00b62168850af5b8ca06d5e088b"
integrity sha1-VZSS7cBLwAtiFohQr1uMoG1eCIs=
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
minizlib@^1.1.1:
version "1.2.1"
resolved "https://registry.yarnpkg.com/minizlib/-/minizlib-1.2.1.tgz#dd27ea6136243c7c880684e8672bb3a45fd9b614"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
minipass "^2.2.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
mixin-deep@^1.2.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.3.1"
resolved "https://registry.yarnpkg.com/mixin-deep/-/mixin-deep-1.3.1.tgz#a49e7268dce1a0d9698e45326c5626df3543d0fe"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
for-in "^1.0.2"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
is-extendable "^1.0.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
mkdirp@0.5.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.5.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.0.tgz#1d73076a6df986cd9344e15e71fcc05a4c9abf12"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
minimist "0.0.8"
Removed coverage tasks from Gruntfile refs #9441
2019-04-08 17:12:48 +03:00
mkdirp@0.5.1, "mkdirp@>=0.5 0", mkdirp@^0.5.0, mkdirp@^0.5.1, mkdirp@~0.5.0, mkdirp@~0.5.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.5.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.1.tgz#30057438eac6cf7f8c4767f38648d6697d75c903"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
minimist "0.0.8"
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 21:07:33 +03:00
mobiledoc-dom-renderer@0.6.5:
version "0.6.5"
resolved "https://registry.yarnpkg.com/mobiledoc-dom-renderer/-/mobiledoc-dom-renderer-0.6.5.tgz#56c0302c4f9c30840ab5b9b20dfe905aed1e437b"
Update ghost-editor to version 0.1.9 🚀 (#8019) * chore(package): update ghost-editor to version 0.1.9 https://greenkeeper.io/ * chore: yarn.lock
2017-02-17 17:31:28 +03:00
Update dependency mobiledoc-dom-renderer to v0.6.6
2019-07-02 03:37:17 +03:00
mobiledoc-dom-renderer@0.6.6:
version "0.6.6"
resolved "https://registry.yarnpkg.com/mobiledoc-dom-renderer/-/mobiledoc-dom-renderer-0.6.6.tgz#4161e7b74dbf82b15c637385ecc3135bc663d149"
integrity sha512-zROTcb/LJyH9udDO1d3zludyP4cOaBdb6HtueP6yXWOxKy6hxr/mM6tgJTVOfYTRMThNytctOAuDG703dMMbdg==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
mobiledoc-text-renderer@0.3.2:
version "0.3.2"
resolved "https://registry.yarnpkg.com/mobiledoc-text-renderer/-/mobiledoc-text-renderer-0.3.2.tgz#126a167a6cf8b6cd7e58c85feb18043603834580"
integrity sha1-EmoWemz4ts1+WMhf6xgENgODRYA=
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
mocha@6.1.4:
version "6.1.4"
resolved "https://registry.yarnpkg.com/mocha/-/mocha-6.1.4.tgz#e35fada242d5434a7e163d555c705f6875951640"
integrity sha512-PN8CIy4RXsIoxoFJzS4QNnCH4psUCPWc4/rPrst/ecSJJbLBkubMiyGCP2Kj/9YnWbotFqAoeXyXMucj7gwCFg==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ansi-colors "3.2.3"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
browser-stdout "1.3.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
debug "3.2.6"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
diff "3.5.0"
escape-string-regexp "1.0.5"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
find-up "3.0.0"
glob "7.1.3"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
growl "1.10.5"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
he "1.2.0"
js-yaml "3.13.1"
log-symbols "2.2.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
minimatch "3.0.4"
mkdirp "0.5.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ms "2.1.1"
node-environment-flags "1.0.5"
object.assign "4.1.0"
strip-json-comments "2.0.1"
supports-color "6.0.0"
which "1.3.1"
wide-align "1.1.3"
yargs "13.2.2"
yargs-parser "13.0.0"
yargs-unparser "1.5.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
mocha@^4.0.0:
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
version "4.1.0"
resolved "https://registry.yarnpkg.com/mocha/-/mocha-4.1.0.tgz#7d86cfbcf35cb829e2754c32e17355ec05338794"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
browser-stdout "1.3.0"
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 21:32:03 +03:00
commander "2.11.0"
debug "3.1.0"
diff "3.3.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
escape-string-regexp "1.0.5"
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 21:32:03 +03:00
glob "7.1.2"
growl "1.10.3"
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
he "1.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
mkdirp "0.5.1"
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 21:32:03 +03:00
supports-color "4.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency mock-knex to v0.4.6
2019-07-15 03:28:30 +03:00
mock-knex@0.4.6:
version "0.4.6"
resolved "https://registry.yarnpkg.com/mock-knex/-/mock-knex-0.4.6.tgz#3256db9bd29fb3ed1755142aa6a3719eeb9c354a"
integrity sha512-zWZqAd1RauA9YBeEZaiGHwqtuMnKH3z1fYxbCbe/cPrKdsWJh5aIXFtDEfa8Cz8xJ4B/dZOOp9VcBugaAAJHfQ==
Removed api integration tests (#9940) refs #9866 - moved the tests either to unit tests or routing tests - or removed test case (a lot) - this commit is very big 🤪, it was not rly possible to create clean commits for this - it only changes the test env, no real code is touched Next steps: - optimise folder structure + make v2 testing possible - reduce some more tests from routing and model integeration tests
2018-10-06 23:13:52 +03:00
dependencies:
bluebird "^3.4.1"
lodash "^4.14.2"
semver "^5.3.0"
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 16:59:06 +03:00
module-not-found-error@^1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/module-not-found-error/-/module-not-found-error-1.0.1.tgz#cf8b4ff4f29640674d6cdd02b0e3bc523c2bbdc0"
Updated dependency @tryghost/url-utils to v0.1.4 refs #10870 - Reverts moment-timezone version in url-utils to 0.5.23 to fix moment format issue
2019-07-30 17:47:38 +03:00
moment-timezone@0.5.23:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "0.5.23"
resolved "https://registry.yarnpkg.com/moment-timezone/-/moment-timezone-0.5.23.tgz#7cbb00db2c14c71b19303cb47b0fb0a6d8651463"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Update moment-timezone to version 0.5.12 🚀 (#8247) * chore(package): update moment-timezone to version 0.5.12 https://greenkeeper.io/ * chore: yarn.lock
2017-04-04 10:37:25 +03:00
moment ">= 2.9.0"
Update dependency @tryghost/url-utils to v0.1.3
2019-07-29 03:28:16 +03:00
Bumped moment to version 2.24.0 no issue
2019-01-22 11:11:57 +03:00
moment@2.24.0, "moment@>= 2.9.0", moment@^2.10.6, moment@^2.15.2, moment@^2.18.1, moment@^2.19.3, moment@^2.23.0:
Respected peer dependency for bookshelf no issue - need to use knex 0.14.x for now - Bookshelf already bumped the peer dependency in master, but was not released yet
2019-01-22 10:58:28 +03:00
version "2.24.0"
resolved "https://registry.yarnpkg.com/moment/-/moment-2.24.0.tgz#0d055d53f5052aa653c9f6eb68bb5d12bf5c2b5b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
⬆️ bump dependencies no issue - gscan@1.1.2 - body-parser@1.17.2 - debug@2.6.8 - express@4.15.3 - html-to-text@3.3.0 - image-size@0.5.5 - uuid@3.1.0
2017-06-22 20:40:56 +03:00
ms@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/ms/-/ms-2.0.0.tgz#5608aeadfc00be6c2901df5f9861788de0d597c8"
Update debug to version 2.6.4 🚀 (#8367) * chore(package): update debug to version 2.6.4 https://greenkeeper.io/ * chore: yarn.lock
2017-04-24 17:37:02 +03:00
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
ms@2.1.1, ms@^2.0.0, ms@^2.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.1.tgz#30a5864eb3ebb0a66f2ebe6d727af06a09d86e0a"
Bump dependencies no issue - ghost-ignition@2.9.4 - fixed log rotation (https://github.com/TryGhost/Ignition/commit/c8f256430a5d03c6bce7872910eecc5576fd4b55) - multer@1.3.1 - uuid@3.3.2 - nock@9.4.0
2018-07-02 13:28:30 +03:00
Update dependency multer to v1.4.2
2019-07-23 13:26:52 +03:00
multer@1.4.2:
version "1.4.2"
resolved "https://registry.yarnpkg.com/multer/-/multer-1.4.2.tgz#2f1f4d12dbaeeba74cb37e623f234bf4d3d2057a"
integrity sha512-xY8pX7V+ybyUpbYMxtjM9KAiD9ixtg5/JkeKUTD6xilfDv0vzzOFcCp4Ljb1UU3tSOM3VTZtKo63OmzOrGi3Cg==
dependencies:
append-field "^1.0.0"
busboy "^0.2.11"
concat-stream "^1.5.2"
mkdirp "^0.5.1"
object-assign "^4.1.1"
on-finished "^2.3.0"
type-is "^1.6.4"
xtend "^4.0.0"
multer@^1.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.4.1"
resolved "https://registry.yarnpkg.com/multer/-/multer-1.4.1.tgz#24b12a416a22fec2ade810539184bf138720159e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
append-field "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
busboy "^0.2.11"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
concat-stream "^1.5.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
mkdirp "^0.5.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
object-assign "^4.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
on-finished "^2.3.0"
type-is "^1.6.4"
xtend "^4.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
mute-stream@0.0.7:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.0.7"
resolved "https://registry.yarnpkg.com/mute-stream/-/mute-stream-0.0.7.tgz#3075ce93bc21b8fab43e1bc4da7e8115ed1e7bab"
mv@~2:
version "2.1.1"
resolved "https://registry.yarnpkg.com/mv/-/mv-2.1.1.tgz#ae6ce0d6f6d5e0a4f7d893798d03c1ea9559b6a2"
dependencies:
mkdirp "~0.5.1"
ncp "~2.0.0"
rimraf "~2.4.0"
Update dependency mysql to v2.17.1
2019-07-02 13:04:08 +03:00
mysql@2.17.1:
version "2.17.1"
resolved "https://registry.yarnpkg.com/mysql/-/mysql-2.17.1.tgz#62bba4a039a9b2f73638cd1652ce50fc6f682899"
integrity sha512-7vMqHQ673SAk5C8fOzTG2LpPcf3bNt0oL3sFpxPEEFp1mdlDcrLK0On7z8ZYKaaHrHwNcQ/MTUz7/oobZ2OyyA==
dependencies:
bignumber.js "7.2.1"
readable-stream "2.3.6"
safe-buffer "5.1.2"
sqlstring "2.3.1"
mysql@^2.16.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.16.0"
resolved "https://registry.yarnpkg.com/mysql/-/mysql-2.16.0.tgz#b23b22ab5de44fc2d5d32bd4f5af6653fc45e2ba"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
bignumber.js "4.1.0"
readable-stream "2.3.6"
safe-buffer "5.1.2"
sqlstring "2.3.1"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
Update dependency sharp to v0.22.1
2019-07-02 03:42:14 +03:00
nan@^2.10.0, nan@^2.6.2:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "2.12.1"
resolved "https://registry.yarnpkg.com/nan/-/nan-2.12.1.tgz#7b1aa193e9aa86057e3c7bbd0ac448e770925552"
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 21:56:05 +03:00
Update dependency sqlite3 to v4.0.9
2019-07-02 13:29:19 +03:00
nan@^2.12.1, nan@^2.13.2:
Update dependency sharp to v0.22.1
2019-07-02 03:42:14 +03:00
version "2.14.0"
resolved "https://registry.yarnpkg.com/nan/-/nan-2.14.0.tgz#7818f722027b2459a86f0295d434d1fc2336c52c"
integrity sha512-INOFj37C7k3AfaNTtX8RhsTw7qRy7eLET14cROi9+5HAVbbHuIWUHEauBv5qT4Av2tWasiTY1Jw6puUNqRJXQg==
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
nan@~2.10.0:
version "2.10.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/nan/-/nan-2.10.0.tgz#96d0cd610ebd58d4b4de9cc0c6828cda99c7548f"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
nanomatch@^1.2.9:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.2.13"
resolved "https://registry.yarnpkg.com/nanomatch/-/nanomatch-1.2.13.tgz#b87a8aa4fc0de8fe6be88895b38983ff265bd119"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
arr-diff "^4.0.0"
array-unique "^0.3.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
define-property "^2.0.2"
extend-shallow "^3.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
fragment-cache "^0.2.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
is-windows "^1.0.2"
kind-of "^6.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
object.pick "^1.3.0"
regex-not "^1.0.0"
snapdragon "^0.8.1"
to-regex "^3.0.1"
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
napi-build-utils@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/napi-build-utils/-/napi-build-utils-1.0.1.tgz#1381a0f92c39d66bf19852e7873432fc2123e508"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
natural-compare@^1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/natural-compare/-/natural-compare-1.4.0.tgz#4abebfeed7541f2c27acfb29bdbbd15c8d5ba4f7"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9421) no issue - bookshelf-relations@0.1.5 - ghost-ignition@2.8.18 - sanitize-html@1.17.0 - semver@5.5.0 - uuid@3.2.1 - eslint@4.16.0 - should@13.2.1 - sinon@4.2.1
2018-01-25 00:50:20 +03:00
nconf@0.10.0, nconf@^0.10.0:
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
version "0.10.0"
resolved "https://registry.yarnpkg.com/nconf/-/nconf-0.10.0.tgz#da1285ee95d0a922ca6cee75adcf861f48205ad2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
async "^1.4.0"
ini "^1.3.0"
secure-keys "^1.0.0"
yargs "^3.19.0"
ncp@~2.0.0:
version "2.0.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/ncp/-/ncp-2.0.0.tgz#195a21d6c46e361d2fb1281ba38b91e9df7bdbb3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ndjson@^1.4.0:
version "1.5.0"
resolved "https://registry.yarnpkg.com/ndjson/-/ndjson-1.5.0.tgz#ae603b36b134bcec347b452422b0bf98d5832ec8"
dependencies:
json-stringify-safe "^5.0.1"
minimist "^1.2.0"
split2 "^2.1.0"
through2 "^2.0.3"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
needle@^2.2.1:
version "2.2.4"
resolved "https://registry.yarnpkg.com/needle/-/needle-2.2.4.tgz#51931bff82533b1928b7d1d69e01f1b00ffd2a4e"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
debug "^2.1.2"
iconv-lite "^0.4.4"
sax "^1.2.4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
negotiator@0.6.1:
version "0.6.1"
resolved "https://registry.yarnpkg.com/negotiator/-/negotiator-0.6.1.tgz#2b327184e8992101177b28563fb5e7102acd0ca9"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
negotiator@0.6.2:
version "0.6.2"
resolved "https://registry.yarnpkg.com/negotiator/-/negotiator-0.6.2.tgz#feacf7ccf525a77ae9634436a64883ffeca346fb"
integrity sha512-hZXc7K2e+PgeI1eDBe/10Ard4ekbfrrqG8Ep+8Jmf4JID2bNg7NvCPOZN+kfF574pFQI7mum2AUqDidoKqcTOw==
Updated express-hbs to 1.1.1 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:03:23 +03:00
neo-async@^2.6.0:
version "2.6.0"
resolved "https://registry.yarnpkg.com/neo-async/-/neo-async-2.6.0.tgz#b9d15e4d71c6762908654b5183ed38b753340835"
integrity sha512-MFh0d/Wa7vkKO3Y3LlacqAEeHK0mckVqzDieUKTT+KGxi+zIpeVsFxymkIiRpbpDziHc290Xr9A1O4Om7otoRA==
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
nested-error-stacks@^2.0.0, nested-error-stacks@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/nested-error-stacks/-/nested-error-stacks-2.1.0.tgz#0fbdcf3e13fe4994781280524f8b96b0cdff9c61"
integrity sha512-AO81vsIO1k1sM4Zrd6Hu7regmJN1NSiAja10gc4bX3F0wd+9rQmcuHQaHVQCYIEC8iFXnE+mavh23GOt7wBgug==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
netjet@1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/netjet/-/netjet-1.3.0.tgz#7e082b49354a30a5b84ffd14fb7f3aa5874a7ce4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bl "^1.0.1"
hijackresponse "^2.0.0"
lodash.defaults "^4.0.0"
lodash.unescape "^4.0.0"
lru-cache "^4.0.0"
posthtml "^0.9.0"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
next-tick@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/next-tick/-/next-tick-1.0.0.tgz#ca86d1fe8828169b0120208e3dc8424b9db8342c"
integrity sha1-yobR/ogoFpsBICCOPchCS524NCw=
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
nice-try@^1.0.4:
version "1.0.5"
resolved "https://registry.yarnpkg.com/nice-try/-/nice-try-1.0.5.tgz#a3378a7696ce7d223e88fc9b764bd7ef1089e366"
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 19:53:44 +03:00
nise@^1.4.8:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "1.4.8"
resolved "https://registry.yarnpkg.com/nise/-/nise-1.4.8.tgz#ce91c31e86cf9b2c4cac49d7fcd7f56779bfd6b0"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
"@sinonjs/formatio" "^3.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
just-extend "^4.0.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
lolex "^2.3.2"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
path-to-regexp "^1.7.0"
text-encoding "^0.6.4"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
no-case@^2.2.0:
version "2.3.2"
resolved "https://registry.yarnpkg.com/no-case/-/no-case-2.3.2.tgz#60b813396be39b3f1288a4c1ed5d1e7d28b464ac"
dependencies:
lower-case "^1.1.1"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
nock@10.0.6:
version "10.0.6"
resolved "https://registry.yarnpkg.com/nock/-/nock-10.0.6.tgz#e6d90ee7a68b8cfc2ab7f6127e7d99aa7d13d111"
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 15:57:10 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
chai "^4.1.2"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
debug "^4.1.0"
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 15:57:10 +03:00
deep-equal "^1.0.0"
json-stringify-safe "^5.0.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
lodash "^4.17.5"
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 15:57:10 +03:00
mkdirp "^0.5.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
propagate "^1.0.0"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
qs "^6.5.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
semver "^5.5.0"
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 15:57:10 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
node-abi@^2.2.0:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "2.5.1"
resolved "https://registry.yarnpkg.com/node-abi/-/node-abi-2.5.1.tgz#bb17288fc3b2f68fea0ed9897c66979fd754ed47"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
dependencies:
semver "^5.4.1"
Update dependency sharp to v0.22.1
2019-07-02 03:42:14 +03:00
node-abi@^2.7.0:
version "2.9.0"
resolved "https://registry.yarnpkg.com/node-abi/-/node-abi-2.9.0.tgz#ae4075b298dab2d92dd1e22c48ccc7ffd7f06200"
integrity sha512-jmEOvv0eanWjhX8dX1pmjb7oJl1U1oR4FOh0b2GnvALwSYoOdU7sj+kLDSAyjo4pfC9aj/IxkloxdLJQhSSQBA==
dependencies:
semver "^5.4.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
node-environment-flags@1.0.5:
version "1.0.5"
resolved "https://registry.yarnpkg.com/node-environment-flags/-/node-environment-flags-1.0.5.tgz#fa930275f5bf5dae188d6192b24b4c8bbac3d76a"
integrity sha512-VNYPRfGfmZLx0Ye20jWzHUjyTW/c+6Wq+iLhDzUI4XmhrDd9l/FozXV3F2xOaXjvp0co0+v1YSR3CMP6g+VvLQ==
dependencies:
object.getownpropertydescriptors "^2.0.3"
semver "^5.7.0"
Updated oembed providers list no issue - switch away from forked version of `oembed-parser` - our changes are merged upstream - latest `oembed-parser` has a newer version of the providers list
2019-02-11 15:13:20 +03:00
node-fetch@^2.3.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "2.3.0"
resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.3.0.tgz#1a1d940bbfb916a1d3e0219f037e89e71f8c5fa5"
Updated oembed providers list no issue - switch away from forked version of `oembed-parser` - our changes are merged upstream - latest `oembed-parser` has a newer version of the providers list
2019-02-11 15:13:20 +03:00
integrity sha512-MOd8pV3fxENbryESLgVIeaGKrdl+uaYhCSSVkjeOb/31/njTpcis5aWfdqgNlHIrKOLRbMnfPINPOML2CIFeXA==
Added /oembed API endpoint refs https://github.com/TryGhost/Ghost/issues/9623 - add `oembed-parser` module for checking provider availability for a url and fetching data from the provider - require it in the `overrides.js` file before the general Promise override so that the `promise-wrt` sub-dependency doesn't attempt to extend the Bluebird promise implementation - add `/oembed` authenticated endpoint - takes `?url=` query parameter to match against known providers - adds safeguard against oembed-parser's providers list not recognising http+https and www+non-www - responds with `ValidationError` if no provider is found - responds with oembed response from matched provider's oembed endpoint if match is found
2018-06-05 17:49:23 +03:00
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
node-forge@^0.8.1:
version "0.8.2"
resolved "https://registry.yarnpkg.com/node-forge/-/node-forge-0.8.2.tgz#b4bcc59fb12ce77a8825fc6a783dfe3182499c5a"
integrity sha512-mXQ9GBq1N3uDCyV1pdSzgIguwgtVpM7f5/5J4ipz12PKWElmPpVWLDuWl8iXmhysr21+WmX/OJ5UKx82wjomgg==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
node-gyp@^3.6.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.8.0"
resolved "https://registry.yarnpkg.com/node-gyp/-/node-gyp-3.8.0.tgz#540304261c330e80d0d5edce253a68cb3964218c"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
dependencies:
fstream "^1.0.0"
glob "^7.0.3"
graceful-fs "^4.1.2"
mkdirp "^0.5.0"
nopt "2 || 3"
npmlog "0 || 1 || 2 || 3 || 4"
osenv "0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
request "^2.87.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
rimraf "2"
semver "~5.3.0"
tar "^2.0.0"
which "1"
Update dependency node-jose to v1.1.3
2019-07-02 03:37:57 +03:00
node-jose@1.1.3, node-jose@^1.1.3:
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/node-jose/-/node-jose-1.1.3.tgz#26e6bc563101a356c06fb254c7ef0078e8b49670"
integrity sha512-kupfi4uGWhRjnOmtie2T64cLge5a1TZyalEa8uWWWBgtKBcu41A4IGKpI9twZAxRnmviamEUQRK7LSyfFb2w8A==
dependencies:
base64url "^3.0.1"
es6-promise "^4.2.6"
lodash "^4.17.11"
long "^4.0.0"
node-forge "^0.8.1"
uuid "^3.3.2"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
node-loggly-bulk@^2.2.4:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.2.4"
resolved "https://registry.yarnpkg.com/node-loggly-bulk/-/node-loggly-bulk-2.2.4.tgz#bdd8638d97c43ecf1e1831ca98b250968fa6dee9"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
json-stringify-safe "5.0.x"
moment "^2.18.1"
request ">=2.76.0 <3.0.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
node-pre-gyp@^0.11.0:
version "0.11.0"
resolved "https://registry.yarnpkg.com/node-pre-gyp/-/node-pre-gyp-0.11.0.tgz#db1f33215272f692cd38f03238e3e9b47c5dd054"
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 19:43:08 +03:00
dependencies:
detect-libc "^1.0.2"
mkdirp "^0.5.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
needle "^2.2.1"
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 19:43:08 +03:00
nopt "^4.0.1"
npm-packlist "^1.1.6"
npmlog "^4.0.2"
rc "^1.2.7"
rimraf "^2.6.1"
semver "^5.3.0"
tar "^4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
nodemailer@0.7.1:
version "0.7.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/nodemailer/-/nodemailer-0.7.1.tgz#1ec819e243622300a00abe746cb5d3389c0f316c"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
aws-sdk "2.0.5"
directmail "~0.1.7"
he "~0.3.6"
mailcomposer "~0.2.10"
public-address "~0.1.1"
simplesmtp "~0.2 || ~0.3.30"
optionalDependencies:
readable-stream "~1.1.9"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
noop-logger@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/noop-logger/-/noop-logger-0.1.1.tgz#94a2b1633c4f1317553007d8966fd0e841b6a4c2"
Removed coverage tasks from Gruntfile refs #9441
2019-04-08 17:12:48 +03:00
"nopt@2 || 3", nopt@~3.0.1, nopt@~3.0.6:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "3.0.6"
resolved "https://registry.yarnpkg.com/nopt/-/nopt-3.0.6.tgz#c6465dbf08abcd4db359317f79ac68a646b28ff9"
dependencies:
abbrev "1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
nopt@^4.0.1, nopt@~4.0.1:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "4.0.1"
resolved "https://registry.yarnpkg.com/nopt/-/nopt-4.0.1.tgz#d0d4685afd5415193c8c7505602d0d17cd64474d"
dependencies:
abbrev "1"
osenv "^0.1.4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
normalize-package-data@^2.3.2, normalize-package-data@^2.3.4:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "2.4.0"
resolved "https://registry.yarnpkg.com/normalize-package-data/-/normalize-package-data-2.4.0.tgz#12f95a307d58352075a04907b84ac8be98ac012f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
hosted-git-info "^2.1.4"
is-builtin-module "^1.0.0"
semver "2 || 3 || 4 || 5"
validate-npm-package-license "^3.0.1"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
normalize-path@^2.0.0:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/normalize-path/-/normalize-path-2.1.1.tgz#1ab28b556e198363a8c1a6f7e6fa20137fe6aed9"
dependencies:
remove-trailing-separator "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
normalize-path@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/normalize-path/-/normalize-path-3.0.0.tgz#0dcd69ff23a1c9b11fd0978316644a0388216a65"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
normalize-range@^0.1.2:
version "0.1.2"
resolved "https://registry.yarnpkg.com/normalize-range/-/normalize-range-0.1.2.tgz#2d10c06bdfd312ea9777695a4d28439456b75942"
normalize-url@^1.4.0:
version "1.9.1"
resolved "https://registry.yarnpkg.com/normalize-url/-/normalize-url-1.9.1.tgz#2cc0d66b31ea23036458436e3620d85954c66c3c"
dependencies:
object-assign "^4.0.1"
prepend-http "^1.0.0"
query-string "^4.1.0"
sort-keys "^1.0.0"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
normalize-url@^4.1.0:
version "4.3.0"
resolved "https://registry.yarnpkg.com/normalize-url/-/normalize-url-4.3.0.tgz#9c49e10fc1876aeb76dba88bf1b2b5d9fa57b2ee"
integrity sha512-0NLtR71o4k6GLP+mr6Ty34c5GA6CMoEsncKJxvQd8NzPxaHRJNnb5gZE8R1XF4CPIS7QPHLJ74IFszwtNVAHVQ==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
npm-bundled@^1.0.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.5"
resolved "https://registry.yarnpkg.com/npm-bundled/-/npm-bundled-1.0.5.tgz#3c1732b7ba936b3a10325aef616467c0ccbcc979"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
npm-packlist@^1.1.6:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/npm-packlist/-/npm-packlist-1.2.0.tgz#55a60e793e272f00862c7089274439a4cc31fc7f"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
ignore-walk "^3.0.1"
npm-bundled "^1.0.1"
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 21:45:29 +03:00
npm-run-path@^2.0.0:
version "2.0.2"
resolved "https://registry.yarnpkg.com/npm-run-path/-/npm-run-path-2.0.2.tgz#35a9232dfa35d7067b4cb2ddf2357b1871536c5f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 21:45:29 +03:00
path-key "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
"npmlog@0 || 1 || 2 || 3 || 4", npmlog@^4.0.1, npmlog@^4.0.2, npmlog@^4.1.2:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "4.1.2"
resolved "https://registry.yarnpkg.com/npmlog/-/npmlog-4.1.2.tgz#08a7f2a8bf734604779a9efa4ad5cc717abb954b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
are-we-there-yet "~1.1.2"
console-control-strings "~1.1.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
gauge "~2.7.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
set-blocking "~2.0.0"
nth-check@~1.0.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/nth-check/-/nth-check-1.0.2.tgz#b2bd295c37e3dd58a3bf0700376663ba4d9cf05c"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
boolbase "~1.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
num2fraction@^1.2.2:
version "1.2.2"
resolved "https://registry.yarnpkg.com/num2fraction/-/num2fraction-1.2.2.tgz#6f682b6a027a4e9ddfa4564cd2589d1d4e669ede"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
number-is-nan@^1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/number-is-nan/-/number-is-nan-1.0.1.tgz#097b602b53422a522c1afb8790318336941a011d"
✨ Added caption and language extraction for code blocks when converting HTML via API no issue - update @tryghost/html-to-mobiledoc to v0.3.0 - uses updated @tryghost/kg-parser-plugins that is now shared with Ghost-Admin
2019-05-03 13:55:38 +03:00
nwsapi@^2.1.3:
version "2.1.4"
resolved "https://registry.yarnpkg.com/nwsapi/-/nwsapi-2.1.4.tgz#e006a878db23636f8e8a67d33ca0e4edf61a842f"
integrity sha512-iGfd9Y6SFdTNldEy2L0GUhcarIutFmk+MPWIn9dmj8NMIup03G08uUF2KGbbmv/Ux4RT0VZJoP/sVbWA6d/VIw==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
oauth-sign@~0.9.0:
version "0.9.0"
resolved "https://registry.yarnpkg.com/oauth-sign/-/oauth-sign-0.9.0.tgz#47a7b016baa68b5fa0ecf3dee08a85c679ac6455"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue - bluebird@3.5.1 - csv-parser@1.12.0 - gscan@1.2.2 - moment@2.19.2 - nconf@0.9.1 - oauth2orize@1.11.0 - superagent@3.8.1 - eslint@4.11.0 - nock@9.1.0
2017-11-17 18:29:21 +03:00
oauth2orize@1.11.0:
version "1.11.0"
resolved "https://registry.yarnpkg.com/oauth2orize/-/oauth2orize-1.11.0.tgz#793cef251d45ebdeac32ae40a8b6814faab1d483"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
debug "2.x.x"
uid2 "0.0.x"
utils-merge "1.x.x"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
object-assign@^4, object-assign@^4.0.1, object-assign@^4.1.0, object-assign@^4.1.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "4.1.1"
resolved "https://registry.yarnpkg.com/object-assign/-/object-assign-4.1.1.tgz#2109adc7965887cfc05cbbd442cac8bfbb360863"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
object-copy@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/object-copy/-/object-copy-0.1.0.tgz#7e7d858b781bd7c991a41ba975ed3812754e998c"
dependencies:
copy-descriptor "^0.1.0"
define-property "^0.2.5"
kind-of "^3.0.3"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
object-keys@^1.0.11, object-keys@^1.0.12:
version "1.1.1"
resolved "https://registry.yarnpkg.com/object-keys/-/object-keys-1.1.1.tgz#1c47f272df277f3b1daf061677d9c82e2322c60e"
integrity sha512-NuAESUOUMrlIXOfHKzD6bpPu3tYt3xvjNdRIQ+FeT0lNb4K8WR70CaDxhuNguS2XG+GjkyMwOzsN5ZktImfhLA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
object-visit@^1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/object-visit/-/object-visit-1.0.1.tgz#f79c4493af0c5377b59fe39d395e41042dd045bb"
dependencies:
isobject "^3.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
object.assign@4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/object.assign/-/object.assign-4.1.0.tgz#968bf1100d7956bb3ca086f006f846b3bc4008da"
integrity sha512-exHJeq6kBKj58mqGyTQ9DFvrZC/eR6OwxzoM9YRoGBqrXYonaFyGiFMuc9VZrXf7DarreEwMpurG3dd+CNyW5w==
dependencies:
define-properties "^1.1.2"
function-bind "^1.1.1"
has-symbols "^1.0.0"
object-keys "^1.0.11"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
object.defaults@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/object.defaults/-/object.defaults-1.1.0.tgz#3a7f868334b407dea06da16d88d5cd29e435fecf"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
array-each "^1.0.1"
array-slice "^1.0.0"
for-own "^1.0.0"
isobject "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
object.getownpropertydescriptors@^2.0.3:
version "2.0.3"
resolved "https://registry.yarnpkg.com/object.getownpropertydescriptors/-/object.getownpropertydescriptors-2.0.3.tgz#8758c846f5b407adab0f236e0986f14b051caa16"
integrity sha1-h1jIRvW0B62rDyNuCYbxSwUcqhY=
dependencies:
define-properties "^1.1.2"
es-abstract "^1.5.1"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
object.map@^1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/object.map/-/object.map-1.0.1.tgz#cf83e59dc8fcc0ad5f4250e1f78b3b81bd801d37"
dependencies:
for-own "^1.0.0"
make-iterator "^1.0.0"
object.pick@^1.2.0, object.pick@^1.3.0:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/object.pick/-/object.pick-1.3.0.tgz#87a10ac4c1694bd2e1cbf53591a66141fb5dd747"
dependencies:
isobject "^3.0.1"
Updated oembed providers list no issue - switch away from forked version of `oembed-parser` - our changes are merged upstream - latest `oembed-parser` has a newer version of the providers list
2019-02-11 15:13:20 +03:00
oembed-parser@1.2.2:
version "1.2.2"
resolved "https://registry.yarnpkg.com/oembed-parser/-/oembed-parser-1.2.2.tgz#0ababb60eb6bef0538878b690eb71ecb7fdfb4d1"
integrity sha512-dFsRPQZTUvIG5EA0Gq9kWCfxxdt+hBk0D9xvYkrGq1lh0NyzJTMWkrJWFXGu7P/9MiP7t2VHvlRFsC4I3SuGPw==
Added /oembed API endpoint refs https://github.com/TryGhost/Ghost/issues/9623 - add `oembed-parser` module for checking provider availability for a url and fetching data from the provider - require it in the `overrides.js` file before the general Promise override so that the `promise-wrt` sub-dependency doesn't attempt to extend the Bluebird promise implementation - add `/oembed` authenticated endpoint - takes `?url=` query parameter to match against known providers - adds safeguard against oembed-parser's providers list not recognising http+https and www+non-www - responds with `ValidationError` if no provider is found - responds with oembed response from matched provider's oembed endpoint if match is found
2018-06-05 17:49:23 +03:00
dependencies:
Updated oembed providers list no issue - switch away from forked version of `oembed-parser` - our changes are merged upstream - latest `oembed-parser` has a newer version of the providers list
2019-02-11 15:13:20 +03:00
node-fetch "^2.3.0"
Added /oembed API endpoint refs https://github.com/TryGhost/Ghost/issues/9623 - add `oembed-parser` module for checking provider availability for a url and fetching data from the provider - require it in the `overrides.js` file before the general Promise override so that the `promise-wrt` sub-dependency doesn't attempt to extend the Bluebird promise implementation - add `/oembed` authenticated endpoint - takes `?url=` query parameter to match against known providers - adds safeguard against oembed-parser's providers list not recognising http+https and www+non-www - responds with `ValidationError` if no provider is found - responds with oembed response from matched provider's oembed endpoint if match is found
2018-06-05 17:49:23 +03:00
promise-wtf "^1.2.4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
on-finished@^2.3.0, on-finished@~2.3.0:
version "2.3.0"
resolved "https://registry.yarnpkg.com/on-finished/-/on-finished-2.3.0.tgz#20f1336481b083cd75337992a16971aa2d906947"
dependencies:
ee-first "1.1.1"
Update dependency compression to v1.7.4
2019-07-02 03:36:16 +03:00
on-headers@~1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/on-headers/-/on-headers-1.0.2.tgz#772b0ae6aaa525c399e489adfad90c403eb3c28f"
integrity sha512-pZAE+FJLoyITytdqK0U5s+FIpjN0JP3OzFi/u8Rx+EV5/W+JTWGXG8xFzevE7AjBfDqHv/8vL8qQsIhHnqRkrA==
Removed coverage tasks from Gruntfile refs #9441
2019-04-08 17:12:48 +03:00
once@^1.3.0, once@^1.3.1, once@^1.4.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.4.0"
resolved "https://registry.yarnpkg.com/once/-/once-1.4.0.tgz#583b1aa775961d4b113ac17d9c50baef9dd76bd1"
dependencies:
wrappy "1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
onetime@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/onetime/-/onetime-2.0.1.tgz#067428230fd67443b2794b22bba528b6867962d4"
dependencies:
mimic-fn "^1.0.0"
🎨 gscan 1.1.0 & optimisations refs #8222 - differentiate between errors and fatal errors - use gscan errors in theme middleware - Adds a new `error()` method to `currentActiveTheme` constructor which will return the errors we receive from gscan - In middleware, if a theme couldn't be activated because it's invalid, we'll fetch the erros and send them to our error handler. We also use a new property `hideStack` to control, if the stack (in dev mode and if available) should be shown or the gscan errors (in prod mode, or in dev if no stack error) - In our error handler we use this conditional to send a new property `gscan` to our error theme - In `error.hbs` we'll iterate through possible `gscan` error objects and render them. - remove stack printing - stack for theme developers in development mode doesn't make sense - stack in production doesn't make sense - the stack is usually hard to read - if you are developer you can read the error stack on the server log - utils.packages: transform native error into Ghost error - use `onlyFatalErrors` for gscan format and differeniate fatal errors vo.2 - optimise bootstrap error handling - transform theme is missing into an error - add new translation key - show html tags for error.hbs template: rule
2017-05-31 19:42:42 +03:00
optimist@^0.6.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.6.1"
resolved "https://registry.yarnpkg.com/optimist/-/optimist-0.6.1.tgz#da3ea74686fa21a19a111c326e90eb15a0196686"
dependencies:
minimist "~0.0.1"
wordwrap "~0.0.2"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
optionator@^0.8.1, optionator@^0.8.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.8.2"
resolved "https://registry.yarnpkg.com/optionator/-/optionator-0.8.2.tgz#364c5e409d3f4d6301d6c0b4c05bba50180aeb64"
dependencies:
deep-is "~0.1.3"
fast-levenshtein "~2.0.4"
levn "~0.3.0"
prelude-ls "~1.1.2"
type-check "~0.3.2"
wordwrap "~1.0.0"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
os-homedir@^1.0.0, os-homedir@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/os-homedir/-/os-homedir-1.0.2.tgz#ffbc4988336e0e833de0c168c7ef152121aa7fb3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
os-locale@^1.4.0:
version "1.4.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/os-locale/-/os-locale-1.4.0.tgz#20f9f17ae29ed345e8bde583b13d2009803c14d9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
lcid "^1.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
os-locale@^3.0.0, os-locale@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/os-locale/-/os-locale-3.1.0.tgz#a802a6ee17f24c10483ab9935719cef4ed16bf1a"
integrity sha512-Z8l3R4wYWM40/52Z+S265okfFj8Kt2cC2MKY+xNi3kFs+XGI7WXu/I309QQQYbRW4ijiZ+yxs9pqEhJh0DqW3Q==
dependencies:
execa "^1.0.0"
lcid "^2.0.0"
mem "^4.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
os-tmpdir@^1.0.0, os-tmpdir@~1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/os-tmpdir/-/os-tmpdir-1.0.2.tgz#bbe67406c79aa85c5cfec766fe5734555dfa1274"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
osenv@0, osenv@^0.1.4:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "0.1.5"
resolved "https://registry.yarnpkg.com/osenv/-/osenv-0.1.5.tgz#85cdfafaeb28e8677f416e287592b5f3f49ea410"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
dependencies:
os-homedir "^1.0.0"
os-tmpdir "^1.0.0"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
p-cancelable@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/p-cancelable/-/p-cancelable-1.1.0.tgz#d078d15a3af409220c886f1d9a0ca2e441ab26cc"
integrity sha512-s73XxOZ4zpt1edZYZzvhqFa6uvQc1vwUa0K0BdtIZgQMAJj9IbebH+JkgKZc9h+B05PKHLOTl4ajG1BmNrVZlw==
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
p-defer@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/p-defer/-/p-defer-1.0.0.tgz#9f6eb182f6c9aa8cd743004a7d4f96b196b0fb0c"
integrity sha1-n26xgvbJqozXQwBKfU+WsZaw+ww=
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 12:39:37 +03:00
p-finally@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/p-finally/-/p-finally-1.0.0.tgz#3fbcfb15b899a44123b34b6dcc18b724336a2cae"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
p-is-promise@^2.0.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/p-is-promise/-/p-is-promise-2.1.0.tgz#918cebaea248a62cf7ffab8e3bca8c5f882fc42e"
integrity sha512-Y3W0wlRPK8ZMRbNq97l4M5otioeA5lm1z7bkNkxCka8HSPjR0xRWmpCmc9utiaLP9Jb1eD8BgeIxTW4AIF45Pg==
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
p-limit@^1.1.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/p-limit/-/p-limit-1.3.0.tgz#b86bd5f0c25690911c7590fcbfc2010d54b3ccb8"
integrity sha512-vvcXsLAJ9Dr5rQOPk7toZQZJApBl2K4J6dANSsEuh6QI41JYcsS/qhTGa9ErIUUgK3WNQoJYvylxvjqmiqEA9Q==
dependencies:
p-try "^1.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
p-limit@^2.0.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/p-limit/-/p-limit-2.2.0.tgz#417c9941e6027a9abcba5092dd2904e255b5fbc2"
integrity sha512-pZbTJpoUsCzV48Mc9Nh51VbwO0X9cuPFE8gYwx9BTCt9SF8/b7Zljd2fVgOxhIF/HDTKgpVzs+GPhyKfjLLFRQ==
dependencies:
p-try "^2.0.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
p-locate@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/p-locate/-/p-locate-2.0.0.tgz#20a0103b222a70c8fd39cc2e580680f3dde5ec43"
integrity sha1-IKAQOyIqcMj9OcwuWAaA893l7EM=
dependencies:
p-limit "^1.1.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
p-locate@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/p-locate/-/p-locate-3.0.0.tgz#322d69a05c0264b25997d9f40cd8a891ab0064a4"
integrity sha512-x+12w/To+4GFfgJhBEpiDcLozRJGegY+Ei7/z0tSLkMmxGZNybVMSfWj9aJn8Z5Fc7dBUNJOOVgPv2H7IwulSQ==
dependencies:
p-limit "^2.0.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
p-try@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/p-try/-/p-try-1.0.0.tgz#cbc79cdbaf8fd4228e13f621f2b1a237c1b207b3"
integrity sha1-y8ec26+P1CKOE/Yh8rGiN8GyB7M=
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
p-try@^2.0.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/p-try/-/p-try-2.2.0.tgz#cb2868540e313d61de58fafbe35ce9004d5540e6"
integrity sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
parent-module@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/parent-module/-/parent-module-1.0.0.tgz#df250bdc5391f4a085fb589dad761f5ad6b865b5"
dependencies:
callsites "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
parse-filepath@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/parse-filepath/-/parse-filepath-1.0.2.tgz#a632127f53aaf3d15876f5872f3ffac763d6c891"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
is-absolute "^1.0.0"
map-cache "^0.2.0"
path-root "^0.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
parse-json@^2.2.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/parse-json/-/parse-json-2.2.0.tgz#f480f40434ef80741f8469099f8dea18f55a4dc9"
dependencies:
error-ex "^1.2.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
parse-json@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/parse-json/-/parse-json-4.0.0.tgz#be35f5425be1f7f6c747184f98a788cb99477ee0"
integrity sha1-vjX1Qlvh9/bHRxhPmKeIy5lHfuA=
dependencies:
error-ex "^1.3.1"
json-parse-better-errors "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
parse-passwd@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/parse-passwd/-/parse-passwd-1.0.0.tgz#6d5b934a456993b23d37f40a382d6f1666a8e5c6"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
parse5@5.1.0:
version "5.1.0"
resolved "https://registry.yarnpkg.com/parse5/-/parse5-5.1.0.tgz#c59341c9723f414c452975564c7c00a68d58acd2"
integrity sha512-fxNG2sQjHvlVAYmzBZS9YlDp6PTSSDwa98vkD4QgVDDCAo84z5X1t5XyJQ62ImdLXx5NdIIfihey6xpum9/gRQ==
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
parseurl@~1.3.2:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
version "1.3.2"
resolved "https://registry.yarnpkg.com/parseurl/-/parseurl-1.3.2.tgz#fc289d4ed8993119460c156253262cdc8de65bf3"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
parseurl@~1.3.3:
version "1.3.3"
resolved "https://registry.yarnpkg.com/parseurl/-/parseurl-1.3.3.tgz#9da19e7bee8d12dff0513ed5b76957793bc2e8d4"
integrity sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
pascalcase@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/pascalcase/-/pascalcase-0.1.1.tgz#b363e55e8006ca6fe21784d2db22bd15d7917f14"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
passport-http-bearer@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/passport-http-bearer/-/passport-http-bearer-1.0.1.tgz#147469ea3669e2a84c6167ef99dbb77e1f0098a8"
dependencies:
passport-strategy "1.x.x"
passport-oauth2-client-password@0.1.2:
version "0.1.2"
resolved "https://registry.yarnpkg.com/passport-oauth2-client-password/-/passport-oauth2-client-password-0.1.2.tgz#4f378b678b92d16dbbd233a6c706520093e561ba"
dependencies:
passport-strategy "1.x.x"
passport-strategy@1.x.x:
version "1.0.0"
resolved "https://registry.yarnpkg.com/passport-strategy/-/passport-strategy-1.0.0.tgz#b5539aa8fc225a3d1ad179476ddf236b440f52e4"
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
passport@0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/passport/-/passport-0.4.0.tgz#c5095691347bd5ad3b5e180238c3914d16f05811"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
passport-strategy "1.x.x"
pause "0.0.1"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
path-dirname@^1.0.0:
version "1.0.2"
resolved "https://registry.yarnpkg.com/path-dirname/-/path-dirname-1.0.2.tgz#cc33d24d525e099a5388c0336c6e32b9160609e0"
integrity sha1-zDPSTVJeCZpTiMAzbG4yuRYGCeA=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
path-exists@^2.0.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/path-exists/-/path-exists-2.1.0.tgz#0feb6c64f0fc518d9a754dd5efb62c7022761f4b"
dependencies:
pinkie-promise "^2.0.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
path-exists@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/path-exists/-/path-exists-3.0.0.tgz#ce0ebeaa5f78cb18925ea7d810d7b59b010fd515"
integrity sha1-zg6+ql94yxiSXqfYENe1mwEP1RU=
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
path-is-absolute@^1.0.0, path-is-absolute@~1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/path-is-absolute/-/path-is-absolute-1.0.1.tgz#174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
path-is-inside@^1.0.2:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/path-is-inside/-/path-is-inside-1.0.2.tgz#365417dede44430d1c11af61027facf074bdfc53"
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
path-key@^2.0.0, path-key@^2.0.1:
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 21:45:29 +03:00
version "2.0.1"
resolved "https://registry.yarnpkg.com/path-key/-/path-key-2.0.1.tgz#411cadb574c5a140d3a4b1910d40d80cc9f40b40"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
path-match@1.2.4:
version "1.2.4"
resolved "https://registry.yarnpkg.com/path-match/-/path-match-1.2.4.tgz#a62747f3c7e0c2514762697f24443585b09100ea"
dependencies:
http-errors "~1.4.0"
path-to-regexp "^1.0.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
path-parse@^1.0.5, path-parse@^1.0.6:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.0.6"
resolved "https://registry.yarnpkg.com/path-parse/-/path-parse-1.0.6.tgz#d62dbb5679405d72c4737ec58600e9ddcf06d24c"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
path-root-regex@^0.1.0:
version "0.1.2"
resolved "https://registry.yarnpkg.com/path-root-regex/-/path-root-regex-0.1.2.tgz#bfccdc8df5b12dc52c8b43ec38d18d72c04ba96d"
path-root@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/path-root/-/path-root-0.1.1.tgz#9a4a6814cac1c0cd73360a95f32083c8ea4745b7"
dependencies:
path-root-regex "^0.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
path-to-regexp@0.1.7:
version "0.1.7"
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-0.1.7.tgz#df604178005f522f15eb4490e7247a1bfaa67f8c"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
path-to-regexp@^1.0.0, path-to-regexp@^1.7.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.7.0"
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-1.7.0.tgz#59fde0f435badacba103a84e9d3bc64e96b9937d"
dependencies:
isarray "0.0.1"
path-type@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/path-type/-/path-type-1.1.0.tgz#59c44f7ee491da704da415da5a4070ba4f8fe441"
dependencies:
graceful-fs "^4.1.2"
pify "^2.0.0"
pinkie-promise "^2.0.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
path-type@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/path-type/-/path-type-3.0.0.tgz#cef31dc8e0a1a3bb0d105c0cd97cf3bf47f4e36f"
integrity sha512-T2ZUsdZFHgA3u4e5PfPbjd7HDDpxPnQb5jN0SrDsjNSuVXHJqtwTnWqG0B1jZrgmJ/7lj1EmVIByWt1gxGkWvg==
dependencies:
pify "^3.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
pathval@^1.1.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/pathval/-/pathval-1.1.0.tgz#b942e6d4bde653005ef6b71361def8727d0645e0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
pause@0.0.1:
version "0.0.1"
resolved "https://registry.yarnpkg.com/pause/-/pause-0.0.1.tgz#1d408b3fdb76923b9543d96fb4c9dfd535d9cb5d"
pend@~1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/pend/-/pend-1.2.0.tgz#7a57eb550a6783f9115331fcf4663d5c8e007a50"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
performance-now@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/performance-now/-/performance-now-2.1.0.tgz#6309f4e0e5fa913ec1c69307ae364b4b377c9e7b"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
pg-connection-string@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/pg-connection-string/-/pg-connection-string-2.0.0.tgz#3eefe5997e06d94821e4d502e42b6a1c73f8df82"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
pify@^2.0.0:
version "2.3.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/pify/-/pify-2.3.0.tgz#ed141a6ac043a849ea588498e7dca8b15330e90c"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
pify@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/pify/-/pify-3.0.0.tgz#e5a4acd2c101fdf3d9a4d07f0dbc4db49dd28176"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
pify@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/pify/-/pify-4.0.1.tgz#4b2cd25c50d598735c50292224fd8c6df41e3231"
integrity sha512-uB80kBFb/tfd68bVleG9T5GGsGPjJrLAUpR5PZIrhBnIaRTQRjqdJSsIKkOP6OAIFbj7GOrcudc5pNjZ+geV2g==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
pinkie-promise@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/pinkie-promise/-/pinkie-promise-2.0.1.tgz#2135d6dfa7a358c069ac9b178776288228450ffa"
dependencies:
pinkie "^2.0.0"
pinkie@^2.0.0:
version "2.0.4"
resolved "https://registry.yarnpkg.com/pinkie/-/pinkie-2.0.4.tgz#72556b80cfa0d48a974e80e77248e80ed4f7f870"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
pluralize@^7.0.0:
version "7.0.0"
resolved "https://registry.yarnpkg.com/pluralize/-/pluralize-7.0.0.tgz#298b89df8b93b0221dbf421ad2b1b1ea23fc6777"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency gscan to v2.6.2
2019-07-02 12:09:26 +03:00
pluralize@^8.0.0:
version "8.0.0"
resolved "https://registry.yarnpkg.com/pluralize/-/pluralize-8.0.0.tgz#1a6fa16a38d12a1901e0320fa017051c539ce3b1"
integrity sha512-Nc3IT5yHzflTfbjgqWcCPpo7DaKy4FnpB0l/zCAW0Tc7jxAiuqSxHasntB3D7887LSrA93kDJ9IXovxJYxyLCA==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
pn@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/pn/-/pn-1.1.0.tgz#e2f4cef0e219f463c179ab37463e4e1ecdccbafb"
integrity sha512-2qHaIQr2VLRFoxe2nASzsV6ef4yOOH+Fi9FBOVH6cqeSgUnoyySPZkxzLuzd+RYOQTRpROA0ztTMqxROKSb/nA==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
posix-character-classes@^0.1.0:
version "0.1.1"
resolved "https://registry.yarnpkg.com/posix-character-classes/-/posix-character-classes-0.1.1.tgz#01eac0fe3b5af71a2a6c02feabb8c1fef7e00eab"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
postcss-calc@^5.2.0:
version "5.3.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-calc/-/postcss-calc-5.3.1.tgz#77bae7ca928ad85716e2fda42f261bf7c1d65b5e"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
postcss "^5.0.2"
postcss-message-helpers "^2.0.0"
reduce-css-calc "^1.2.6"
postcss-colormin@^2.1.8:
version "2.2.2"
resolved "https://registry.yarnpkg.com/postcss-colormin/-/postcss-colormin-2.2.2.tgz#6631417d5f0e909a3d7ec26b24c8a8d1e4f96e4b"
dependencies:
colormin "^1.0.5"
postcss "^5.0.13"
postcss-value-parser "^3.2.3"
postcss-convert-values@^2.3.4:
version "2.6.1"
resolved "https://registry.yarnpkg.com/postcss-convert-values/-/postcss-convert-values-2.6.1.tgz#bbd8593c5c1fd2e3d1c322bb925dcae8dae4d62d"
dependencies:
postcss "^5.0.11"
postcss-value-parser "^3.1.2"
postcss-discard-comments@^2.0.4:
version "2.0.4"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-discard-comments/-/postcss-discard-comments-2.0.4.tgz#befe89fafd5b3dace5ccce51b76b81514be00e3d"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
postcss "^5.0.14"
postcss-discard-duplicates@^2.0.1:
version "2.1.0"
resolved "https://registry.yarnpkg.com/postcss-discard-duplicates/-/postcss-discard-duplicates-2.1.0.tgz#b9abf27b88ac188158a5eb12abcae20263b91932"
dependencies:
postcss "^5.0.4"
postcss-discard-empty@^2.0.1:
version "2.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-discard-empty/-/postcss-discard-empty-2.1.0.tgz#d2b4bd9d5ced5ebd8dcade7640c7d7cd7f4f92b5"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
postcss "^5.0.14"
postcss-discard-overridden@^0.1.1:
version "0.1.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-discard-overridden/-/postcss-discard-overridden-0.1.1.tgz#8b1eaf554f686fb288cd874c55667b0aa3668d58"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
postcss "^5.0.16"
postcss-discard-unused@^2.2.1:
version "2.2.3"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-discard-unused/-/postcss-discard-unused-2.2.3.tgz#bce30b2cc591ffc634322b5fb3464b6d934f4433"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
postcss "^5.0.14"
uniqs "^2.0.0"
postcss-filter-plugins@^2.0.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "2.0.3"
resolved "https://registry.yarnpkg.com/postcss-filter-plugins/-/postcss-filter-plugins-2.0.3.tgz#82245fdf82337041645e477114d8e593aa18b8ec"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
postcss "^5.0.4"
postcss-merge-idents@^2.1.5:
version "2.1.7"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-merge-idents/-/postcss-merge-idents-2.1.7.tgz#4c5530313c08e1d5b3bbf3d2bbc747e278eea270"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
has "^1.0.1"
postcss "^5.0.10"
postcss-value-parser "^3.1.1"
postcss-merge-longhand@^2.0.1:
version "2.0.2"
resolved "https://registry.yarnpkg.com/postcss-merge-longhand/-/postcss-merge-longhand-2.0.2.tgz#23d90cd127b0a77994915332739034a1a4f3d658"
dependencies:
postcss "^5.0.4"
postcss-merge-rules@^2.0.3:
version "2.1.2"
resolved "https://registry.yarnpkg.com/postcss-merge-rules/-/postcss-merge-rules-2.1.2.tgz#d1df5dfaa7b1acc3be553f0e9e10e87c61b5f721"
dependencies:
browserslist "^1.5.2"
caniuse-api "^1.5.2"
postcss "^5.0.4"
postcss-selector-parser "^2.2.2"
vendors "^1.0.0"
postcss-message-helpers@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/postcss-message-helpers/-/postcss-message-helpers-2.0.0.tgz#a4f2f4fab6e4fe002f0aed000478cdf52f9ba60e"
postcss-minify-font-values@^1.0.2:
version "1.0.5"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-minify-font-values/-/postcss-minify-font-values-1.0.5.tgz#4b58edb56641eba7c8474ab3526cafd7bbdecb69"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
object-assign "^4.0.1"
postcss "^5.0.4"
postcss-value-parser "^3.0.2"
postcss-minify-gradients@^1.0.1:
version "1.0.5"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-minify-gradients/-/postcss-minify-gradients-1.0.5.tgz#5dbda11373703f83cfb4a3ea3881d8d75ff5e6e1"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
postcss "^5.0.12"
postcss-value-parser "^3.3.0"
postcss-minify-params@^1.0.4:
version "1.2.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-minify-params/-/postcss-minify-params-1.2.2.tgz#ad2ce071373b943b3d930a3fa59a358c28d6f1f3"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
alphanum-sort "^1.0.1"
postcss "^5.0.2"
postcss-value-parser "^3.0.2"
uniqs "^2.0.0"
postcss-minify-selectors@^2.0.4:
version "2.1.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-minify-selectors/-/postcss-minify-selectors-2.1.1.tgz#b2c6a98c0072cf91b932d1a496508114311735bf"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
alphanum-sort "^1.0.2"
has "^1.0.1"
postcss "^5.0.14"
postcss-selector-parser "^2.0.0"
postcss-normalize-charset@^1.1.0:
version "1.1.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-normalize-charset/-/postcss-normalize-charset-1.1.1.tgz#ef9ee71212d7fe759c78ed162f61ed62b5cb93f1"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
postcss "^5.0.5"
postcss-normalize-url@^3.0.7:
version "3.0.8"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-normalize-url/-/postcss-normalize-url-3.0.8.tgz#108f74b3f2fcdaf891a2ffa3ea4592279fc78222"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
is-absolute-url "^2.0.0"
normalize-url "^1.4.0"
postcss "^5.0.14"
postcss-value-parser "^3.2.3"
postcss-ordered-values@^2.1.0:
version "2.2.3"
resolved "https://registry.yarnpkg.com/postcss-ordered-values/-/postcss-ordered-values-2.2.3.tgz#eec6c2a67b6c412a8db2042e77fe8da43f95c11d"
dependencies:
postcss "^5.0.4"
postcss-value-parser "^3.0.1"
postcss-reduce-idents@^2.2.2:
version "2.4.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-reduce-idents/-/postcss-reduce-idents-2.4.0.tgz#c2c6d20cc958284f6abfbe63f7609bf409059ad3"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
postcss "^5.0.4"
postcss-value-parser "^3.0.2"
postcss-reduce-initial@^1.0.0:
version "1.0.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-reduce-initial/-/postcss-reduce-initial-1.0.1.tgz#68f80695f045d08263a879ad240df8dd64f644ea"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
postcss "^5.0.4"
postcss-reduce-transforms@^1.0.3:
version "1.0.4"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-reduce-transforms/-/postcss-reduce-transforms-1.0.4.tgz#ff76f4d8212437b31c298a42d2e1444025771ae1"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
has "^1.0.1"
postcss "^5.0.8"
postcss-value-parser "^3.0.1"
postcss-selector-parser@^2.0.0, postcss-selector-parser@^2.2.2:
version "2.2.3"
resolved "https://registry.yarnpkg.com/postcss-selector-parser/-/postcss-selector-parser-2.2.3.tgz#f9437788606c3c9acee16ffe8d8b16297f27bb90"
dependencies:
flatten "^1.0.2"
indexes-of "^1.0.1"
uniq "^1.0.1"
postcss-svgo@^2.1.1:
version "2.1.6"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-svgo/-/postcss-svgo-2.1.6.tgz#b6df18aa613b666e133f08adb5219c2684ac108d"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
is-svg "^2.0.0"
postcss "^5.0.14"
postcss-value-parser "^3.2.3"
svgo "^0.7.0"
postcss-unique-selectors@^2.0.2:
version "2.0.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-unique-selectors/-/postcss-unique-selectors-2.0.2.tgz#981d57d29ddcb33e7b1dfe1fd43b8649f933ca1d"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
alphanum-sort "^1.0.1"
postcss "^5.0.4"
uniqs "^2.0.0"
postcss-value-parser@^3.0.1, postcss-value-parser@^3.0.2, postcss-value-parser@^3.1.1, postcss-value-parser@^3.1.2, postcss-value-parser@^3.2.3, postcss-value-parser@^3.3.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.3.1"
resolved "https://registry.yarnpkg.com/postcss-value-parser/-/postcss-value-parser-3.3.1.tgz#9ff822547e2893213cf1c30efa51ac5fd1ba8281"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
postcss-zindex@^2.0.1:
version "2.2.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/postcss-zindex/-/postcss-zindex-2.2.0.tgz#d2109ddc055b91af67fc4cb3b025946639d2af22"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
has "^1.0.1"
postcss "^5.0.4"
uniqs "^2.0.0"
postcss@^5.0.10, postcss@^5.0.11, postcss@^5.0.12, postcss@^5.0.13, postcss@^5.0.14, postcss@^5.0.16, postcss@^5.0.2, postcss@^5.0.4, postcss@^5.0.5, postcss@^5.0.8, postcss@^5.2.16:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "5.2.18"
resolved "https://registry.yarnpkg.com/postcss/-/postcss-5.2.18.tgz#badfa1497d46244f6390f58b319830d9107853c5"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
chalk "^1.1.3"
js-base64 "^2.1.9"
source-map "^0.5.6"
supports-color "^3.2.3"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
postcss@^7.0.5:
version "7.0.13"
resolved "https://registry.yarnpkg.com/postcss/-/postcss-7.0.13.tgz#42bf716413e8f1c786ab71dc6e722b3671b16708"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
dependencies:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
chalk "^2.4.2"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
source-map "^0.6.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
supports-color "^6.1.0"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
posthtml-parser@^0.2.0:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "0.2.1"
resolved "https://registry.yarnpkg.com/posthtml-parser/-/posthtml-parser-0.2.1.tgz#35d530de386740c2ba24ff2eb2faf39ccdf271dd"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
htmlparser2 "^3.8.3"
isobject "^2.1.0"
posthtml-render@^1.0.5:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.1.4"
resolved "https://registry.yarnpkg.com/posthtml-render/-/posthtml-render-1.1.4.tgz#95dac09892f4f183fad5ac823f08f42c0256551e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
posthtml@^0.9.0:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "0.9.2"
resolved "https://registry.yarnpkg.com/posthtml/-/posthtml-0.9.2.tgz#f4c06db9f67b61fd17c4e256e7e3d9515bf726fd"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
posthtml-parser "^0.2.0"
posthtml-render "^1.0.5"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
preact-compat@^3.17.0:
version "3.18.5"
resolved "https://registry.yarnpkg.com/preact-compat/-/preact-compat-3.18.5.tgz#45b801de75e3016bebe8cd446f51f60d2b948bb9"
integrity sha512-F174NW6PI5GU+T28B0ZHblhxMsFaPVaSBiaE++xrxdDVunsO0mARYfOSZizTdb/PFLqXDzcQ1IWdnEt/vIiUvw==
dependencies:
immutability-helper "^2.7.1"
preact-render-to-string "^3.8.2"
preact-transition-group "^1.1.1"
prop-types "^15.6.2"
standalone-react-addons-pure-render-mixin "^0.1.1"
preact-render-to-string@^3.8.2:
version "3.8.2"
resolved "https://registry.yarnpkg.com/preact-render-to-string/-/preact-render-to-string-3.8.2.tgz#bd72964d705a57da3a9e72098acaa073dd3ceff9"
integrity sha512-przuZPajiurStGgxMoJP0EJeC4xj5CgHv+M7GfF3YxAdhGgEWAkhOSE0xympAFN20uMayntBZpttIZqqLl77fw==
dependencies:
pretty-format "^3.5.1"
preact-transition-group@^1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/preact-transition-group/-/preact-transition-group-1.1.1.tgz#f0a49327ea515ece34ea2be864c4a7d29e5d6e10"
integrity sha1-8KSTJ+pRXs406ivoZMSn0p5dbhA=
preact@^8.2.1:
version "8.4.2"
resolved "https://registry.yarnpkg.com/preact/-/preact-8.4.2.tgz#1263b974a17d1ea80b66590e41ef786ced5d6a23"
integrity sha512-TsINETWiisfB6RTk0wh3/mvxbGRvx+ljeBccZ4Z6MPFKgu/KFGyf2Bmw3Z/jlXhL5JlNKY6QAbA9PVyzIy9//A==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
prebuild-install@^2.3.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "2.5.3"
resolved "https://registry.yarnpkg.com/prebuild-install/-/prebuild-install-2.5.3.tgz#9f65f242782d370296353710e9bc843490c19f69"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
detect-libc "^1.0.3"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
expand-template "^1.0.2"
github-from-package "0.0.0"
minimist "^1.2.0"
mkdirp "^0.5.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
node-abi "^2.2.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
noop-logger "^0.1.1"
npmlog "^4.0.1"
os-homedir "^1.0.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
pump "^2.0.1"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
rc "^1.1.6"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
simple-get "^2.7.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
tar-fs "^1.13.0"
tunnel-agent "^0.6.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
which-pm-runs "^1.0.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Update dependency sharp to v0.22.1
2019-07-02 03:42:14 +03:00
prebuild-install@^5.3.0:
version "5.3.0"
resolved "https://registry.yarnpkg.com/prebuild-install/-/prebuild-install-5.3.0.tgz#58b4d8344e03590990931ee088dd5401b03004c8"
integrity sha512-aaLVANlj4HgZweKttFNUVNRxDukytuIuxeK2boIMHjagNJCiVKWFsKF4tCE3ql3GbrD2tExPQ7/pwtEJcHNZeg==
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
dependencies:
detect-libc "^1.0.3"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
expand-template "^2.0.3"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
github-from-package "0.0.0"
minimist "^1.2.0"
mkdirp "^0.5.1"
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
napi-build-utils "^1.0.1"
Update dependency sharp to v0.22.1
2019-07-02 03:42:14 +03:00
node-abi "^2.7.0"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
noop-logger "^0.1.1"
npmlog "^4.0.1"
os-homedir "^1.0.1"
pump "^2.0.1"
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
rc "^1.2.7"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
simple-get "^2.7.0"
tar-fs "^1.13.0"
tunnel-agent "^0.6.0"
which-pm-runs "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
prelude-ls@~1.1.2:
version "1.1.2"
resolved "https://registry.yarnpkg.com/prelude-ls/-/prelude-ls-1.1.2.tgz#21932a549f5e52ffd9a827f570e04be62a97da54"
🐛 Fixed server crash when AMP posts contain images with unescaped chars (#10775) no issue - bump `amperize` to v0.4.0 which contains an updated version of `got` which does not crash on invalid image urls
2019-06-05 19:31:23 +03:00
prepend-http@^1.0.0:
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/prepend-http/-/prepend-http-1.0.4.tgz#d4f4562b0ce3696e41ac52d0e002e57a635dc6dc"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
prepend-http@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/prepend-http/-/prepend-http-2.0.0.tgz#e92434bfa5ea8c19f41cdfd401d741a3c819d897"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
pretty-bytes@^3.0.0:
version "3.0.1"
resolved "https://registry.yarnpkg.com/pretty-bytes/-/pretty-bytes-3.0.1.tgz#27d0008d778063a0b4811bb35c79f1bd5d5fbccf"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
number-is-nan "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 21:56:05 +03:00
pretty-bytes@^4.0.2:
version "4.0.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/pretty-bytes/-/pretty-bytes-4.0.2.tgz#b2bf82e7350d65c6c33aa95aaa5a4f6327f61cd9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
pretty-format@^3.5.1:
version "3.8.0"
resolved "https://registry.yarnpkg.com/pretty-format/-/pretty-format-3.8.0.tgz#bfbed56d5e9a776645f4b1ff7aa1a3ac4fa3c385"
integrity sha1-v77VbV6ad2ZF9LH/eqGjrE+jw4U=
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
prettyjson@^1.1.3:
version "1.2.1"
resolved "https://registry.yarnpkg.com/prettyjson/-/prettyjson-1.2.1.tgz#fcffab41d19cab4dfae5e575e64246619b12d289"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
colors "^1.1.2"
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
minimist "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency probe-image-size to v4.1.1
2019-07-15 09:18:10 +03:00
probe-image-size@4.1.1:
version "4.1.1"
resolved "https://registry.yarnpkg.com/probe-image-size/-/probe-image-size-4.1.1.tgz#c836c53154b6dd04dbcf66af2bbd50087b15e1dc"
integrity sha512-42LqKZqTLxH/UvAZ2/cKhAsR4G/Y6B7i7fI2qtQu9hRBK4YjS6gqO+QRtwTjvojUx4+/+JuOMzLoFyRecT9qRw==
Update dependency probe-image-size to v4.0.1
2019-07-15 03:28:44 +03:00
dependencies:
any-promise "^1.3.0"
Update dependency probe-image-size to v4.1.1
2019-07-15 09:18:10 +03:00
deepmerge "^4.0.0"
Update dependency probe-image-size to v4.0.1
2019-07-15 03:28:44 +03:00
inherits "^2.0.3"
next-tick "^1.0.0"
request "^2.83.0"
stream-parser "~0.3.1"
probe-image-size@^4.0.0:
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
version "4.0.0"
resolved "https://registry.yarnpkg.com/probe-image-size/-/probe-image-size-4.0.0.tgz#d35b71759e834bcf580ea9f18ec8b9265c0977eb"
integrity sha512-nm7RvWUxps+2+jZKNLkd04mNapXNariS6G5WIEVzvAqjx7EUuKcY1Dp3e6oUK7GLwzJ+3gbSbPLFAASHFQrPcQ==
dependencies:
any-promise "^1.3.0"
deepmerge "^2.0.1"
inherits "^2.0.3"
next-tick "^1.0.0"
request "^2.83.0"
stream-parser "~0.3.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
process-nextick-args@~2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/process-nextick-args/-/process-nextick-args-2.0.0.tgz#a37d732f4271b4ab1ad070d35508e8290788ffaa"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
progress@^2.0.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "2.0.3"
resolved "https://registry.yarnpkg.com/progress/-/progress-2.0.3.tgz#7e8cf8d8f5b8f239c1bc68beb4eb78567d572ef8"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added /oembed API endpoint refs https://github.com/TryGhost/Ghost/issues/9623 - add `oembed-parser` module for checking provider availability for a url and fetching data from the provider - require it in the `overrides.js` file before the general Promise override so that the `promise-wrt` sub-dependency doesn't attempt to extend the Bluebird promise implementation - add `/oembed` authenticated endpoint - takes `?url=` query parameter to match against known providers - adds safeguard against oembed-parser's providers list not recognising http+https and www+non-www - responds with `ValidationError` if no provider is found - responds with oembed response from matched provider's oembed endpoint if match is found
2018-06-05 17:49:23 +03:00
promise-wtf@^1.2.4:
version "1.2.4"
resolved "https://registry.yarnpkg.com/promise-wtf/-/promise-wtf-1.2.4.tgz#8cbdd31ea10dee074fbb6387cbc96e413993376c"
Updated oembed providers list no issue - switch away from forked version of `oembed-parser` - our changes are merged upstream - latest `oembed-parser` has a newer version of the providers list
2019-02-11 15:13:20 +03:00
integrity sha512-wOZ+ZUG0/Lsk+muOElLtteIteyvF5B1bNcVLhmlv6PDKcAAQGa5Bf0maN3rj73FWyjJE840MzeQyNE6KOKpgrg==
Added /oembed API endpoint refs https://github.com/TryGhost/Ghost/issues/9623 - add `oembed-parser` module for checking provider availability for a url and fetching data from the provider - require it in the `overrides.js` file before the general Promise override so that the `promise-wrt` sub-dependency doesn't attempt to extend the Bluebird promise implementation - add `/oembed` authenticated endpoint - takes `?url=` query parameter to match against known providers - adds safeguard against oembed-parser's providers list not recognising http+https and www+non-www - responds with `ValidationError` if no provider is found - responds with oembed response from matched provider's oembed endpoint if match is found
2018-06-05 17:49:23 +03:00
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
prop-types@^15.5.10, prop-types@^15.6.2:
version "15.7.2"
resolved "https://registry.yarnpkg.com/prop-types/-/prop-types-15.7.2.tgz#52c41e75b8c87e72b9d9360e0206b99dcbffa6c5"
integrity sha512-8QQikdH7//R2vurIJSutZ1smHYTcLpRWEOlHnzcWHmBYrOGUysKwSsrC89BCiFj3CbrfJ/nXFdJepOVrY1GCHQ==
dependencies:
loose-envify "^1.4.0"
object-assign "^4.1.1"
react-is "^16.8.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
propagate@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/propagate/-/propagate-1.0.0.tgz#00c2daeedda20e87e3782b344adba1cddd6ad709"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
proto-list@~1.2.1:
version "1.2.4"
resolved "https://registry.yarnpkg.com/proto-list/-/proto-list-1.2.4.tgz#212d5bfe1318306a420f6402b8e26ff39647a849"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
proxy-addr@~2.0.4:
version "2.0.4"
resolved "https://registry.yarnpkg.com/proxy-addr/-/proxy-addr-2.0.4.tgz#ecfc733bf22ff8c6f407fa275327b9ab67e48b93"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
forwarded "~0.1.2"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
ipaddr.js "1.8.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
proxy-addr@~2.0.5:
version "2.0.5"
resolved "https://registry.yarnpkg.com/proxy-addr/-/proxy-addr-2.0.5.tgz#34cbd64a2d81f4b1fd21e76f9f06c8a45299ee34"
integrity sha512-t/7RxHXPH6cJtP0pRG6smSr9QJidhB+3kXu0KgXnbGYMgzEnUxRQ4/LDdfOwZEMyIh3/xHb8PX3t+lfL9z+YVQ==
dependencies:
forwarded "~0.1.2"
ipaddr.js "1.9.0"
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 16:59:06 +03:00
proxyquire@2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/proxyquire/-/proxyquire-2.1.0.tgz#c2263a38bf0725f2ae950facc130e27510edce8d"
dependencies:
fill-keys "^1.0.2"
module-not-found-error "^1.0.0"
resolve "~1.8.1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
pseudomap@^1.0.1, pseudomap@^1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/pseudomap/-/pseudomap-1.0.2.tgz#f052a28da70e618917ef0a8ac34c1ae5a68286b3"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
psl@^1.1.24, psl@^1.1.28:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "1.1.31"
resolved "https://registry.yarnpkg.com/psl/-/psl-1.1.31.tgz#e9aa86d0101b5b105cbe93ac6b784cd547276184"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
public-address@~0.1.1:
version "0.1.2"
resolved "https://registry.yarnpkg.com/public-address/-/public-address-0.1.2.tgz#f95f3e0cf28b89f965b0f188fd1267ac0856552f"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
pump@^1.0.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/pump/-/pump-1.0.3.tgz#5dfe8311c33bbf6fc18261f9f34702c47c08a954"
dependencies:
end-of-stream "^1.1.0"
once "^1.3.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
pump@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/pump/-/pump-2.0.1.tgz#12399add6e4cf7526d973cbc8b5ce2e2908b3909"
dependencies:
end-of-stream "^1.1.0"
once "^1.3.1"
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
pump@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/pump/-/pump-3.0.0.tgz#b4a2116815bde2f4e1ea602354e8c75565107a64"
dependencies:
end-of-stream "^1.1.0"
once "^1.3.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
punycode@^1.4.1:
version "1.4.1"
resolved "https://registry.yarnpkg.com/punycode/-/punycode-1.4.1.tgz#c0d5a63b2718800ad8e1eb0fa5269c84dd41845e"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
punycode@^2.1.0, punycode@^2.1.1:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/punycode/-/punycode-2.1.1.tgz#b58b010ac40c22c5657616c8d2c2c02c7bf479ec"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
punycode@~1.2.4:
version "1.2.4"
resolved "https://registry.yarnpkg.com/punycode/-/punycode-1.2.4.tgz#54008ac972aec74175def9cba6df7fa9d3918740"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
q@^1.1.2:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.5.1"
resolved "https://registry.yarnpkg.com/q/-/q-1.5.1.tgz#7e32f75b41381291d04611f1bf14109ac00651d7"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Update dependency stripe to v7
2019-07-02 03:44:07 +03:00
qs@6.5.2, qs@~6.5.2:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "6.5.2"
resolved "https://registry.yarnpkg.com/qs/-/qs-6.5.2.tgz#cb3ae806e8740444584ef154ce8ee98d403f3e36"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency stripe to v7
2019-07-02 03:44:07 +03:00
qs@6.7.0, qs@^6.6.0:
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
version "6.7.0"
resolved "https://registry.yarnpkg.com/qs/-/qs-6.7.0.tgz#41dc1a015e3d581f1621776be31afb2876a9b1bc"
integrity sha512-VCdBRNFTX1fyE7Nb6FYoURo/SPe62QCaAyzJvUjwRaIsc+NePBEniHlvxFmmX56+HZphIGtV0XeCirBtpDrTyQ==
Removed superagent dependency (#10535) no issue - Migrated default scheduling adapter to use Got via the request proxy - SchedulingDefault is the only module that was using superagent so removed it as a dependency
2019-03-04 10:59:38 +03:00
qs@^6.4.0, qs@^6.5.1:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "6.6.0"
resolved "https://registry.yarnpkg.com/qs/-/qs-6.6.0.tgz#a99c0f69a8d26bf7ef012f871cdabb0aee4424c2"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
query-string@^4.1.0:
🙀 Image field naming & new img_url helper (#8364) * 🙀 change database schema for images - rename user/post/tag images - contains all the required changes from the schema change * Refactor helper/meta data - rename cover to cover_image - also rename default settings to match the pattern - rename image to profile_image for user - rename image to feature_image for tags/posts * {{image}} >>> {{img_url}} - rename - change the functionality - attr is required - e.g. {{img_url feature_image}} * gscan 1.0.0 - update yarn.lock * Update casper reference: 1.0-changes - see https://github.com/TryGhost/Casper/commit/5487b4da8d2ad7c6a6d003a3a0ee1a860e0de34d
2017-04-24 20:21:47 +03:00
version "4.3.4"
resolved "https://registry.yarnpkg.com/query-string/-/query-string-4.3.4.tgz#bbb693b9ca915c232515b228b1a02b609043dbeb"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
object-assign "^4.1.0"
strict-uri-encode "^1.0.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
quick-lru@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/quick-lru/-/quick-lru-1.1.0.tgz#4360b17c61136ad38078397ff11416e186dcfbb8"
integrity sha1-Q2CxfGETatOAeDl/8RQW4Ybc+7g=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
rai@~0.1.11:
version "0.1.12"
resolved "https://registry.yarnpkg.com/rai/-/rai-0.1.12.tgz#8ccfd014d0f9608630dd73c19b8e4b057754a6a6"
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
random-bytes@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/random-bytes/-/random-bytes-1.0.0.tgz#4f68a1dc0ae58bd3fb95848c30324db75d64360b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
range-parser@~1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/range-parser/-/range-parser-1.2.0.tgz#f49be6b487894ddc40dcc94a322f611092e00d5e"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
range-parser@~1.2.1:
version "1.2.1"
resolved "https://registry.yarnpkg.com/range-parser/-/range-parser-1.2.1.tgz#3cf37023d199e1c24d1a55b84800c2f3e6468031"
integrity sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
raw-body@2.3.3:
version "2.3.3"
resolved "https://registry.yarnpkg.com/raw-body/-/raw-body-2.3.3.tgz#1b324ece6b5706e153855bc1148c65bb7f6ea0c3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
bytes "3.0.0"
http-errors "1.6.3"
iconv-lite "0.4.23"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
unpipe "1.0.0"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
raw-body@2.4.0:
version "2.4.0"
resolved "https://registry.yarnpkg.com/raw-body/-/raw-body-2.4.0.tgz#a1ce6fb9c9bc356ca52e89256ab59059e13d0332"
integrity sha512-4Oz8DUIwdvoa5qMJelxipzi/iJIi40O5cGV1wNYp5hvZP8ZN0T+jiNkL0QepXs+EsQ9XJ8ipEDoiH70ySUJP3Q==
dependencies:
bytes "3.1.0"
http-errors "1.7.2"
iconv-lite "0.4.24"
unpipe "1.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
raw-body@~1.1.0:
version "1.1.7"
resolved "https://registry.yarnpkg.com/raw-body/-/raw-body-1.1.7.tgz#1d027c2bfa116acc6623bca8f00016572a87d425"
dependencies:
bytes "1"
string_decoder "0.10"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
rc@^1.1.6, rc@^1.2.7:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.2.8"
resolved "https://registry.yarnpkg.com/rc/-/rc-1.2.8.tgz#cd924bf5200a075b83c188cd6b9e211b7fc0d3ed"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
deep-extend "^0.6.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ini "~1.3.0"
minimist "^1.2.0"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
strip-json-comments "~2.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
react-is@^16.8.1:
version "16.8.6"
resolved "https://registry.yarnpkg.com/react-is/-/react-is-16.8.6.tgz#5bbc1e2d29141c9fbdfed456343fe2bc430a6a16"
integrity sha512-aUk3bHfZ2bRSVFFbbeVS4i+lNPZr3/WM5jT2J5omUVV1zzcs1nAaf3l51ctA5FFvCRbhrH0bdAsRRQddFJZPtA==
react-stripe-elements@^2.0.3:
version "2.0.3"
resolved "https://registry.yarnpkg.com/react-stripe-elements/-/react-stripe-elements-2.0.3.tgz#cfd0f68d00ce52a07aab1cb2b59b29dc12309486"
integrity sha512-aKLiWyfP0n3Gq42BKykULgoruNVRXEaeYh8NSokdgH3ubGU3nsHFZJg3LgbT/XOquttDGHE7kLhleaX+UnN81A==
dependencies:
prop-types "^15.5.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
read-pkg-up@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/read-pkg-up/-/read-pkg-up-1.0.1.tgz#9d63c13276c065918d57f002a57f40a1b643fb02"
dependencies:
find-up "^1.0.0"
read-pkg "^1.0.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
read-pkg-up@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/read-pkg-up/-/read-pkg-up-3.0.0.tgz#3ed496685dba0f8fe118d0691dc51f4a1ff96f07"
integrity sha1-PtSWaF26D4/hGNBpHcUfSh/5bwc=
dependencies:
find-up "^2.0.0"
read-pkg "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
read-pkg@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/read-pkg/-/read-pkg-1.1.0.tgz#f5ffaa5ecd29cb31c0474bca7d756b6bb29e3f28"
dependencies:
load-json-file "^1.0.0"
normalize-package-data "^2.3.2"
path-type "^1.0.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
read-pkg@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/read-pkg/-/read-pkg-3.0.0.tgz#9cbc686978fee65d16c00e2b19c237fcf6e38389"
integrity sha1-nLxoaXj+5l0WwA4rGcI3/Pbjg4k=
dependencies:
load-json-file "^4.0.0"
normalize-package-data "^2.3.2"
path-type "^3.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
readable-stream@1.1.x, readable-stream@~1.1.9:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.1.14"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-1.1.14.tgz#7cf4c54ef648e3813084c636dd2079e166c081d9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
core-util-is "~1.0.0"
inherits "~2.0.1"
isarray "0.0.1"
string_decoder "~0.10.x"
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
readable-stream@2.3.6, readable-stream@^2.0.0, readable-stream@^2.0.2, readable-stream@^2.0.5, readable-stream@^2.0.6, readable-stream@^2.2.2, readable-stream@^2.3.0, readable-stream@^2.3.5, readable-stream@^2.3.6, readable-stream@~2.3.6:
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
version "2.3.6"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-2.3.6.tgz#b11c27d88b8ff1fbe070643cf94b0c79ae1b0aaf"
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
dependencies:
core-util-is "~1.0.0"
inherits "~2.0.3"
isarray "~1.0.0"
process-nextick-args "~2.0.0"
safe-buffer "~5.1.1"
string_decoder "~1.1.1"
util-deprecate "~1.0.1"
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
readable-stream@^3.0.1, readable-stream@^3.1.1, readable-stream@^3.4.0:
version "3.4.0"
resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-3.4.0.tgz#a51c26754658e0a3c21dbf59163bd45ba6f447fc"
integrity sha512-jItXPLmrSR8jmTRmRWJXCnGJsfy85mB3Wd/uINMXA65yrnFo0cPClFIUWzo2najVNSl+mx7/4W8ttlLWJe99pQ==
dependencies:
inherits "^2.0.3"
string_decoder "^1.1.1"
util-deprecate "^1.0.1"
Updated theme layer to use members-ssr (#10676) * Removed support for cookies in members auth middleware no-issue The members middleware will no longer be supporting cookies, the cookie will be handled by a new middleware specific for serverside rendering, more informations can be found here: https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Removed members auth middleware from site app no-issue The site app no longer needs the members auth middleware as it doesn't support cookies, and will be replaced by ssr specific middleware. https://paper.dropbox.com/doc/Members-Auth-II-4WP4vF6coMqDYbSMIajo5 * Added comment for session_secret setting no-issue We are going to have multiple concepts of sessions, so adding a comment here to be specific that this is for the Ghost Admin client * Added theme_session_secret setting dynamic default no-issue Sessions for the theme layer will be signed, so we generate a random hex string to use as a signing key * Added getPublicConfig method * Replaced export of httpHandler with POJO apiInstance no-issue This is mainly to reduce the public api, so it's easier to document. * Renamed memberUserObject -> members no-issue Simplifies the interface, and is more inline with what we would want to export as an api library. * Removed use of require options inside members no-issue This was too tight of a coupling between Ghost and Members * Simplified apiInstance definition no-issue * Added getMember method to members api * Added MembersSSR instance to members service * Wired up routes for members ssr * Updated members auth middleware to use getPublicConfig * Removed publicKey static export from members service * Used real session secret no-issue * Added DELETE /members/ssr handler no-issue This allows users to log out of the theme layer * Fixed missing code property no-issue Ignition uses the statusCode property to forward status codes to call sites * Removed superfluous error middleware no-issue Before we used generic JWT middleware which would reject, now the middleware catches it's own error and doesn't error, thus this middleware is unecessary. * Removed console.logs no-issue * Updated token expirty to hardcoded 20 minutes no-issue This returns to our previous state of using short lived tokens, both for security and simplicity. * Removed hardcoded default member settings no-issue This is no longer needed, as defaults are in default-settings.json * Removed stripe from default payment processor no-issue * Exported `getSiteUrl` method from url utils no-issue This keeps inline with newer naming conventions * Updated how audience access control works no-issue Rather than being passed a function, members api now receives an object which describes which origins have access to which audiences, and how long those tokens should be allowed to work for. It also allows syntax for default tokens where audience === origin requesting it. This can be set to undefined or null to disable this functionality. { "http://site.com": { "http://site.com": { tokenLength: '5m' }, "http://othersite.com": { tokenLength: '1h' } }, "*": { tokenLength: '30m' } } * Updated members service to use access control feature no-issue This also cleans up a lot of unecessary variable definitions, and some other minor cleanups. * Added status code to auth pages html response no-issue This was missing, probably default but better to be explicit * Updated gateway to have membersApiUrl from config no-issue Previously we were parsing the url, this was not very safe as we can have Ghost hosted on a subdomain, and this would have failed. * Added issuer to public config for members no-issue This can be used to request SSR tokens in the client * Fixed path for gateway bundle no-issue * Updated settings model tests no-issue * Revert "Removed stripe from default payment processor" This reverts commit 1d88d9b6d73a10091070bcc1b7f5779d071c7845. * Revert "Removed hardcoded default member settings" This reverts commit 9d899048ba7d4b272b9ac65a95a52af66b30914a. * Installed @tryghost/members-ssr * Fixed tests for settings model
2019-04-16 17:50:25 +03:00
readable-stream@^3.0.2:
version "3.3.0"
resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-3.3.0.tgz#cb8011aad002eb717bf040291feba8569c986fb9"
integrity sha512-EsI+s3k3XsW+fU8fQACLN59ky34AZ14LoeVZpYwmZvldCFo0r0gnelwF2TcMjLor/BTL5aDJVBMkss0dthToPw==
dependencies:
inherits "^2.0.3"
string_decoder "^1.1.1"
util-deprecate "^1.0.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
readable-stream@^3.0.6:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "3.1.1"
resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-3.1.1.tgz#ed6bbc6c5ba58b090039ff18ce670515795aeb06"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dependencies:
inherits "^2.0.3"
string_decoder "^1.1.1"
util-deprecate "^1.0.1"
🔥 remove gulp (#8159) * remove gulpfile * remove gulp dependencies * Update README.md
2017-03-14 17:20:53 +03:00
readdirp@2.1.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/readdirp/-/readdirp-2.1.0.tgz#4ed0ad060df3073300c48440373f72d1cc642d78"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
graceful-fs "^4.1.2"
minimatch "^3.0.2"
readable-stream "^2.0.2"
set-immediate-shim "^1.0.1"
Updated express-hbs to 2.1.2 no-issue ronseal.
2019-05-20 13:35:04 +03:00
readdirp@2.2.1:
version "2.2.1"
resolved "https://registry.yarnpkg.com/readdirp/-/readdirp-2.2.1.tgz#0e87622a3325aa33e892285caf8b4e846529a525"
integrity sha512-1JU/8q+VgFZyxwrJ+SVIOsh+KywWGpds3NTqikiKpDMZWScmAYyKIgqkO+ARvNWJfXeXR1zxz7aHF4u4CyH6vQ==
dependencies:
graceful-fs "^4.1.11"
micromatch "^3.1.10"
readable-stream "^2.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
rechoir@^0.6.2:
version "0.6.2"
resolved "https://registry.yarnpkg.com/rechoir/-/rechoir-0.6.2.tgz#85204b54dba82d5742e28c96756ef43af50e3384"
dependencies:
resolve "^1.1.6"
redent@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/redent/-/redent-1.0.0.tgz#cf916ab1fd5f1f16dfb20822dd6ec7f730c2afde"
dependencies:
indent-string "^2.1.0"
strip-indent "^1.0.1"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
redent@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/redent/-/redent-2.0.0.tgz#c1b2007b42d57eb1389079b3c8333639d5e1ccaa"
integrity sha1-wbIAe0LVfrE4kHmzyDM2OdXhzKo=
dependencies:
indent-string "^3.0.0"
strip-indent "^2.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
reduce-css-calc@^1.2.6:
version "1.3.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/reduce-css-calc/-/reduce-css-calc-1.3.0.tgz#747c914e049614a4c9cfbba629871ad1d2927716"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
dependencies:
balanced-match "^0.4.2"
math-expression-evaluator "^1.2.14"
reduce-function-call "^1.0.1"
reduce-function-call@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/reduce-function-call/-/reduce-function-call-1.0.2.tgz#5a200bf92e0e37751752fe45b0ab330fd4b6be99"
dependencies:
balanced-match "^0.4.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
regenerator-runtime@^0.12.0:
version "0.12.1"
resolved "https://registry.yarnpkg.com/regenerator-runtime/-/regenerator-runtime-0.12.1.tgz#fa1a71544764c036f8c49b13a08b2594c9f8a0de"
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
regenerator-runtime@^0.13.2:
version "0.13.2"
resolved "https://registry.yarnpkg.com/regenerator-runtime/-/regenerator-runtime-0.13.2.tgz#32e59c9a6fb9b1a4aff09b4930ca2d4477343447"
integrity sha512-S/TQAZJO+D3m9xeN1WTI8dLKBBiRgXBlTJvbWjCThHWZj9EvHK70Ff50/tYj2J/fvBY6JtFVwRuazHN2E7M9BA==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
regex-not@^1.0.0, regex-not@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/regex-not/-/regex-not-1.0.2.tgz#1f4ece27e00b0b65e0247a6810e6a85d83a5752c"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
extend-shallow "^3.0.2"
safe-regex "^1.1.0"
regexpp@^1.0.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "1.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/regexpp/-/regexpp-1.1.0.tgz#0e3516dd0b7904f413d2d4193dce4618c3a689ab"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
regexpp@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/regexpp/-/regexpp-2.0.1.tgz#8d19d31cf632482b589049f8281f93dbcba4d07f"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
remove-trailing-separator@^1.0.1:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz#c24bce2a283adad5bc3f58e0d48249b92379d8ef"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 14:23:23 +03:00
remove-trailing-slash@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/remove-trailing-slash/-/remove-trailing-slash-0.1.0.tgz#1498e5df0984c27e49b76ebf06887ca2d01150d2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
repeat-element@^1.1.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/repeat-element/-/repeat-element-1.1.3.tgz#782e0d825c0c5a3bb39731f84efee6b742e6b1ce"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped express-hbs dependency no issue - express-hbs has been updated to depend on handlebars@4.0.13 which protects against a potential RCE - Ghost itself was not vulnerable to the RCE due to protection by gscan which does not allow themes using unknown helpers to be installed/activated
2019-02-07 17:16:37 +03:00
repeat-string@^1.6.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.6.1"
resolved "https://registry.yarnpkg.com/repeat-string/-/repeat-string-1.6.1.tgz#8dcae470e1c88abc2d600fff4a776286da75e637"
repeating@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/repeating/-/repeating-2.0.1.tgz#5214c53a926d3552707527fbab415dbc08d06dda"
dependencies:
is-finite "^1.0.0"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
request-promise-core@1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/request-promise-core/-/request-promise-core-1.1.1.tgz#3eee00b2c5aa83239cfb04c5700da36f81cd08b6"
integrity sha1-Pu4AssWqgyOc+wTFcA2jb4HNCLY=
dependencies:
lodash "^4.13.1"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
request-promise-core@1.1.2:
version "1.1.2"
resolved "https://registry.yarnpkg.com/request-promise-core/-/request-promise-core-1.1.2.tgz#339f6aababcafdb31c799ff158700336301d3346"
integrity sha512-UHYyq1MO8GsefGEt7EprS8UrXsm1TxEvFUX1IMTuSLU2Rh7fTIdFtl8xD7JiEYiWU2dl+NYAjCTksTehQUxPag==
dependencies:
lodash "^4.17.11"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
request-promise-native@^1.0.5:
version "1.0.5"
resolved "https://registry.yarnpkg.com/request-promise-native/-/request-promise-native-1.0.5.tgz#5281770f68e0c9719e5163fd3fab482215f4fda5"
integrity sha1-UoF3D2jgyXGeUWP9P6tIIhX0/aU=
dependencies:
request-promise-core "1.1.1"
stealthy-require "^1.1.0"
tough-cookie ">=2.3.3"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
request-promise@^4.2.4:
version "4.2.4"
resolved "https://registry.yarnpkg.com/request-promise/-/request-promise-4.2.4.tgz#1c5ed0d71441e38ad58c7ce4ea4ea5b06d54b310"
integrity sha512-8wgMrvE546PzbR5WbYxUQogUnUDfM0S7QIFZMID+J73vdFARkFy+HElj4T+MWYhpXwlLp0EQ8Zoj8xUA0he4Vg==
dependencies:
bluebird "^3.5.0"
request-promise-core "1.1.2"
stealthy-require "^1.1.1"
tough-cookie "^2.3.3"
"request@>=2.76.0 <3.0.0", request@^2.83.0, request@^2.87.0, request@^2.88.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.88.0"
resolved "https://registry.yarnpkg.com/request/-/request-2.88.0.tgz#9c2fca4f7d35b592efe57c7f0a55e81052124fef"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
dependencies:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
aws-sign2 "~0.7.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
aws4 "^1.8.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
caseless "~0.12.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
combined-stream "~1.0.6"
extend "~3.0.2"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
forever-agent "~0.6.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
form-data "~2.3.2"
har-validator "~5.1.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
http-signature "~1.2.0"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
is-typedarray "~1.0.0"
isstream "~0.1.2"
json-stringify-safe "~5.0.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
mime-types "~2.1.19"
oauth-sign "~0.9.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
performance-now "^2.1.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
qs "~6.5.2"
safe-buffer "^5.1.2"
tough-cookie "~2.4.3"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
tunnel-agent "^0.6.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
uuid "^3.3.2"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 14:07:06 +03:00
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
require-dir@^1.0.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/require-dir/-/require-dir-1.2.0.tgz#0d443b75e96012d3ca749cf19f529a789ae74817"
integrity sha512-LY85DTSu+heYgDqq/mK+7zFHWkttVNRXC9NKcKGyuGLdlsfbjEPrIEYdCVrx6hqnJb+xSu3Lzaoo8VnmOhhjNA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
require-directory@^2.1.1:
version "2.1.1"
resolved "https://registry.yarnpkg.com/require-directory/-/require-directory-2.1.1.tgz#8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"
integrity sha1-jGStX9MNqxyXbiNE/+f3kqam30I=
require-main-filename@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/require-main-filename/-/require-main-filename-1.0.1.tgz#97f717b69d48784f5f526a6c5aa8ffdda055a4d1"
integrity sha1-l/cXtp1IeE9fUmpsWqj/3aBVpNE=
require-main-filename@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/require-main-filename/-/require-main-filename-2.0.0.tgz#d0b329ecc7cc0f61649f62215be69af54aa8989b"
integrity sha512-NKN5kMDylKuldxYLSUfrbo5Tuzh4hd+2E8NPPX02mZtn1VuREQToYe/ZdlJy+J3uCpfaiGF05e7B8W0iXbQHmg==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
require-uncached@^1.0.3:
version "1.0.3"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/require-uncached/-/require-uncached-1.0.3.tgz#4e0d56d6c9662fd31e43011c4b95aa49955421d3"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
caller-path "^0.1.0"
resolve-from "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
resolve-dir@^1.0.0, resolve-dir@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/resolve-dir/-/resolve-dir-1.0.1.tgz#79a40644c362be82f26effe739c9bb5382046f43"
dependencies:
expand-tilde "^2.0.0"
global-modules "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
resolve-from@^1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/resolve-from/-/resolve-from-1.0.1.tgz#26cbfe935d1aeeeabb29bc3fe5aeb01e93d44226"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
resolve-from@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/resolve-from/-/resolve-from-4.0.0.tgz#4abcd852ad32dd7baabfe9b40e00a36db5f392e6"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
resolve-url@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/resolve-url/-/resolve-url-0.2.1.tgz#2c637fe77c893afd2a663fe21aa9080068e2052a"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 23:53:11 +03:00
resolve@^1.1.6, resolve@^1.1.7, resolve@^1.4.0, resolve@^1.9.0:
Respected peer dependency for bookshelf no issue - need to use knex 0.14.x for now - Bookshelf already bumped the peer dependency in master, but was not released yet
2019-01-22 10:58:28 +03:00
version "1.10.0"
resolved "https://registry.yarnpkg.com/resolve/-/resolve-1.10.0.tgz#3bdaaeaf45cc07f375656dfd2e54ed0810b101ba"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
dependencies:
path-parse "^1.0.6"
Removed coverage tasks from Gruntfile refs #9441
2019-04-08 17:12:48 +03:00
resolve@~1.1.0:
version "1.1.7"
resolved "https://registry.yarnpkg.com/resolve/-/resolve-1.1.7.tgz#203114d82ad2c5ed9e8e0411b3932875e889e97b"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolve@~1.8.1:
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 16:59:06 +03:00
version "1.8.1"
resolved "https://registry.yarnpkg.com/resolve/-/resolve-1.8.1.tgz#82f1ec19a423ac1fbd080b0bab06ba36e84a7a26"
dependencies:
path-parse "^1.0.5"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
responselike@^1.0.2:
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/responselike/-/responselike-1.0.2.tgz#918720ef3b631c5642be068f15ade5a46f4ba1e7"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
integrity sha1-kYcg7ztjHFZCvgaPFa3lpG9Loec=
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
dependencies:
lowercase-keys "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
restore-cursor@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/restore-cursor/-/restore-cursor-2.0.0.tgz#9f7ee287f82fd326d4fd162923d62129eee0dfaf"
dependencies:
onetime "^2.0.0"
signal-exit "^3.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
ret@~0.1.10:
version "0.1.15"
resolved "https://registry.yarnpkg.com/ret/-/ret-0.1.15.tgz#b8a4825d5bdb1fc3f6f53c2bc33f81388681c7bc"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
rewire@4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/rewire/-/rewire-4.0.1.tgz#ba1100d400a9da759fe599fc6e0233f0879ed6da"
Bump rewire to version 3.0.2 no issue - nothing to adapt for the major jump
2017-11-28 21:22:29 +03:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
eslint "^4.19.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
rimraf@2, rimraf@2.6.3, rimraf@^2.6.1, rimraf@^2.6.2, rimraf@~2.6.2:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "2.6.3"
resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-2.6.3.tgz#b2d104fe0d8fb27cf9e0a1cda8262dd3833c6cab"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
glob "^7.1.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
rimraf@~2.4.0:
version "2.4.5"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-2.4.5.tgz#ee710ce5d93a8fdb856fb5ea8ff0e2d75934b2da"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
glob "^6.0.1"
rss@1.2.2:
version "1.2.2"
resolved "https://registry.yarnpkg.com/rss/-/rss-1.2.2.tgz#50a1698876138133a74f9a05d2bdc8db8d27a921"
dependencies:
mime-types "2.1.13"
xml "1.0.1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
run-async@^2.2.0:
version "2.3.0"
resolved "https://registry.yarnpkg.com/run-async/-/run-async-2.3.0.tgz#0371ab4ae0bdd720d4166d7dfda64ff7a445a6c0"
dependencies:
is-promise "^2.1.0"
rx-lite-aggregates@^4.0.8:
version "4.0.8"
resolved "https://registry.yarnpkg.com/rx-lite-aggregates/-/rx-lite-aggregates-4.0.8.tgz#753b87a89a11c95467c4ac1626c4efc4e05c67be"
dependencies:
rx-lite "*"
rx-lite@*, rx-lite@^4.0.8:
version "4.0.8"
resolved "https://registry.yarnpkg.com/rx-lite/-/rx-lite-4.0.8.tgz#0b1e11af8bc44836f04a6407e92da42467b79444"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
rxjs@^6.4.0:
version "6.5.2"
resolved "https://registry.yarnpkg.com/rxjs/-/rxjs-6.5.2.tgz#2e35ce815cd46d84d02a209fb4e5921e051dbec7"
integrity sha512-HUb7j3kvb7p7eCUHE3FqjoDsC1xfZQ4AHFWfTKSpZ+sAhhz5X1WX0ZuUqWbzB2QhSLp3DoLUG+hMdEDKqWo2Zg==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
tslib "^1.9.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
safe-buffer@5.1.2, safe-buffer@^5.0.1, safe-buffer@^5.1.1, safe-buffer@^5.1.2, safe-buffer@~5.1.0, safe-buffer@~5.1.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "5.1.2"
resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.1.2.tgz#991ec69d296e0313747d59bdfd2b745c35f8828d"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
safe-json-parse@~1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/safe-json-parse/-/safe-json-parse-1.0.1.tgz#3e76723e38dfdda13c9b1d29a1e07ffee4b30b57"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
safe-json-stringify@~1:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/safe-json-stringify/-/safe-json-stringify-1.2.0.tgz#356e44bc98f1f93ce45df14bcd7c01cda86e0afd"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
safe-regex@^1.1.0:
version "1.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/safe-regex/-/safe-regex-1.1.0.tgz#40a3669f3b077d1e943d44629e157dd48023bf2e"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
dependencies:
ret "~0.1.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
"safer-buffer@>= 2.1.2 < 3", safer-buffer@^2.0.2, safer-buffer@^2.1.0, safer-buffer@~2.1.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/safer-buffer/-/safer-buffer-2.1.2.tgz#44fa161b0187b9549dd84bb91802f9bd8385cd6a"
Update dependency sanitize-html to v1.20.1
2019-07-02 13:32:10 +03:00
sanitize-html@1.20.1:
version "1.20.1"
resolved "https://registry.yarnpkg.com/sanitize-html/-/sanitize-html-1.20.1.tgz#f6effdf55dd398807171215a62bfc21811bacf85"
integrity sha512-txnH8TQjaQvg2Q0HY06G6CDJLVYCpbnxrdO0WN8gjCKaU5J0KbyGYhZxx5QJg3WLZ1lB7XU9kDkfrCXUozqptA==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
chalk "^2.4.1"
htmlparser2 "^3.10.0"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 16:02:47 +03:00
lodash.clonedeep "^4.5.0"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
lodash.escaperegexp "^4.1.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
lodash.isplainobject "^4.0.6"
lodash.isstring "^4.0.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
lodash.mergewith "^4.6.1"
postcss "^7.0.5"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
srcset "^1.0.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
xtend "^4.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
sax@0.4.2:
version "0.4.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/sax/-/sax-0.4.2.tgz#39f3b601733d6bec97105b242a2a40fd6978ac3c"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
sax@^1.2.4, sax@~1.2.1:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.2.4"
resolved "https://registry.yarnpkg.com/sax/-/sax-1.2.4.tgz#2816234e2378bddc4e5354fab5caa895df7100d9"
Update yarn.lock
2017-01-26 21:04:09 +03:00
✨ Added caption and language extraction for code blocks when converting HTML via API no issue - update @tryghost/html-to-mobiledoc to v0.3.0 - uses updated @tryghost/kg-parser-plugins that is now shared with Ghost-Admin
2019-05-03 13:55:38 +03:00
saxes@^3.1.9:
version "3.1.9"
resolved "https://registry.yarnpkg.com/saxes/-/saxes-3.1.9.tgz#c1c197cd54956d88c09f960254b999e192d7058b"
integrity sha512-FZeKhJglhJHk7eWG5YM0z46VHmI3KJpMBAQm3xa9meDvd+wevB5GuBB0wc0exPInZiBBHqi00DbS8AcvCGCFMw==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
xmlchars "^1.3.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
secure-keys@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/secure-keys/-/secure-keys-1.0.0.tgz#f0c82d98a3b139a8776a8808050b824431087fca"
Update dependency semver to v6
2019-07-02 03:43:45 +03:00
"semver@2 || 3 || 4 || 5", semver@^5.1.0, semver@^5.3.0, semver@^5.4.1, semver@^5.5.0, semver@^5.5.1, semver@^5.6.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "5.6.0"
resolved "https://registry.yarnpkg.com/semver/-/semver-5.6.0.tgz#7e74256fbaa49c75aa7c7a205cc22799cac80004"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
Update dependency semver to v6
2019-07-02 03:43:45 +03:00
semver@6.2.0:
version "6.2.0"
resolved "https://registry.yarnpkg.com/semver/-/semver-6.2.0.tgz#4d813d9590aaf8a9192693d6c85b9344de5901db"
integrity sha512-jdFC1VdUGT/2Scgbimf7FSx9iJLXoqfglSF+gJeuNWVpiE37OIbc1jywR/GJyFdz3mnkz2/id0L0J/cr0izR5A==
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
semver@^5.7.0:
version "5.7.0"
resolved "https://registry.yarnpkg.com/semver/-/semver-5.7.0.tgz#790a7cf6fea5459bac96110b29b60412dc8ff96b"
integrity sha512-Ya52jSX2u7QKghxeoFGpLwCtGlt7j0oY9DYb5apt9nPlJ42ID+ulTXESnt/qAQcoSERyZ5sl3LDIOw0nAn/5DA==
Bumped gscan version to 2.6.0 no issue - Updated valid theme fixture to be inline with warning that was added when using {{each}} helper instead of {{foreach}}
2019-05-08 17:56:22 +03:00
semver@^6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/semver/-/semver-6.0.0.tgz#05e359ee571e5ad7ed641a6eec1e547ba52dea65"
integrity sha512-0UewU+9rFapKFnlbirLi3byoOuhrSsli/z/ihNnvM24vgF+8sNBiI1LZPBSH9wJKUwaUbw+s3hToDLCXkrghrQ==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
semver@~5.3.0:
version "5.3.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/semver/-/semver-5.3.0.tgz#9b2ce5d3de02d17c6012ad326aa6b4d0cf54f94f"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
send@0.16.2:
version "0.16.2"
resolved "https://registry.yarnpkg.com/send/-/send-0.16.2.tgz#6ecca1e0f8c156d141597559848df64730a6bbc1"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
debug "2.6.9"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
depd "~1.1.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
destroy "~1.0.4"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
encodeurl "~1.0.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
escape-html "~1.0.3"
etag "~1.8.1"
fresh "0.5.2"
http-errors "~1.6.2"
mime "1.4.1"
ms "2.0.0"
on-finished "~2.3.0"
range-parser "~1.2.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
statuses "~1.4.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
send@0.17.1:
version "0.17.1"
resolved "https://registry.yarnpkg.com/send/-/send-0.17.1.tgz#c1d8b059f7900f7466dd4938bdc44e11ddb376c8"
integrity sha512-BsVKsiGcQMFwT8UxypobUKyv7irCNRHk1T0G680vk88yf6LBByGcZJOTJCrTP2xVN6yI+XjPJcNuE3V4fT9sAg==
dependencies:
debug "2.6.9"
depd "~1.1.2"
destroy "~1.0.4"
encodeurl "~1.0.2"
escape-html "~1.0.3"
etag "~1.8.1"
fresh "0.5.2"
http-errors "~1.7.2"
mime "1.6.0"
ms "2.1.1"
on-finished "~2.3.0"
range-parser "~1.2.1"
statuses "~1.5.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
serve-static@1.13.2:
version "1.13.2"
resolved "https://registry.yarnpkg.com/serve-static/-/serve-static-1.13.2.tgz#095e8472fd5b46237db50ce486a43f4b86c6cec1"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
encodeurl "~1.0.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
escape-html "~1.0.3"
parseurl "~1.3.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
send "0.16.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
serve-static@1.14.1:
version "1.14.1"
resolved "https://registry.yarnpkg.com/serve-static/-/serve-static-1.14.1.tgz#666e636dc4f010f7ef29970a88a674320898b2f9"
integrity sha512-JMrvUwE54emCYWlTI+hGrGv5I8dEwmco/00EvkzIIsR7MqrHonbD9pO2MOfFnpFntl7ecpZs+3mW+XbQZu9QCg==
dependencies:
encodeurl "~1.0.2"
escape-html "~1.0.3"
parseurl "~1.3.3"
send "0.17.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
set-blocking@^2.0.0, set-blocking@~2.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.0.0"
resolved "https://registry.yarnpkg.com/set-blocking/-/set-blocking-2.0.0.tgz#045f9782d011ae9a6803ddd382b24392b3d890f7"
set-immediate-shim@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/set-immediate-shim/-/set-immediate-shim-1.0.1.tgz#4b2b1b27eb808a9f8dcc481a58e5e56f599f3f61"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
set-value@^0.4.3:
version "0.4.3"
resolved "https://registry.yarnpkg.com/set-value/-/set-value-0.4.3.tgz#7db08f9d3d22dc7f78e53af3c3bf4666ecdfccf1"
dependencies:
extend-shallow "^2.0.1"
is-extendable "^0.1.1"
is-plain-object "^2.0.1"
to-object-path "^0.3.0"
set-value@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/set-value/-/set-value-2.0.0.tgz#71ae4a88f0feefbbf52d1ea604f3fb315ebb6274"
dependencies:
extend-shallow "^2.0.1"
is-extendable "^0.1.1"
is-plain-object "^2.0.3"
split-string "^3.0.1"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
setprototypeof@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/setprototypeof/-/setprototypeof-1.1.0.tgz#d0bd85536887b6fe7c0d818cb962d9d91c54e656"
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
setprototypeof@1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/setprototypeof/-/setprototypeof-1.1.1.tgz#7e95acb24aa92f5885e0abef5ba131330d4ae683"
integrity sha512-JvdAWfbXeIGaZ9cILp38HntZSFSo3mWg6xGcJJsd+d4aRMOqauag1C63dJfDw7OaMYwEbHMOxEZ1lqVRYP2OAw==
Update dependency sharp to v0.22.1
2019-07-02 03:42:14 +03:00
sharp@0.22.1:
version "0.22.1"
resolved "https://registry.yarnpkg.com/sharp/-/sharp-0.22.1.tgz#a67c0e75567f03dd5a7861b901fec04072c5b0f4"
integrity sha512-lXzSk/FL5b/MpWrT1pQZneKe25stVjEbl6uhhJcTULm7PhmJgKKRbTDM/vtjyUuC/RLqL2PRyC4rpKwbv3soEw==
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
dependencies:
Update dependency sharp to v0.22.1
2019-07-02 03:42:14 +03:00
color "^3.1.1"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
detect-libc "^1.0.3"
fs-copy-file-sync "^1.1.1"
Update dependency sharp to v0.22.1
2019-07-02 03:42:14 +03:00
nan "^2.13.2"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
npmlog "^4.1.2"
Update dependency sharp to v0.22.1
2019-07-02 03:42:14 +03:00
prebuild-install "^5.3.0"
semver "^6.0.0"
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
simple-get "^3.0.3"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
tar "^4.4.8"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
tunnel-agent "^0.6.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
shebang-command@^1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/shebang-command/-/shebang-command-1.2.0.tgz#44aac65b695b03398968c39f363fee5deafdf1ea"
dependencies:
shebang-regex "^1.0.0"
shebang-regex@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/shebang-regex/-/shebang-regex-1.0.0.tgz#da42f49740c0b42db2ca9728571cb190c98efea3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 21:41:16 +03:00
should-equal@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/should-equal/-/should-equal-2.0.0.tgz#6072cf83047360867e68e98b09d71143d04ee0c3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 21:41:16 +03:00
should-type "^1.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 21:41:16 +03:00
should-format@^3.0.3:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "3.0.3"
resolved "https://registry.yarnpkg.com/should-format/-/should-format-3.0.3.tgz#9bfc8f74fa39205c53d38c34d717303e277124f1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
should-type "^1.3.0"
should-type-adaptors "^1.0.1"
Update should-http to version 0.1.1 🚀 (#8209) * chore(package): update should-http to version 0.1.1 https://greenkeeper.io/ * chore: yarn.lock
2017-04-04 11:12:37 +03:00
should-http@0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/should-http/-/should-http-0.1.1.tgz#9b793843f4024885781eb6abacc4030e1e9f21f0"
Update should-http to version 0.1.0 🚀 (#7944) * chore(package): update should-http to version 0.1.0 https://greenkeeper.io/ * chore: yarn.lock
2017-02-08 22:14:49 +03:00
dependencies:
content-type "^1.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
should-type-adaptors@^1.0.1:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/should-type-adaptors/-/should-type-adaptors-1.1.0.tgz#401e7f33b5533033944d5cd8bf2b65027792e27a"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
should-type "^1.3.0"
should-util "^1.0.0"
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 21:41:16 +03:00
should-type@^1.3.0, should-type@^1.4.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.4.0"
resolved "https://registry.yarnpkg.com/should-type/-/should-type-1.4.0.tgz#0756d8ce846dfd09843a6947719dfa0d4cff5cf3"
should-util@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/should-util/-/should-util-1.0.0.tgz#c98cda374aa6b190df8ba87c9889c2b4db620063"
🐛 Fixed eslint installation error when using node version < 8.10 and < 6.14 closes #10420 - bumped brute-knex > error eslint@5.12.1: The engine “node” is incompatible with this module. Expected version “^6.14.0 || ^8.10.0 || >=9.10.0”. Got “8.9.1”
2019-01-27 20:29:40 +03:00
should@13.2.3:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "13.2.3"
resolved "https://registry.yarnpkg.com/should/-/should-13.2.3.tgz#96d8e5acf3e97b49d89b51feaa5ae8d07ef58f10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 21:41:16 +03:00
should-equal "^2.0.0"
should-format "^3.0.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
should-type "^1.4.0"
should-type-adaptors "^1.0.1"
should-util "^1.0.0"
Respected peer dependency for bookshelf no issue - need to use knex 0.14.x for now - Bookshelf already bumped the peer dependency in master, but was not released yet
2019-01-22 10:58:28 +03:00
sigmund@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/sigmund/-/sigmund-1.0.1.tgz#3ff21f198cad2175f9f3b781853fd94d0d19b590"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
signal-exit@^3.0.0, signal-exit@^3.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/signal-exit/-/signal-exit-3.0.2.tgz#b5fdc08f1287ea1178628e415e25132b73646c6d"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
simple-concat@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/simple-concat/-/simple-concat-1.0.0.tgz#7344cbb8b6e26fb27d66b2fc86f9f6d5997521c6"
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 21:07:33 +03:00
simple-dom@0.3.2:
version "0.3.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/simple-dom/-/simple-dom-0.3.2.tgz#0663d10f1556f1500551d518f56e3aba0871371d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
simple-get@^2.7.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "2.8.1"
resolved "https://registry.yarnpkg.com/simple-get/-/simple-get-2.8.1.tgz#0e22e91d4575d87620620bc91308d57a77f44b5d"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
decompress-response "^3.3.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
once "^1.3.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
simple-concat "^1.0.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 20:52:36 +03:00
simple-get@^3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/simple-get/-/simple-get-3.0.3.tgz#924528ac3f9d7718ce5e9ec1b1a69c0be4d62efa"
dependencies:
decompress-response "^3.3.0"
once "^1.3.1"
simple-concat "^1.0.0"
Update dependency simple-html-tokenizer to v0.5.8
2019-07-29 03:29:14 +03:00
simple-html-tokenizer@0.5.8:
version "0.5.8"
resolved "https://registry.yarnpkg.com/simple-html-tokenizer/-/simple-html-tokenizer-0.5.8.tgz#3417382f75954ee34515cc4fd32d9918e693f173"
integrity sha512-0Sq4FvLlQEQODVA6PH2MIrc7tzYO0KT2HzzwvaVLYClWgIsuvaNUOrhrAvTi1pZHrcq7GDB4WiI3ukjqBMxcGQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
simple-swizzle@^0.2.2:
version "0.2.2"
resolved "https://registry.yarnpkg.com/simple-swizzle/-/simple-swizzle-0.2.2.tgz#a4da6b635ffcccca33f70d17cb92592de95e557a"
dependencies:
is-arrayish "^0.3.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
"simplesmtp@~0.2 || ~0.3.30", simplesmtp@~0.3.30:
version "0.3.35"
resolved "https://registry.yarnpkg.com/simplesmtp/-/simplesmtp-0.3.35.tgz#017b1eb8b26317ac36d2a2a8a932631880736a03"
dependencies:
rai "~0.1.11"
xoauth2 "~0.1.8"
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 19:53:44 +03:00
sinon@7.2.3:
version "7.2.3"
resolved "https://registry.yarnpkg.com/sinon/-/sinon-7.2.3.tgz#f8bfd956df32ddf592f8c102fd46982366412d8e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 19:53:44 +03:00
"@sinonjs/commons" "^1.3.0"
"@sinonjs/formatio" "^3.1.0"
"@sinonjs/samsam" "^3.0.2"
diff "^3.5.0"
lolex "^3.0.0"
nise "^1.4.8"
supports-color "^5.5.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
slash@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/slash/-/slash-2.0.0.tgz#de552851a1759df3a8f206535442f5ec4ddeab44"
integrity sha512-ZYKh3Wh2z1PpEXWr0MpSBZ0V6mZHAQfYevttO11c51CaWjGTaadiKZ+wVt1PbMlDV5qhMFslpZCemhwOK7C89A==
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
slice-ansi@1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/slice-ansi/-/slice-ansi-1.0.0.tgz#044f1a49d8842ff307aad6b505ed178bd950134d"
dependencies:
is-fullwidth-code-point "^2.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
slice-ansi@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/slice-ansi/-/slice-ansi-2.1.0.tgz#cacd7693461a637a5788d92a7dd4fba068e81636"
integrity sha512-Qu+VC3EwYLldKa1fCxuuvULvSJOKEgk9pi8dZeCVK7TqBfUNTH4sFkk4joj8afVSfAYgJoSOetjx9QWOJ5mYoQ==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
ansi-styles "^3.2.0"
astral-regex "^1.0.0"
is-fullwidth-code-point "^2.0.0"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 21:49:30 +03:00
snake-case@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/snake-case/-/snake-case-2.1.0.tgz#41bdb1b73f30ec66a04d4e2cad1b76387d4d6d9f"
dependencies:
no-case "^2.2.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
snapdragon-node@^2.0.1:
version "2.1.1"
resolved "https://registry.yarnpkg.com/snapdragon-node/-/snapdragon-node-2.1.1.tgz#6c175f86ff14bdb0724563e8f3c1b021a286853b"
dependencies:
define-property "^1.0.0"
isobject "^3.0.0"
snapdragon-util "^3.0.1"
snapdragon-util@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/snapdragon-util/-/snapdragon-util-3.0.1.tgz#f956479486f2acd79700693f6f7b805e45ab56e2"
dependencies:
kind-of "^3.2.0"
snapdragon@^0.8.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "0.8.2"
resolved "https://registry.yarnpkg.com/snapdragon/-/snapdragon-0.8.2.tgz#64922e7c565b0e14204ba1aa7d6964278d25182d"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
base "^0.11.1"
debug "^2.2.0"
define-property "^0.2.5"
extend-shallow "^2.0.1"
map-cache "^0.2.2"
source-map "^0.5.6"
source-map-resolve "^0.5.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
use "^3.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
sort-keys@^1.0.0:
version "1.1.2"
resolved "https://registry.yarnpkg.com/sort-keys/-/sort-keys-1.1.2.tgz#441b6d4d346798f1b4e49e8920adfba0e543f9ad"
dependencies:
is-plain-obj "^1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
source-map-resolve@^0.5.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "0.5.2"
resolved "https://registry.yarnpkg.com/source-map-resolve/-/source-map-resolve-0.5.2.tgz#72e2cc34095543e43b2c62b2c4c10d4a9054f259"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
atob "^2.1.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
decode-uri-component "^0.2.0"
resolve-url "^0.2.1"
source-map-url "^0.4.0"
urix "^0.1.0"
source-map-url@^0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/source-map-url/-/source-map-url-0.4.0.tgz#3e935d7ddd73631b97659956d55128e87b5084a3"
Bumped express-hbs dependency no issue - express-hbs has been updated to depend on handlebars@4.0.13 which protects against a potential RCE - Ghost itself was not vulnerable to the RCE due to protection by gscan which does not allow themes using unknown helpers to be installed/activated
2019-02-07 17:16:37 +03:00
source-map@^0.5.3, source-map@^0.5.6:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "0.5.7"
resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.5.7.tgz#8a039d2d1021d22d1ea14c80d8ea468ba2ef3fcc"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
source-map@^0.6.1, source-map@~0.6.1:
version "0.6.1"
resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.6.1.tgz#74722af32e9614e9c287a8d0bbde48b5e2f1a263"
spdx-correct@^3.0.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/spdx-correct/-/spdx-correct-3.1.0.tgz#fb83e504445268f154b074e218c87c003cd31df4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
spdx-expression-parse "^3.0.0"
spdx-license-ids "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
spdx-exceptions@^2.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "2.2.0"
resolved "https://registry.yarnpkg.com/spdx-exceptions/-/spdx-exceptions-2.2.0.tgz#2ea450aee74f2a89bfb94519c07fcd6f41322977"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
spdx-expression-parse@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/spdx-expression-parse/-/spdx-expression-parse-3.0.0.tgz#99e119b7a5da00e05491c9fa338b7904823b41d0"
dependencies:
spdx-exceptions "^2.1.0"
spdx-license-ids "^3.0.0"
spdx-license-ids@^3.0.0:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "3.0.3"
resolved "https://registry.yarnpkg.com/spdx-license-ids/-/spdx-license-ids-3.0.3.tgz#81c0ce8f21474756148bbb5f3bfc0f36bf15d76e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
split-string@^3.0.1, split-string@^3.0.2:
version "3.1.0"
resolved "https://registry.yarnpkg.com/split-string/-/split-string-3.1.0.tgz#7cb09dda3a86585705c64b39a6466038682e8fe2"
dependencies:
extend-shallow "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
split2@^2.1.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "2.2.0"
resolved "https://registry.yarnpkg.com/split2/-/split2-2.2.0.tgz#186b2575bcf83e85b7d18465756238ee4ee42493"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
through2 "^2.0.2"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
sprintf-js@^1.0.3:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/sprintf-js/-/sprintf-js-1.1.2.tgz#da1765262bf8c0f571749f2ad6c26300207ae673"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
sprintf-js@~1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.3"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/sprintf-js/-/sprintf-js-1.0.3.tgz#04e6926f662895354f3dd015203633b857297e2c"
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 19:43:08 +03:00
Update dependency sqlite3 to v4.0.9
2019-07-02 13:29:19 +03:00
sqlite3@4.0.9:
version "4.0.9"
resolved "https://registry.yarnpkg.com/sqlite3/-/sqlite3-4.0.9.tgz#cff74550fa5a1159956815400bdef69245557640"
integrity sha512-IkvzjmsWQl9BuBiM4xKpl5X8WCR4w0AeJHRdobCdXZ8dT/lNc1XS6WqvY35N6+YzIIgzSBeY5prdFObID9F9tA==
dependencies:
nan "^2.12.1"
node-pre-gyp "^0.11.0"
request "^2.87.0"
sqlite3@^4.0.6:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "4.0.6"
resolved "https://registry.yarnpkg.com/sqlite3/-/sqlite3-4.0.6.tgz#e587b583b5acc6cb38d4437dedb2572359c080ad"
Added optional support for HTML source closes TryGhost/Ghost-SDK/issues/51 - Due to JSDOM not supporting Node v6 the support for HTML conversion is now optional
2019-02-21 07:46:55 +03:00
integrity sha512-EqBXxHdKiwvNMRCgml86VTL5TK1i0IKiumnfxykX0gh6H6jaKijAXvE9O1N7+omfNSawR2fOmIyJZcfe8HYWpw==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
dependencies:
nan "~2.10.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
node-pre-gyp "^0.11.0"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
request "^2.87.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
sqlstring@2.3.1:
version "2.3.1"
resolved "https://registry.yarnpkg.com/sqlstring/-/sqlstring-2.3.1.tgz#475393ff9e91479aea62dcaf0ca3d14983a7fb40"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 13:53:16 +03:00
srcset@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/srcset/-/srcset-1.0.0.tgz#a5669de12b42f3b1d5e83ed03c71046fc48f41ef"
dependencies:
array-uniq "^1.0.2"
number-is-nan "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
sshpk@^1.7.0:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "1.16.0"
resolved "https://registry.yarnpkg.com/sshpk/-/sshpk-1.16.0.tgz#1d4963a2fbffe58050aa9084ca20be81741c07de"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
asn1 "~0.2.3"
assert-plus "^1.0.0"
bcrypt-pbkdf "^1.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
dashdash "^1.12.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
ecc-jsbn "~0.1.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
getpass "^0.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
jsbn "~0.1.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
safer-buffer "^2.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
tweetnacl "~0.14.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
stack-trace@0.0.10:
version "0.0.10"
resolved "https://registry.yarnpkg.com/stack-trace/-/stack-trace-0.0.10.tgz#547c70b347e8d32b4e108ea1a2a159e5fdde19c0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
standalone-react-addons-pure-render-mixin@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/standalone-react-addons-pure-render-mixin/-/standalone-react-addons-pure-render-mixin-0.1.1.tgz#3c7409f4c79c40de9ac72c616cf679a994f37551"
integrity sha1-PHQJ9MecQN6axyxhbPZ5qZTzdVE=
Update dependency jsonpath to v1.0.2
2019-07-02 13:28:29 +03:00
static-eval@2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/static-eval/-/static-eval-2.0.2.tgz#2d1759306b1befa688938454c546b7871f806a42"
integrity sha512-N/D219Hcr2bPjLxPiV+TQE++Tsmrady7TqAJugLy7Xk1EumfDWS/f5dtBbkRCGE7wKKXuYockQoj8Rm2/pVKyg==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump jsonpath to version 1.0.0 no issue - major bump - we only use jsonpath inside the `get` helper - the functionality still works as expected - includes security fix, see https://github.com/dchester/jsonpath/commit/98464aa5fea65bad09564a5632bad72e31736244
2017-10-31 14:21:48 +03:00
escodegen "^1.8.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
static-extend@^0.1.1:
version "0.1.2"
resolved "https://registry.yarnpkg.com/static-extend/-/static-extend-0.1.2.tgz#60809c39cbff55337226fd5e0b520f341f1fb5c6"
dependencies:
define-property "^0.2.5"
object-copy "^0.1.0"
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
"statuses@>= 1.2.1 < 2", "statuses@>= 1.4.0 < 2", "statuses@>= 1.5.0 < 2", statuses@~1.5.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "1.5.0"
resolved "https://registry.yarnpkg.com/statuses/-/statuses-1.5.0.tgz#161c7dac177659fd9811f43771fa99381478628c"
statuses@~1.4.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.4.0"
resolved "https://registry.yarnpkg.com/statuses/-/statuses-1.4.0.tgz#bb73d446da2796106efcc1b601a253d6c46bd087"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
stealthy-require@^1.1.0, stealthy-require@^1.1.1:
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/stealthy-require/-/stealthy-require-1.1.1.tgz#35b09875b4ff49f26a777e509b3090a3226bf24b"
integrity sha1-NbCYdbT/SfJqd35QmzCQoyJr8ks=
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
stream-buffers@^2.1.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/stream-buffers/-/stream-buffers-2.2.0.tgz#91d5f5130d1cef96dcfa7f726945188741d09ee4"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
stream-parser@~0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/stream-parser/-/stream-parser-0.3.1.tgz#1618548694420021a1182ff0af1911c129761773"
integrity sha1-FhhUhpRCACGhGC/wrxkRwSl2F3M=
dependencies:
debug "2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
streamsearch@0.1.2:
version "0.1.2"
resolved "https://registry.yarnpkg.com/streamsearch/-/streamsearch-0.1.2.tgz#808b9d0e56fc273d809ba57338e929919a1a9f1a"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
strict-uri-encode@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/strict-uri-encode/-/strict-uri-encode-1.1.0.tgz#279b225df1d582b1f54e65addd4352e18faa0713"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
string-template@~0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/string-template/-/string-template-0.2.1.tgz#42932e598a352d01fc22ec3367d9d84eec6c9add"
string-width@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/string-width/-/string-width-1.0.2.tgz#118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3"
dependencies:
code-point-at "^1.0.0"
is-fullwidth-code-point "^1.0.0"
strip-ansi "^3.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
"string-width@^1.0.2 || 2", string-width@^2.0.0, string-width@^2.1.0, string-width@^2.1.1:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/string-width/-/string-width-2.1.1.tgz#ab93f27a8dc13d28cac815c462143a6d9012ae9e"
dependencies:
is-fullwidth-code-point "^2.0.0"
strip-ansi "^4.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
string-width@^3.0.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/string-width/-/string-width-3.1.0.tgz#22767be21b62af1081574306f69ac51b62203961"
integrity sha512-vafcv6KjVZKSgz06oM/H6GDBrAtz8vdhQakGjFIvNrHA6y3HCF1CInLy+QLq8dTJPQ1b+KDUqDFctkdRW44e1w==
dependencies:
emoji-regex "^7.0.1"
is-fullwidth-code-point "^2.0.0"
strip-ansi "^5.1.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
string_decoder@0.10, string_decoder@~0.10.x:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.10.31"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-0.10.31.tgz#62e203bc41766c6c28c9fc84301dab1c5310fa94"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
string_decoder@^1.1.1:
version "1.2.0"
resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-1.2.0.tgz#fe86e738b19544afe70469243b2a1ee9240eae8d"
dependencies:
safe-buffer "~5.1.0"
string_decoder@~1.1.1:
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
version "1.1.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-1.1.1.tgz#9cf1611ba62685d7030ae9e4ba34149c3af03fc8"
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 22:11:46 +03:00
dependencies:
safe-buffer "~5.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
strip-ansi@^3.0.0, strip-ansi@^3.0.1:
version "3.0.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-3.0.1.tgz#6a385fb8853d952d5ff05d0e8aaf94278dc63dcf"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
ansi-regex "^2.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
strip-ansi@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-4.0.0.tgz#a8479022eb1ac368a871389b635262c505ee368f"
dependencies:
ansi-regex "^3.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
strip-ansi@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-5.0.0.tgz#f78f68b5d0866c20b2c9b8c61b5298508dc8756f"
dependencies:
ansi-regex "^4.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
strip-ansi@^5.1.0:
version "5.2.0"
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-5.2.0.tgz#8c9a536feb6afc962bdfa5b104a5091c1ad9c0ae"
integrity sha512-DuRs1gKbBqsMKIZlrffwlug8MHkcnpjs5VPmL1PAh+mA30U0DTotfDZ0d2UUsXpPmPmMMJ6W773MaA3J+lbiWA==
dependencies:
ansi-regex "^4.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
strip-bom@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/strip-bom/-/strip-bom-2.0.0.tgz#6219a85616520491f35788bdbf1447a99c7e6b0e"
dependencies:
is-utf8 "^0.2.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
strip-bom@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/strip-bom/-/strip-bom-3.0.0.tgz#2334c18e9c759f7bdd56fdef7e9ae3d588e68ed3"
integrity sha1-IzTBjpx1n3vdVv3vfprj1YjmjtM=
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 16:40:30 +03:00
strip-eof@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/strip-eof/-/strip-eof-1.0.0.tgz#bb43ff5598a6eb05d89b59fcd129c983313606bf"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
strip-indent@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/strip-indent/-/strip-indent-1.0.1.tgz#0c7962a6adefa7bbd4ac366460a638552ae1a0a2"
dependencies:
get-stdin "^4.0.1"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
strip-indent@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/strip-indent/-/strip-indent-2.0.0.tgz#5ef8db295d01e6ed6cbf7aab96998d7822527b68"
integrity sha1-XvjbKV0B5u1sv3qrlpmNeCJSe2g=
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
strip-json-comments@2.0.1, strip-json-comments@^2.0.1, strip-json-comments@~2.0.1:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "2.0.1"
resolved "https://registry.yarnpkg.com/strip-json-comments/-/strip-json-comments-2.0.1.tgz#3c531942e908c2697c0ec344858c286c7ca0a60a"
Refactored members service logging and errors (#10919) * Installed @tryghost/members-ssr@0.2.1 refs https://github.com/TryGhost/Members/issues/38 This updates allows for dynamic access of the membersApi, which will be used in future when replacing the membersApi instance with a newly configured one. * Set the membersApiInstance logger to use common.logging refs https://github.com/TryGhost/Members/issues/38 Passes the Ghost logger to the members api, so that we can keep an eye on errors produced by the api. * Refactored memberService use to always use getter refs https://github.com/TryGhost/Members/issues/38 This will allow us to switch out the membersApi and the consumers of it to have the updated reference by going through a getter. * Installed @tryghost/members-api@0.3.0 refs https://github.com/TryGhost/Members/issues/38 Adds support for setting the logger * Uninstalled stripe@7.0.0 refs https://github.com/TryGhost/Members/issues/38 The stripe module is now a dep of members-api, as it should be * Updated members service to reconfigure settings refs https://github.com/TryGhost/Members/issues/38 Previously we were unable to stop an invalidly configured members api instance, now that we create a new instance, we can wait for the ready or error event and only switch it out then.
2019-07-18 10:37:11 +03:00
stripe@^7.4.0:
Update dependency stripe to v7
2019-07-02 03:44:07 +03:00
version "7.4.0"
resolved "https://registry.yarnpkg.com/stripe/-/stripe-7.4.0.tgz#d40834f7763ebe775fe944db94bd3f31f291b0fc"
integrity sha512-eurSZJw45MvnV7PjmFHMgJMkCihHgqGHr11OHpFdMh+5CCyYvbVlA5uP5VoVQakhYjSLCObs0dbXtGYhIAMKvw==
Added initial subscription support with stripe to Members API (#10460) These changes introduce a new "service" to the members api, which handles getting and creating subscriptions. This is wired up to get subscription information when creating tokens, and attaching information to the token, so that the Content API can allow/deny access. Behind the subscription service we have a Stripe "payment processor", this holds the logic for creating subscriptions etc... in Stripe. The logic for getting items out of stripe uses a hash of the relevant data as the id to search for, this allows us to forgo keeping stripe data in a db, so that this feature can get out quicker.
2019-02-07 12:41:39 +03:00
dependencies:
lodash.isplainobject "^4.0.6"
Update dependency stripe to v7
2019-07-02 03:44:07 +03:00
qs "^6.6.0"
Added initial subscription support with stripe to Members API (#10460) These changes introduce a new "service" to the members api, which handles getting and creating subscriptions. This is wired up to get subscription information when creating tokens, and attaching information to the token, so that the Content API can allow/deny access. Behind the subscription service we have a Stripe "payment processor", this holds the logic for creating subscriptions etc... in Stripe. The logic for getting items out of stripe uses a hash of the relevant data as the id to search for, this allows us to forgo keeping stripe data in a db, so that this feature can get out quicker.
2019-02-07 12:41:39 +03:00
safe-buffer "^5.1.1"
Update dependency stripe to v7
2019-07-02 03:44:07 +03:00
uuid "^3.3.2"
Added initial subscription support with stripe to Members API (#10460) These changes introduce a new "service" to the members api, which handles getting and creating subscriptions. This is wired up to get subscription information when creating tokens, and attaching information to the token, so that the Content API can allow/deny access. Behind the subscription service we have a Stripe "payment processor", this holds the logic for creating subscriptions etc... in Stripe. The logic for getting items out of stripe uses a hash of the relevant data as the id to search for, this allows us to forgo keeping stripe data in a db, so that this feature can get out quicker.
2019-02-07 12:41:39 +03:00
Bumped superagent from 3.8.3 to 4.1.0 refs #9389 - https://github.com/visionmedia/superagent/blob/master/History.md#400-2018-11-17 - breaking changes don't really affect us - .end(…) returns undefined instead of the request. If you need the request object after calling .end() (and you probably don't), save it in a variable and call request.end(…). Consider not using .end() at all, and migrating to promises by calling .then() instead. - this could be changed, but it's not required
2019-01-21 17:19:07 +03:00
superagent@^3.8.3:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "3.8.3"
resolved "https://registry.yarnpkg.com/superagent/-/superagent-3.8.3.tgz#460ea0dbdb7d5b11bc4f78deba565f86a178e128"
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
dependencies:
component-emitter "^1.2.0"
cookiejar "^2.1.0"
debug "^3.1.0"
extend "^3.0.0"
form-data "^2.3.1"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
formidable "^1.2.0"
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
methods "^1.1.1"
mime "^1.4.1"
qs "^6.5.1"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
readable-stream "^2.3.5"
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 14:08:32 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
supertest@4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/supertest/-/supertest-4.0.2.tgz#c2234dbdd6dc79b6f15b99c8d6577b90e4ce3f36"
integrity sha512-1BAbvrOZsGA3YTCWqbmh14L0YEq0EGICX/nBnfkfVJn7SrxQV1I3pMYjSzG9y/7ZU2V9dWqyqk2POwxlb09duQ==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
methods "^1.1.2"
superagent "^3.8.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 21:32:03 +03:00
supports-color@4.4.0:
version "4.4.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-4.4.0.tgz#883f7ddabc165142b2a61427f3352ded195d1a3e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 21:32:03 +03:00
has-flag "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
supports-color@6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-6.0.0.tgz#76cfe742cf1f41bb9b1c29ad03068c05b4c0e40a"
integrity sha512-on9Kwidc1IUQo+bQdhi8+Tijpo0e1SS6RoGo2guUwn5vdaxw8RXOF9Vb2ws+ihWOmh4JnCJOvaziZWP1VABaLg==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
has-flag "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
supports-color@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-2.0.0.tgz#535d045ce6b6363fa40117084629995e9df324c7"
Removed coverage tasks from Gruntfile refs #9441
2019-04-08 17:12:48 +03:00
supports-color@^3.2.3:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "3.2.3"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-3.2.3.tgz#65ac0504b3954171d8a64946b2ae3cbb8a5f54f6"
dependencies:
has-flag "^1.0.0"
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 19:53:44 +03:00
supports-color@^5.3.0, supports-color@^5.5.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "5.5.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-5.5.0.tgz#e2e69a44ac8772f78a1ec0b35b689df6530efc8f"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
has-flag "^3.0.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
supports-color@^6.1.0:
version "6.1.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-6.1.0.tgz#0764abc69c63d5ac842dd4867e8d025e880df8f3"
dependencies:
has-flag "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
svgo@^0.7.0:
version "0.7.2"
resolved "https://registry.yarnpkg.com/svgo/-/svgo-0.7.2.tgz#9f5772413952135c6fefbf40afe6a4faa88b4bb5"
dependencies:
coa "~1.0.1"
colors "~1.1.2"
csso "~2.3.1"
js-yaml "~3.7.0"
mkdirp "~0.5.1"
sax "~1.2.1"
whet.extend "~0.9.9"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
symbol-tree@^3.2.2:
version "3.2.2"
resolved "https://registry.yarnpkg.com/symbol-tree/-/symbol-tree-3.2.2.tgz#ae27db38f660a7ae2e1c3b7d1bc290819b8519e6"
integrity sha1-rifbOPZgp64uHDt9G8KQgZuFGeY=
Updated gscan to 2.5.0 no-issue This includes a bump to handlebars -> 4.1.2, which fixes a potential RCE https://github.com/wycats/handlebars.js/blob/v4.1.2/release-notes.md#v412---april-13th-2019
2019-04-15 15:23:43 +03:00
sywac@^1.2.1:
version "1.2.1"
resolved "https://registry.yarnpkg.com/sywac/-/sywac-1.2.1.tgz#528e482b2f2a18e764ffccc59eb40eea16a7f97d"
integrity sha512-bf8agjBAV9mm90k2nWoobe48bO/XugTS86W4dGYTpzVlfFv1cmWsRrQ9hUKIfoDaIRaXIta/BLFINmmxfV+otg==
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
table@4.0.2:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
version "4.0.2"
resolved "https://registry.yarnpkg.com/table/-/table-4.0.2.tgz#a33447375391e766ad34d3486e6e2aedc84d2e36"
dependencies:
ajv "^5.2.3"
ajv-keywords "^2.1.0"
chalk "^2.1.0"
lodash "^4.17.4"
slice-ansi "1.0.0"
string-width "^2.1.1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
table@^5.2.3:
version "5.4.1"
resolved "https://registry.yarnpkg.com/table/-/table-5.4.1.tgz#0691ae2ebe8259858efb63e550b6d5f9300171e8"
integrity sha512-E6CK1/pZe2N75rGZQotFOdmzWQ1AILtgYbMAbAjvms0S1l5IDB47zG3nCnFGB/w+7nB3vKofbLXCH7HPBo864w==
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
dependencies:
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
ajv "^6.9.1"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
lodash "^4.17.11"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
slice-ansi "^2.1.0"
string-width "^3.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
tar-fs@^1.13.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.16.3"
resolved "https://registry.yarnpkg.com/tar-fs/-/tar-fs-1.16.3.tgz#966a628841da2c4010406a82167cbd5e0c72d509"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
dependencies:
chownr "^1.0.1"
mkdirp "^0.5.1"
pump "^1.0.0"
tar-stream "^1.1.2"
tar-stream@^1.1.2, tar-stream@^1.5.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "1.6.2"
resolved "https://registry.yarnpkg.com/tar-stream/-/tar-stream-1.6.2.tgz#8ea55dab37972253d9a9af90fdcd559ae435c555"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
bl "^1.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
buffer-alloc "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
end-of-stream "^1.0.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
fs-constants "^1.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
readable-stream "^2.3.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
to-buffer "^1.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
xtend "^4.0.0"
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
tar-stream@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/tar-stream/-/tar-stream-2.1.0.tgz#d1aaa3661f05b38b5acc9b7020efdca5179a2cc3"
integrity sha512-+DAn4Nb4+gz6WZigRzKEZl1QuJVOLtAwwF+WUxy1fJ6X63CaGaUAxJRD2KEn1OMfcbCjySTYpNC6WmfQoIEOdw==
dependencies:
bl "^3.0.0"
end-of-stream "^1.4.1"
fs-constants "^1.0.0"
inherits "^2.0.3"
readable-stream "^3.1.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
tar@^2.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "2.2.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/tar/-/tar-2.2.1.tgz#8e4d2a256c0e2185c6b18ad694aec968b83cb1d1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
block-stream "*"
fstream "^1.0.2"
inherits "2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
tar@^4, tar@^4.4.8:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "4.4.8"
resolved "https://registry.yarnpkg.com/tar/-/tar-4.4.8.tgz#b19eec3fde2a96e64666df9fdb40c5ca1bc3747d"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
chownr "^1.1.1"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 19:30:36 +03:00
fs-minipass "^1.2.5"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
minipass "^2.3.4"
minizlib "^1.1.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
mkdirp "^0.5.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
safe-buffer "^5.1.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
yallist "^3.0.2"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
tarn@^1.1.4:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
version "1.1.4"
resolved "https://registry.yarnpkg.com/tarn/-/tarn-1.1.4.tgz#aeeb85964b1afa0bbf381359c1167df237c27b6a"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
tarn@^1.1.5:
version "1.1.5"
resolved "https://registry.yarnpkg.com/tarn/-/tarn-1.1.5.tgz#7be88622e951738b9fa3fb77477309242cdddc2d"
integrity sha512-PMtJ3HCLAZeedWjJPgGnCvcphbCOMbtZpjKgLq3qM5Qq9aQud+XHrL0WlrlgnTyS8U+jrjGbEXprFcQrxPy52g==
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
tarn@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/tarn/-/tarn-2.0.0.tgz#c68499f69881f99ae955b4317ca7d212d942fdee"
integrity sha512-7rNMCZd3s9bhQh47ksAQd92ADFcJUjjbyOvyFjNLwTPpGieFHMC84S+LOzw0fx1uh6hnDz/19r8CPMnIjJlMMA==
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
text-encoding@^0.6.4:
version "0.6.4"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/text-encoding/-/text-encoding-0.6.4.tgz#e399a982257a276dae428bb92845cb71bdc26d19"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
text-table@^0.2.0, text-table@~0.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.2.0"
resolved "https://registry.yarnpkg.com/text-table/-/text-table-0.2.0.tgz#7f5ee823ae805207c00af2df4a84ec3fcfa570b4"
Removed run-sequence dev dependency no issue - not used
2017-11-28 21:34:43 +03:00
through2@^2.0.2, through2@^2.0.3:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "2.0.5"
resolved "https://registry.yarnpkg.com/through2/-/through2-2.0.5.tgz#01c1e39eb31d07cb7d03a96a70823260b23132cd"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
readable-stream "~2.3.6"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
xtend "~4.0.1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
through@^2.3.6:
version "2.3.8"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/through/-/through-2.3.8.tgz#0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
tildify@1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/tildify/-/tildify-1.2.0.tgz#dcec03f55dca9b7aa3e5b04f21817eb56e63588a"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
dependencies:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
os-homedir "^1.0.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
tildify@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/tildify/-/tildify-2.0.0.tgz#f205f3674d677ce698b7067a99e949ce03b4754a"
integrity sha512-Cc+OraorugtXNfs50hU9KS369rFXCfgGLpfCfvlc+Ud5u6VWmUQsOAa9HbTvheQdYnrdJqqv1e5oIqXppMYnSw==
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
tiny-lr@^1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/tiny-lr/-/tiny-lr-1.1.1.tgz#9fa547412f238fedb068ee295af8b682c98b2aab"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
body "^5.1.0"
debug "^3.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
faye-websocket "~0.10.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
livereload-js "^2.3.0"
object-assign "^4.1.0"
qs "^6.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
tmp@0.0.33, tmp@^0.0.33:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
version "0.0.33"
resolved "https://registry.yarnpkg.com/tmp/-/tmp-0.0.33.tgz#6d34335889768d21b2bcda0aa277ced3b1bfadf9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 15:27:14 +03:00
os-tmpdir "~1.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
to-buffer@^1.1.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/to-buffer/-/to-buffer-1.1.1.tgz#493bd48f62d7c43fcded313a03dcadb2e1213a80"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
to-object-path@^0.3.0:
version "0.3.0"
resolved "https://registry.yarnpkg.com/to-object-path/-/to-object-path-0.3.0.tgz#297588b7b0e7e0ac08e04e672f85c1f4999e17af"
dependencies:
kind-of "^3.0.2"
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 11:36:51 +03:00
to-readable-stream@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/to-readable-stream/-/to-readable-stream-1.0.0.tgz#ce0aa0c2f3df6adf852efb404a783e77c0475771"
integrity sha512-Iq25XBt6zD5npPhlLVXGFN3/gyR2/qODcKNNyTMd4vbm39HUaOiAM4PMq0eMVC/Tkxz+Zjdsc55g9yyz+Yq00Q==
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
to-regex-range@^2.1.0:
version "2.1.1"
resolved "https://registry.yarnpkg.com/to-regex-range/-/to-regex-range-2.1.1.tgz#7c80c17b9dfebe599e27367e0d4dd5590141db38"
dependencies:
is-number "^3.0.0"
repeat-string "^1.6.1"
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 17:16:15 +03:00
to-regex@^3.0.1, to-regex@^3.0.2:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/to-regex/-/to-regex-3.0.2.tgz#13cfdd9b336552f30b51f33a8ae1b42a7a7599ce"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
define-property "^2.0.2"
extend-shallow "^3.0.2"
regex-not "^1.0.2"
safe-regex "^1.1.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
toidentifier@1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/toidentifier/-/toidentifier-1.0.0.tgz#7e1be3470f1e77948bc43d94a3c8f4d7752ba553"
integrity sha512-yaOH/Pk/VEhBWWTlhI+qXxDFXlejDGcQipMlyxda9nthulaxLZUNcUqFxokp0vcYnvteJln5FNQDRrxj3YcbVw==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
tough-cookie@>=2.3.3:
version "3.0.0"
resolved "https://registry.yarnpkg.com/tough-cookie/-/tough-cookie-3.0.0.tgz#d2bceddebde633153ff20a52fa844a0dc71dacef"
integrity sha512-LHMvg+RBP/mAVNqVbOX8t+iJ+tqhBA/t49DuI7+IDAWHrASnesqSu1vWbKB7UrE2yk+HMFUBMadRGMkB4VCfog==
dependencies:
ip-regex "^3.0.0"
psl "^1.1.28"
punycode "^2.1.1"
🚀 Speed up initial generation of /amp/ content with many images no issue - update `amperize` to v0.5.0 which includes partial image loading and parallel network requests for fetching image dimensions
2019-06-10 11:51:25 +03:00
tough-cookie@^2.3.3, tough-cookie@^2.5.0:
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
version "2.5.0"
resolved "https://registry.yarnpkg.com/tough-cookie/-/tough-cookie-2.5.0.tgz#cd9fb2a0aa1d5a12b473bd9fb96fa3dcff65ade2"
integrity sha512-nlLsUzgm1kfLXSXfRZMc1KLAugd4hqJHDTvc2hDIwS3mZAfMEuMbc03SujMF+GEcpaX/qboeycw6iO8JwVv2+g==
dependencies:
psl "^1.1.28"
punycode "^2.1.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
tough-cookie@~2.4.3:
version "2.4.3"
resolved "https://registry.yarnpkg.com/tough-cookie/-/tough-cookie-2.4.3.tgz#53f36da3f47783b0925afa06ff9f3b165280f781"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
psl "^1.1.24"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
punycode "^1.4.1"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
tr46@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/tr46/-/tr46-1.0.1.tgz#a8b13fd6bfd2489519674ccde55ba3693b706d09"
integrity sha1-qLE/1r/SSJUZZ0zN5VujaTtwbQk=
dependencies:
punycode "^2.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
trim-newlines@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/trim-newlines/-/trim-newlines-1.0.0.tgz#5887966bb582a4503a41eb524f7d35011815a613"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
trim-newlines@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/trim-newlines/-/trim-newlines-2.0.0.tgz#b403d0b91be50c331dfc4b82eeceb22c3de16d20"
integrity sha1-tAPQuRvlDDMd/EuC7s6yLD3hbSA=
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 20:28:44 +03:00
tslib@^1.9.0:
version "1.9.3"
resolved "https://registry.yarnpkg.com/tslib/-/tslib-1.9.3.tgz#d7e4dd79245d85428c4d7e4822a79917954ca286"
Bump rewire to version 3.0.2 no issue - nothing to adapt for the major jump
2017-11-28 21:22:29 +03:00
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
tunnel-agent@^0.6.0:
version "0.6.0"
resolved "https://registry.yarnpkg.com/tunnel-agent/-/tunnel-agent-0.6.0.tgz#27a5dea06b36b04a0a9966774b290868f0fc40fd"
dependencies:
safe-buffer "^5.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
tweetnacl@^0.14.3, tweetnacl@~0.14.0:
version "0.14.5"
resolved "https://registry.yarnpkg.com/tweetnacl/-/tweetnacl-0.14.5.tgz#5ae68177f192d4456269d108afa93ff8743f4f64"
type-check@~0.3.2:
version "0.3.2"
resolved "https://registry.yarnpkg.com/type-check/-/type-check-0.3.2.tgz#5884cab512cf1d355e3fb784f30804b2b520db72"
dependencies:
prelude-ls "~1.1.2"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
type-detect@4.0.8, type-detect@^4.0.0, type-detect@^4.0.5:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "4.0.8"
resolved "https://registry.yarnpkg.com/type-detect/-/type-detect-4.0.8.tgz#7646fb5f18871cfbb7749e69bd39a6388eb7450c"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 20:19:23 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
type-is@^1.6.4, type-is@~1.6.16:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "1.6.16"
resolved "https://registry.yarnpkg.com/type-is/-/type-is-1.6.16.tgz#f89ce341541c672b25ee7ae3c73dee3b2be50194"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
media-typer "0.3.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
mime-types "~2.1.18"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update dependency express to v4.17.1
2019-07-02 03:40:19 +03:00
type-is@~1.6.17, type-is@~1.6.18:
Removed lib/members in favour of packages (#10739) * Installed `@tryghost/members-{api,auth-pages}` no-issue * Used @tryghost/members-auth-pages in member service no-issue * Used @tryghost/members-api in members service no-issue * Deleted core/server/lib/members no-issue * Fixed parent app tests no-issue Requiring the members api (via the `gateway` getter) was throwing an error, so we stub out the members service getters
2019-05-08 15:08:25 +03:00
version "1.6.18"
resolved "https://registry.yarnpkg.com/type-is/-/type-is-1.6.18.tgz#4e552cd05df09467dcbc4ef739de89f2cf37c131"
integrity sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==
dependencies:
media-typer "0.3.0"
mime-types "~2.1.24"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
typedarray@^0.0.6:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.0.6"
resolved "https://registry.yarnpkg.com/typedarray/-/typedarray-0.0.6.tgz#867ac74e3864187b1d3d47d996a78ec5c8830777"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
uc.micro@^1.0.1, uc.micro@^1.0.5:
Bump markdown-it to version 8.4.1 (#9484) no issue - which bumps the sub-dependency "uc.micro" to 1.0.5 - this version is now MIT licensed
2018-03-05 12:03:24 +03:00
version "1.0.5"
resolved "https://registry.yarnpkg.com/uc.micro/-/uc.micro-1.0.5.tgz#0c65f15f815aa08b560a61ce8b4db7ffc3f45376"
Update Build Tool
2019-07-02 03:34:50 +03:00
uglify-js@^3.1.4:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.4.9"
resolved "https://registry.yarnpkg.com/uglify-js/-/uglify-js-3.4.9.tgz#af02f180c1207d76432e473ed24a28f4a782bae3"
dependencies:
commander "~2.17.1"
source-map "~0.6.1"
Update Build Tool
2019-07-02 03:34:50 +03:00
uglify-js@^3.5.0:
version "3.6.0"
resolved "https://registry.yarnpkg.com/uglify-js/-/uglify-js-3.6.0.tgz#704681345c53a8b2079fb6cec294b05ead242ff5"
integrity sha512-W+jrUHJr3DXKhrsS7NUVxn3zqMOFn0hL/Ei6v0anCIMoKC93TjcflTagwIHLW7SfMFfiQuktQyFVCFHGUE0+yg==
dependencies:
commander "~2.20.0"
source-map "~0.6.1"
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 11:35:23 +03:00
uid-safe@~2.1.5:
version "2.1.5"
resolved "https://registry.yarnpkg.com/uid-safe/-/uid-safe-2.1.5.tgz#2b3d5c7240e8fc2e58f8aa269e5ee49c0857bd3a"
dependencies:
random-bytes "~1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
uid2@0.0.x:
version "0.0.3"
resolved "https://registry.yarnpkg.com/uid2/-/uid2-0.0.3.tgz#483126e11774df2f71b8b639dcd799c376162b82"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
unc-path-regex@^0.1.2:
version "0.1.2"
resolved "https://registry.yarnpkg.com/unc-path-regex/-/unc-path-regex-0.1.2.tgz#e73dd3d7b0d7c5ed86fbac6b0ae7d8c6a69d50fa"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bumped html-to-text from 3.3.0 to 4.0.0 refs #9389 - https://github.com/werk85/node-html-to-text/blob/master/CHANGELOG.md#version-400 - breaking change does not affect us
2019-01-21 17:02:52 +03:00
underscore.string@~3.3.4:
version "3.3.5"
resolved "https://registry.yarnpkg.com/underscore.string/-/underscore.string-3.3.5.tgz#fc2ad255b8bd309e239cbc5816fd23a9b7ea4023"
dependencies:
sprintf-js "^1.0.3"
util-deprecate "^1.0.2"
underscore@:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.9.1"
resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.9.1.tgz#06dce34a0e68a7babc29b365b8e74b8925203961"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Respected peer dependency for bookshelf no issue - need to use knex 0.14.x for now - Bookshelf already bumped the peer dependency in master, but was not released yet
2019-01-22 10:58:28 +03:00
underscore@1.7.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.7.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.7.0.tgz#6bbaf0877500d36be34ecaa584e0db9fef035209"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
underscore@~1.8.3:
version "1.8.3"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.8.3.tgz#4f3fb53b106e6097fcf9cb4109f2a5e9bdfa5022"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
Updated to use slugify method from SDK for safe string refs #10618 - Updated lib safe string security method
2019-05-07 07:48:28 +03:00
unidecode@^0.1.8:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.1.8"
resolved "https://registry.yarnpkg.com/unidecode/-/unidecode-0.1.8.tgz#efbb301538bc45246a9ac8c559d72f015305053e"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
union-value@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/union-value/-/union-value-1.0.0.tgz#5c71c34cb5bad5dcebe3ea0cd08207ba5aa1aea4"
dependencies:
arr-union "^3.1.0"
get-value "^2.0.6"
is-extendable "^0.1.1"
set-value "^0.4.3"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
uniq@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/uniq/-/uniq-1.0.1.tgz#b31c5ae8254844a3a8281541ce2b04b865a734ff"
uniqs@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/uniqs/-/uniqs-2.0.0.tgz#ffede4b36b25290696e6e165d4a59edb998e6b02"
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 10:51:54 +03:00
universalify@^0.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/universalify/-/universalify-0.1.2.tgz#b646f69be3942dabcecc9d6639c80dc105efaa66"
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 10:51:54 +03:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
unpipe@1.0.0, unpipe@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/unpipe/-/unpipe-1.0.0.tgz#b2bf4ee8514aae6165b4817829d21b2ef49904ec"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
unset-value@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/unset-value/-/unset-value-1.0.0.tgz#8376873f7d2335179ffb1e6fc3a8ed0dfc8ab559"
dependencies:
has-value "^0.3.1"
isobject "^3.0.0"
Bumped gscan version to 2.4.0 no issue - Updated theme fixtures to be in line with new deprecation rules for {{lang}} and {{@blog.*}} helpers introduced with https://github.com/TryGhost/gscan/pull/180
2019-04-02 07:59:16 +03:00
upath@^1.1.0:
version "1.1.2"
resolved "https://registry.yarnpkg.com/upath/-/upath-1.1.2.tgz#3db658600edaeeccbe6db5e684d67ee8c2acd068"
integrity sha512-kXpym8nmDmlCBr7nKdIx8P2jNBa+pBpIUFRnKJ4dr8htyYGJFokkr2ZvERRtUN+9SY+JqXouNgUPtv6JQva/2Q==
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
uri-js@^4.2.2:
version "4.2.2"
resolved "https://registry.yarnpkg.com/uri-js/-/uri-js-4.2.2.tgz#94c540e1ff772956e2299507c010aea6c8838eb0"
dependencies:
punycode "^2.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
uri-path@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/uri-path/-/uri-path-1.0.0.tgz#9747f018358933c31de0fccfd82d138e67262e32"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
urix@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/urix/-/urix-0.1.0.tgz#da937f7a62e21fec1fd18d49b35c2935067a6c72"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 23:35:46 +03:00
url-parse-lax@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/url-parse-lax/-/url-parse-lax-3.0.0.tgz#16b5cafc07dbe3676c1b1999177823d6503acb0c"
dependencies:
prepend-http "^2.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
use@^3.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.1.1"
resolved "https://registry.yarnpkg.com/use/-/use-3.1.1.tgz#d50c8cac79a19fbc20f2911f56eb973f4e10070f"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 21:43:33 +03:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
util-deprecate@^1.0.1, util-deprecate@^1.0.2, util-deprecate@~1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/util-deprecate/-/util-deprecate-1.0.2.tgz#450d4dc9fa70de732762fbd2d4a28981419a0ccf"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
utils-merge@1.0.1, utils-merge@1.x.x:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/utils-merge/-/utils-merge-1.0.1.tgz#9f95710f50a267947b2ccc124741c1028427e713"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
uuid@3.3.2, uuid@^3.0.0, uuid@^3.2.1, uuid@^3.3.2:
Bump dependencies no issue - ghost-ignition@2.9.4 - fixed log rotation (https://github.com/TryGhost/Ignition/commit/c8f256430a5d03c6bce7872910eecc5576fd4b55) - multer@1.3.1 - uuid@3.3.2 - nock@9.4.0
2018-07-02 13:28:30 +03:00
version "3.3.2"
resolved "https://registry.yarnpkg.com/uuid/-/uuid-3.3.2.tgz#1b4af4955eb3077c501c23872fc6513811587131"
Update dependency knex to v0.19.0
2019-07-15 11:20:39 +03:00
v8flags@^3.1.1, v8flags@~3.1.1:
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
version "3.1.2"
resolved "https://registry.yarnpkg.com/v8flags/-/v8flags-3.1.2.tgz#fc5cd0c227428181e6c29b2992e4f8f1da5e0c9f"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
dependencies:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 18:27:06 +03:00
homedir-polyfill "^1.0.1"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 23:19:34 +03:00
Update dependency brute-knex to v4
2019-07-08 03:27:07 +03:00
v8flags@^3.1.3:
version "3.1.3"
resolved "https://registry.yarnpkg.com/v8flags/-/v8flags-3.1.3.tgz#fc9dc23521ca20c5433f81cc4eb9b3033bb105d8"
integrity sha512-amh9CCg3ZxkzQ48Mhcb8iX7xpAfYJgePHxWMQCBWECpOSqJUXgY26ncA61UTV0BkPqfhcy6mzwCIoP4ygxpW8w==
dependencies:
homedir-polyfill "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
validate-npm-package-license@^3.0.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 11:45:51 +03:00
version "3.0.4"
resolved "https://registry.yarnpkg.com/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz#fc91f6b9c7ba15c857f4cb2c5defeec39d4f410a"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
spdx-correct "^3.0.0"
spdx-expression-parse "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
🎨 gscan 1.1.0 & optimisations refs #8222 - differentiate between errors and fatal errors - use gscan errors in theme middleware - Adds a new `error()` method to `currentActiveTheme` constructor which will return the errors we receive from gscan - In middleware, if a theme couldn't be activated because it's invalid, we'll fetch the erros and send them to our error handler. We also use a new property `hideStack` to control, if the stack (in dev mode and if available) should be shown or the gscan errors (in prod mode, or in dev if no stack error) - In our error handler we use this conditional to send a new property `gscan` to our error theme - In `error.hbs` we'll iterate through possible `gscan` error objects and render them. - remove stack printing - stack for theme developers in development mode doesn't make sense - stack in production doesn't make sense - the stack is usually hard to read - if you are developer you can read the error stack on the server log - utils.packages: transform native error into Ghost error - use `onlyFatalErrors` for gscan format and differeniate fatal errors vo.2 - optimise bootstrap error handling - transform theme is missing into an error - add new translation key - show html tags for error.hbs template: rule
2017-05-31 19:42:42 +03:00
validator@6.3.0, validator@^6.3.0:
Update validator to version 6.3.0 🚀 (#8049) * chore(package): update validator to version 6.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-03-03 17:04:38 +03:00
version "6.3.0"
resolved "https://registry.yarnpkg.com/validator/-/validator-6.3.0.tgz#47ce23ed8d4eaddfa9d4b8ef0071b6cf1078d7c8"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Bump amperize to version 0.3.6 (#9264) no issue New version contains - dependency updates - Node v8 support - Eslint refactoring
2017-11-21 17:00:04 +03:00
validator@^9.1.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
version "9.4.1"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/validator/-/validator-9.4.1.tgz#abf466d398b561cd243050112c6ff1de6cc12663"
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 12:12:03 +03:00
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-12 00:59:22 +03:00
vary@^1, vary@~1.1.2:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 13:37:58 +03:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/vary/-/vary-1.1.2.tgz#2299f02c6ded30d4a5961b0b9f74524a18f634fc"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
vendors@^1.0.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 22:13:01 +03:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/vendors/-/vendors-1.0.2.tgz#7fcb5eef9f5623b156bcea89ec37d63676f21801"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
verror@1.10.0:
version "1.10.0"
resolved "https://registry.yarnpkg.com/verror/-/verror-1.10.0.tgz#3a105ca17053af55d6e270c1f8288682e18da400"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
assert-plus "^1.0.0"
core-util-is "1.0.2"
extsprintf "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
w3c-hr-time@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/w3c-hr-time/-/w3c-hr-time-1.0.1.tgz#82ac2bff63d950ea9e3189a58a65625fedf19045"
integrity sha1-gqwr/2PZUOqeMYmlimViX+3xkEU=
dependencies:
browser-process-hrtime "^0.1.2"
✨ Added caption and language extraction for code blocks when converting HTML via API no issue - update @tryghost/html-to-mobiledoc to v0.3.0 - uses updated @tryghost/kg-parser-plugins that is now shared with Ghost-Admin
2019-05-03 13:55:38 +03:00
w3c-xmlserializer@^1.1.2:
version "1.1.2"
resolved "https://registry.yarnpkg.com/w3c-xmlserializer/-/w3c-xmlserializer-1.1.2.tgz#30485ca7d70a6fd052420a3d12fd90e6339ce794"
integrity sha512-p10l/ayESzrBMYWRID6xbuCKh2Fp77+sA0doRuGn4tTIMrrZVeqfpKjXHY+oDh3K4nLdPgNwMTVP6Vp4pvqbNg==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
domexception "^1.0.1"
webidl-conversions "^4.0.2"
xml-name-validator "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
walkdir@^0.0.11:
version "0.0.11"
resolved "https://registry.yarnpkg.com/walkdir/-/walkdir-0.0.11.tgz#a16d025eb931bd03b52f308caed0f40fcebe9532"
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
webidl-conversions@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/webidl-conversions/-/webidl-conversions-4.0.2.tgz#a855980b1f0b6b359ba1d5d9fb39ae941faa63ad"
integrity sha512-YQ+BmxuTgd6UXZW3+ICGfyqRyHXVlD5GtQr5+qjiNW7bF0cqrzX500HVXPBOvgXb5YnzDd+h0zqyv61KUD7+Sg==
🔥 remove gulp (#8159) * remove gulpfile * remove gulp dependencies * Update README.md
2017-03-14 17:20:53 +03:00
websocket-driver@>=0.5.1:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "0.7.0"
resolved "https://registry.yarnpkg.com/websocket-driver/-/websocket-driver-0.7.0.tgz#0caf9d2d755d93aee049d4bdd0d3fe2cca2a24eb"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
http-parser-js ">=0.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
websocket-extensions ">=0.1.1"
websocket-extensions@>=0.1.1:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "0.1.3"
resolved "https://registry.yarnpkg.com/websocket-extensions/-/websocket-extensions-0.1.3.tgz#5d2ff22977003ec687a4b87073dfbbac146ccf29"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
whatwg-encoding@^1.0.1, whatwg-encoding@^1.0.5:
version "1.0.5"
resolved "https://registry.yarnpkg.com/whatwg-encoding/-/whatwg-encoding-1.0.5.tgz#5abacf777c32166a51d085d6b4f3e7d27113ddb0"
integrity sha512-b5lim54JOPN9HtzvK9HFXvBma/rnfFeqsic0hSpjtDbVxR3dJKLc+KB4V6GgiGOvl7CY/KNh8rxSo9DKQrnUEw==
dependencies:
iconv-lite "0.4.24"
Bumped and pinned version for @tryghost/html-to-mobiledoc no issue
2019-02-15 22:07:01 +03:00
whatwg-mimetype@^2.2.0, whatwg-mimetype@^2.3.0:
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
version "2.3.0"
resolved "https://registry.yarnpkg.com/whatwg-mimetype/-/whatwg-mimetype-2.3.0.tgz#3d4b1e0312d2079879f826aff18dbeeca5960fbf"
integrity sha512-M4yMwr6mAnQz76TbJm914+gPpB/nCwvZbJU28cUD6dR004SAxDLOOSUaB1JDRqLtaOV/vi0IC5lEAGFgrjGv/g==
whatwg-url@^7.0.0:
version "7.0.0"
resolved "https://registry.yarnpkg.com/whatwg-url/-/whatwg-url-7.0.0.tgz#fde926fa54a599f3adf82dff25a9f7be02dc6edd"
integrity sha512-37GeVSIJ3kn1JgKyjiYNmSLP1yzbpb29jdmwBSgkD9h40/hyrR/OifpVUndji3tmwGgD8qpw7iQu3RSbCrBpsQ==
dependencies:
lodash.sortby "^4.7.0"
tr46 "^1.0.1"
webidl-conversions "^4.0.2"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 12:30:21 +03:00
whet.extend@~0.9.9:
version "0.9.9"
resolved "https://registry.yarnpkg.com/whet.extend/-/whet.extend-0.9.9.tgz#f877d5bf648c97e5aa542fadc16d6a259b9c11a1"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
which-module@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/which-module/-/which-module-2.0.0.tgz#d9ef07dce77b9902b8a3a8fa4b31c3e3f7e6e87a"
integrity sha1-2e8H3Od7mQK4o6j6SzHD4/fm6Ho=
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
which-pm-runs@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/which-pm-runs/-/which-pm-runs-1.0.0.tgz#670b3afbc552e0b55df6b7780ca74615f23ad1cb"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
which@1, which@1.3.1, which@^1.2.14, which@^1.2.9, which@~1.3.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.3.1"
resolved "https://registry.yarnpkg.com/which/-/which-1.3.1.tgz#a45043d54f5805316da8d62f9f50918d3da70b0a"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
dependencies:
isexe "^2.0.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
wide-align@1.1.3, wide-align@^1.1.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/wide-align/-/wide-align-1.1.3.tgz#ae074e6bdc0c14a431e804e624549c633b000457"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 16:47:33 +03:00
string-width "^1.0.2 || 2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 21:07:33 +03:00
window-size@^0.1.4:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "0.1.4"
resolved "https://registry.yarnpkg.com/window-size/-/window-size-0.1.4.tgz#f8e1aa1ee5a53ec5bf151ffa09742a6ad7697876"
wordwrap@~0.0.2:
version "0.0.3"
resolved "https://registry.yarnpkg.com/wordwrap/-/wordwrap-0.0.3.tgz#a3d5da6cd5c0bc0008d37234bbaf1bed63059107"
Removed coverage tasks from Gruntfile refs #9441
2019-04-08 17:12:48 +03:00
wordwrap@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/wordwrap/-/wordwrap-1.0.0.tgz#27584810891456a4171c8d0226441ade90cbcaeb"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
wrap-ansi@^2.0.0:
version "2.1.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/wrap-ansi/-/wrap-ansi-2.1.0.tgz#d8fc3d284dd05794fe84973caecdd1cf824fdd85"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
string-width "^1.0.1"
strip-ansi "^3.0.1"
wrappy@1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/wrappy/-/wrappy-1.0.2.tgz#b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
write@1.0.3:
version "1.0.3"
resolved "https://registry.yarnpkg.com/write/-/write-1.0.3.tgz#0800e14523b923a387e415123c865616aae0f5c3"
integrity sha512-/lg70HAjtkUgWPVZhZcm+T4hkL8Zbtp1nFNOn3lRrxnlv50SRBv7cR7RqR+GMsd3hUXy9hWBo4CHTbFTcOYwig==
dependencies:
mkdirp "^0.5.1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 16:44:54 +03:00
write@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/write/-/write-0.2.1.tgz#5fc03828e264cea3fe91455476f7a3c566cb0757"
dependencies:
mkdirp "^0.5.1"
Bumped and pinned version for @tryghost/html-to-mobiledoc no issue
2019-02-15 22:07:01 +03:00
ws@^6.1.2:
version "6.1.3"
resolved "https://registry.yarnpkg.com/ws/-/ws-6.1.3.tgz#d2d2e5f0e3c700ef2de89080ebc0ac6e1bf3a72d"
integrity sha512-tbSxiT+qJI223AP4iLfQbkbxkwdFcneYinM2+x46Gx2wgvbaOMO36czfdfVUBRTHvzAMRhDd98sA5d/BuWbQdg==
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
dependencies:
async-limiter "~1.0.0"
xml-name-validator@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/xml-name-validator/-/xml-name-validator-3.0.0.tgz#6ae73e06de4d8c6e47f9fb181f78d648ad457c6a"
integrity sha512-A5CUptxDsvxKJEU3yO6DuWBSJz/qizqzJKOMIfUJHETbBw/sFaDxgd6fxm1ewUaM0jZ444Fc5vC5ROYurg/4Pw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
xml2js@0.2.6:
version "0.2.6"
resolved "https://registry.yarnpkg.com/xml2js/-/xml2js-0.2.6.tgz#d209c4e4dda1fc9c452141ef41c077f5adfdf6c4"
dependencies:
sax "0.4.2"
xml@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/xml/-/xml-1.0.1.tgz#78ba72020029c5bc87b8a81a3cfcd74b4a2fc1e5"
xmlbuilder@0.4.2:
version "0.4.2"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/xmlbuilder/-/xmlbuilder-0.4.2.tgz#1776d65f3fdbad470a08d8604cdeb1c4e540ff83"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
✨ Added posibility to accept html as an input source for post closes #10471 - Allows accepting HTML input for /posts endpoint when `?source=html` is present in query parameter along with `html` in request payload
2019-01-18 14:29:56 +03:00
xmlchars@^1.3.1:
version "1.3.1"
resolved "https://registry.yarnpkg.com/xmlchars/-/xmlchars-1.3.1.tgz#1dda035f833dbb4f86a0c28eaa6ca769214793cf"
integrity sha512-tGkGJkN8XqCod7OT+EvGYK5Z4SfDQGD30zAa58OcnAa0RRWgzUEK72tkXhsX1FZd+rgnhRxFtmO+ihkp8LHSkw==
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
xoauth2@~0.1.8:
version "0.1.8"
resolved "https://registry.yarnpkg.com/xoauth2/-/xoauth2-0.1.8.tgz#b916ff10ecfb54320f16f24a3e975120653ab0d2"
xregexp@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/xregexp/-/xregexp-2.0.0.tgz#52a63e56ca0b84a7f3a5f3d61872f126ad7a5943"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
xtend@^4.0.0, xtend@^4.0.1, xtend@~4.0.0, xtend@~4.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "4.0.1"
resolved "https://registry.yarnpkg.com/xtend/-/xtend-4.0.1.tgz#a5c6d532be656e23db820efb943a1f04998d63af"
y18n@^3.2.0:
version "3.2.1"
resolved "https://registry.yarnpkg.com/y18n/-/y18n-3.2.1.tgz#6d15fba884c08679c0d77e88e7759e811e07fa41"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
"y18n@^3.2.1 || ^4.0.0", y18n@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/y18n/-/y18n-4.0.0.tgz#95ef94f85ecc81d007c264e190a120f0a3c8566b"
integrity sha512-r9S/ZyXu/Xu9q1tYlpsLIsa3EeLXXk0VwlxqTcFRfg9EhMW+17kbt9G0NrgCmhGb5vT2hyhJZLfDGx+7+5Uj/w==
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
yallist@^2.1.2:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 15:13:26 +03:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/yallist/-/yallist-2.1.2.tgz#1c11f9218f076089a47dd512f93c6699a6a81d52"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 20:49:42 +03:00
yallist@^3.0.0, yallist@^3.0.2:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 13:53:40 +03:00
version "3.0.3"
resolved "https://registry.yarnpkg.com/yallist/-/yallist-3.0.3.tgz#b4b049e314be545e3ce802236d6cd22cd91c3de9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
yargs-parser@13.0.0:
version "13.0.0"
resolved "https://registry.yarnpkg.com/yargs-parser/-/yargs-parser-13.0.0.tgz#3fc44f3e76a8bdb1cc3602e860108602e5ccde8b"
integrity sha512-w2LXjoL8oRdRQN+hOyppuXs+V/fVAYtpcrRxZuF7Kt/Oc+Jr2uAcVntaUTNT6w5ihoWfFDpNY8CPx1QskxZ/pw==
dependencies:
camelcase "^5.0.0"
decamelize "^1.2.0"
🐛 Fixed postinstall script when running on Windows no-issue The previous postinstall script used the unix specific `cp` command, which caused installing on Windows to break. This replaces it with an npm module which handles copying files agnostic to platform.
2019-05-01 19:00:04 +03:00
yargs-parser@^10.0.0:
version "10.1.0"
resolved "https://registry.yarnpkg.com/yargs-parser/-/yargs-parser-10.1.0.tgz#7202265b89f7e9e9f2e5765e0fe735a905edbaa8"
integrity sha512-VCIyR1wJoEBZUqk5PA+oOBF6ypbwh5aNB3I50guxAL/quggdfs4TtNHQrSazFA3fYZ+tEqfs0zIGlv0c/rgjbQ==
dependencies:
camelcase "^4.1.0"
Update Test & linting packages (major) (#10858) no issue - Updated Test & linting packages - Updated use of hasOwnProperty - Using Object.prototype.hasOwnProperty instead (ref. eslint.org/docs/rules/no-prototype-builtins) - Removed already defined built-in global variable Intl - Applied `--fix` with lint command on `core/test` folder - The rules were broken because some of them were made stricter for `eslint: recommended` ruleset (ref. https://eslint.org/docs/user-guide/migrating-to-6.0.0#eslint-recommended-changes) - Removed redundant global variable declarations to pass linting
2019-07-05 14:40:43 +03:00
yargs-parser@^11.1.1:
version "11.1.1"
resolved "https://registry.yarnpkg.com/yargs-parser/-/yargs-parser-11.1.1.tgz#879a0865973bca9f6bab5cbdf3b1c67ec7d3bcf4"
integrity sha512-C6kB/WJDiaxONLJQnF8ccx9SEeoTTLek8RVbaOIsrAUS8VrBEXfmeSnCZxygc+XC2sNMBIwOOnfcxiynjHsVSQ==
dependencies:
camelcase "^5.0.0"
decamelize "^1.2.0"
yargs-parser@^13.0.0:
version "13.1.1"
resolved "https://registry.yarnpkg.com/yargs-parser/-/yargs-parser-13.1.1.tgz#d26058532aa06d365fe091f6a1fc06b2f7e5eca0"
integrity sha512-oVAVsHz6uFrg3XQheFII8ESO2ssAf9luWuAd6Wexsu4F3OtIW0o8IribPXYrD4WC24LWtPrJlGy87y5udK+dxQ==
dependencies:
camelcase "^5.0.0"
decamelize "^1.2.0"
yargs-unparser@1.5.0:
version "1.5.0"
resolved "https://registry.yarnpkg.com/yargs-unparser/-/yargs-unparser-1.5.0.tgz#f2bb2a7e83cbc87bb95c8e572828a06c9add6e0d"
integrity sha512-HK25qidFTCVuj/D1VfNiEndpLIeJN78aqgR23nL3y4N0U/91cOAzqfHlF8n2BvoNDcZmJKin3ddNSvOxSr8flw==
dependencies:
flat "^4.1.0"
lodash "^4.17.11"
yargs "^12.0.5"
yargs@13.2.2:
version "13.2.2"
resolved "https://registry.yarnpkg.com/yargs/-/yargs-13.2.2.tgz#0c101f580ae95cea7f39d927e7770e3fdc97f993"
integrity sha512-WyEoxgyTD3w5XRpAQNYUB9ycVH/PQrToaTXdYXRdOXvEy1l19br+VJsc0vcO8PTGg5ro/l/GY7F/JMEBmI0BxA==
dependencies:
cliui "^4.0.0"
find-up "^3.0.0"
get-caller-file "^2.0.1"
os-locale "^3.1.0"
require-directory "^2.1.1"
require-main-filename "^2.0.0"
set-blocking "^2.0.0"
string-width "^3.0.0"
which-module "^2.0.0"
y18n "^4.0.0"
yargs-parser "^13.0.0"
yargs@^12.0.5:
version "12.0.5"
resolved "https://registry.yarnpkg.com/yargs/-/yargs-12.0.5.tgz#05f5997b609647b64f66b81e3b4b10a368e7ad13"
integrity sha512-Lhz8TLaYnxq/2ObqHDql8dX8CJi97oHxrjUcYtzKbbykPtVW9WB+poxI+NM2UIzsMgNCZTIf0AQwsjK5yMAqZw==
dependencies:
cliui "^4.0.0"
decamelize "^1.2.0"
find-up "^3.0.0"
get-caller-file "^1.0.1"
os-locale "^3.0.0"
require-directory "^2.1.1"
require-main-filename "^1.0.1"
set-blocking "^2.0.0"
string-width "^2.0.0"
which-module "^2.0.0"
y18n "^3.2.1 || ^4.0.0"
yargs-parser "^11.1.1"
🔥 remove gulp (#8159) * remove gulpfile * remove gulp dependencies * Update README.md
2017-03-14 17:20:53 +03:00
yargs@^3.19.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
version "3.32.0"
Bumped dependencies no issue
2019-01-21 15:33:20 +03:00
resolved "https://registry.yarnpkg.com/yargs/-/yargs-3.32.0.tgz#03088e9ebf9e756b69751611d2a5ef591482c995"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
camelcase "^2.0.1"
cliui "^3.0.3"
decamelize "^1.1.1"
os-locale "^1.4.0"
string-width "^1.0.1"
window-size "^0.1.4"
y18n "^3.2.0"
yauzl@2.4.1:
version "2.4.1"
resolved "https://registry.yarnpkg.com/yauzl/-/yauzl-2.4.1.tgz#9528f442dab1b2284e58b4379bb194e22e0c4005"
dependencies:
fd-slicer "~1.0.1"
zip-stream@^1.1.0:
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/zip-stream/-/zip-stream-1.2.0.tgz#a8bc45f4c1b49699c6b90198baacaacdbcd4ba04"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
dependencies:
archiver-utils "^1.3.0"
Optimised dependency tree no issue
2017-11-17 18:13:42 +03:00
compress-commons "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 18:32:49 +03:00
lodash "^4.8.0"
readable-stream "^2.0.0"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
zip-stream@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/zip-stream/-/zip-stream-2.1.0.tgz#4f94246b64341536b86318bd556654278812b726"
integrity sha512-F/xoLqlQShgvn1BzHQCNiYIoo2R93GQIMH+tA6JC3ckMDkme4bnhEEXSferZcG5ea/6bZNx3GqSUHqT8TUO6uQ==
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 16:06:46 +03:00
dependencies:
Update dependency archiver to v3.0.3
2019-07-22 03:31:16 +03:00
archiver-utils "^2.1.0"
compress-commons "^2.0.0"
readable-stream "^3.4.0"
Reference in New Issue Copy Permalink